osm.etsi.org Git - osm/devops.git/blob

   1 ---
   2 # This manifest was generated by flux. DO NOT EDIT.
   3 # Flux Version: v2.4.0
   4 # Components: source-controller,kustomize-controller,helm-controller,notification-controller
   5 apiVersion: v1
   6 kind: Namespace
   7 metadata:
   8   labels:
   9     app.kubernetes.io/instance: flux-system
  10     app.kubernetes.io/part-of: flux
  11     app.kubernetes.io/version: v2.4.0
  12     pod-security.kubernetes.io/warn: restricted
  13     pod-security.kubernetes.io/warn-version: latest
  14   name: flux-system
  15 ---
  16 apiVersion: networking.k8s.io/v1
  17 kind: NetworkPolicy
  18 metadata:
  19   labels:
  20     app.kubernetes.io/instance: flux-system
  21     app.kubernetes.io/part-of: flux
  22     app.kubernetes.io/version: v2.4.0
  23   name: allow-egress
  24   namespace: flux-system
  25 spec:
  26   egress:
  27   - {}
  28   ingress:
  29   - from:
  30     - podSelector: {}
  31   podSelector: {}
  32   policyTypes:
  33   - Ingress
  34   - Egress
  35 ---
  36 apiVersion: networking.k8s.io/v1
  37 kind: NetworkPolicy
  38 metadata:
  39   labels:
  40     app.kubernetes.io/instance: flux-system
  41     app.kubernetes.io/part-of: flux
  42     app.kubernetes.io/version: v2.4.0
  43   name: allow-scraping
  44   namespace: flux-system
  45 spec:
  46   ingress:
  47   - from:
  48     - namespaceSelector: {}
  49     ports:
  50     - port: 8080
  51       protocol: TCP
  52   podSelector: {}
  53   policyTypes:
  54   - Ingress
  55 ---
  56 apiVersion: networking.k8s.io/v1
  57 kind: NetworkPolicy
  58 metadata:
  59   labels:
  60     app.kubernetes.io/instance: flux-system
  61     app.kubernetes.io/part-of: flux
  62     app.kubernetes.io/version: v2.4.0
  63   name: allow-webhooks
  64   namespace: flux-system
  65 spec:
  66   ingress:
  67   - from:
  68     - namespaceSelector: {}
  69   podSelector:
  70     matchLabels:
  71       app: notification-controller
  72   policyTypes:
  73   - Ingress
  74 ---
  75 apiVersion: v1
  76 kind: ResourceQuota
  77 metadata:
  78   labels:
  79     app.kubernetes.io/instance: flux-system
  80     app.kubernetes.io/part-of: flux
  81     app.kubernetes.io/version: v2.4.0
  82   name: critical-pods-flux-system
  83   namespace: flux-system
  84 spec:
  85   hard:
  86     pods: "1000"
  87   scopeSelector:
  88     matchExpressions:
  89     - operator: In
  90       scopeName: PriorityClass
  91       values:
  92       - system-node-critical
  93       - system-cluster-critical
  94 ---
  95 apiVersion: rbac.authorization.k8s.io/v1
  96 kind: ClusterRole
  97 metadata:
  98   labels:
  99     app.kubernetes.io/instance: flux-system
 100     app.kubernetes.io/part-of: flux
 101     app.kubernetes.io/version: v2.4.0
 102   name: crd-controller-flux-system
 103 rules:
 104 - apiGroups:
 105   - source.toolkit.fluxcd.io
 106   resources:
 107   - '*'
 108   verbs:
 109   - '*'
 110 - apiGroups:
 111   - kustomize.toolkit.fluxcd.io
 112   resources:
 113   - '*'
 114   verbs:
 115   - '*'
 116 - apiGroups:
 117   - helm.toolkit.fluxcd.io
 118   resources:
 119   - '*'
 120   verbs:
 121   - '*'
 122 - apiGroups:
 123   - notification.toolkit.fluxcd.io
 124   resources:
 125   - '*'
 126   verbs:
 127   - '*'
 128 - apiGroups:
 129   - image.toolkit.fluxcd.io
 130   resources:
 131   - '*'
 132   verbs:
 133   - '*'
 134 - apiGroups:
 135   - ""
 136   resources:
 137   - namespaces
 138   - secrets
 139   - configmaps
 140   - serviceaccounts
 141   verbs:
 142   - get
 143   - list
 144   - watch
 145 - apiGroups:
 146   - ""
 147   resources:
 148   - events
 149   verbs:
 150   - create
 151   - patch
 152 - apiGroups:
 153   - ""
 154   resources:
 155   - configmaps
 156   verbs:
 157   - get
 158   - list
 159   - watch
 160   - create
 161   - update
 162   - patch
 163   - delete
 164 - apiGroups:
 165   - ""
 166   resources:
 167   - configmaps/status
 168   verbs:
 169   - get
 170   - update
 171   - patch
 172 - apiGroups:
 173   - coordination.k8s.io
 174   resources:
 175   - leases
 176   verbs:
 177   - get
 178   - list
 179   - watch
 180   - create
 181   - update
 182   - patch
 183   - delete
 184 - nonResourceURLs:
 185   - /livez/ping
 186   verbs:
 187   - head
 188 ---
 189 apiVersion: rbac.authorization.k8s.io/v1
 190 kind: ClusterRole
 191 metadata:
 192   labels:
 193     app.kubernetes.io/instance: flux-system
 194     app.kubernetes.io/part-of: flux
 195     app.kubernetes.io/version: v2.4.0
 196     rbac.authorization.k8s.io/aggregate-to-admin: "true"
 197     rbac.authorization.k8s.io/aggregate-to-edit: "true"
 198   name: flux-edit-flux-system
 199 rules:
 200 - apiGroups:
 201   - notification.toolkit.fluxcd.io
 202   - source.toolkit.fluxcd.io
 203   - helm.toolkit.fluxcd.io
 204   - image.toolkit.fluxcd.io
 205   - kustomize.toolkit.fluxcd.io
 206   resources:
 207   - '*'
 208   verbs:
 209   - create
 210   - delete
 211   - deletecollection
 212   - patch
 213   - update
 214 ---
 215 apiVersion: rbac.authorization.k8s.io/v1
 216 kind: ClusterRole
 217 metadata:
 218   labels:
 219     app.kubernetes.io/instance: flux-system
 220     app.kubernetes.io/part-of: flux
 221     app.kubernetes.io/version: v2.4.0
 222     rbac.authorization.k8s.io/aggregate-to-admin: "true"
 223     rbac.authorization.k8s.io/aggregate-to-edit: "true"
 224     rbac.authorization.k8s.io/aggregate-to-view: "true"
 225   name: flux-view-flux-system
 226 rules:
 227 - apiGroups:
 228   - notification.toolkit.fluxcd.io
 229   - source.toolkit.fluxcd.io
 230   - helm.toolkit.fluxcd.io
 231   - image.toolkit.fluxcd.io
 232   - kustomize.toolkit.fluxcd.io
 233   resources:
 234   - '*'
 235   verbs:
 236   - get
 237   - list
 238   - watch
 239 ---
 240 apiVersion: rbac.authorization.k8s.io/v1
 241 kind: ClusterRoleBinding
 242 metadata:
 243   labels:
 244     app.kubernetes.io/instance: flux-system
 245     app.kubernetes.io/part-of: flux
 246     app.kubernetes.io/version: v2.4.0
 247   name: cluster-reconciler-flux-system
 248 roleRef:
 249   apiGroup: rbac.authorization.k8s.io
 250   kind: ClusterRole
 251   name: cluster-admin
 252 subjects:
 253 - kind: ServiceAccount
 254   name: kustomize-controller
 255   namespace: flux-system
 256 - kind: ServiceAccount
 257   name: helm-controller
 258   namespace: flux-system
 259 ---
 260 apiVersion: rbac.authorization.k8s.io/v1
 261 kind: ClusterRoleBinding
 262 metadata:
 263   labels:
 264     app.kubernetes.io/instance: flux-system
 265     app.kubernetes.io/part-of: flux
 266     app.kubernetes.io/version: v2.4.0
 267   name: crd-controller-flux-system
 268 roleRef:
 269   apiGroup: rbac.authorization.k8s.io
 270   kind: ClusterRole
 271   name: crd-controller-flux-system
 272 subjects:
 273 - kind: ServiceAccount
 274   name: kustomize-controller
 275   namespace: flux-system
 276 - kind: ServiceAccount
 277   name: helm-controller
 278   namespace: flux-system
 279 - kind: ServiceAccount
 280   name: source-controller
 281   namespace: flux-system
 282 - kind: ServiceAccount
 283   name: notification-controller
 284   namespace: flux-system
 285 - kind: ServiceAccount
 286   name: image-reflector-controller
 287   namespace: flux-system
 288 - kind: ServiceAccount
 289   name: image-automation-controller
 290   namespace: flux-system
 291 ---
 292 apiVersion: apiextensions.k8s.io/v1
 293 kind: CustomResourceDefinition
 294 metadata:
 295   annotations:
 296     controller-gen.kubebuilder.io/version: v0.16.1
 297   labels:
 298     app.kubernetes.io/component: source-controller
 299     app.kubernetes.io/instance: flux-system
 300     app.kubernetes.io/part-of: flux
 301     app.kubernetes.io/version: v2.4.0
 302   name: buckets.source.toolkit.fluxcd.io
 303 spec:
 304   group: source.toolkit.fluxcd.io
 305   names:
 306     kind: Bucket
 307     listKind: BucketList
 308     plural: buckets
 309     singular: bucket
 310   scope: Namespaced
 311   versions:
 312   - additionalPrinterColumns:
 313     - jsonPath: .spec.endpoint
 314       name: Endpoint
 315       type: string
 316     - jsonPath: .metadata.creationTimestamp
 317       name: Age
 318       type: date
 319     - jsonPath: .status.conditions[?(@.type=="Ready")].status
 320       name: Ready
 321       type: string
 322     - jsonPath: .status.conditions[?(@.type=="Ready")].message
 323       name: Status
 324       type: string
 325     name: v1
 326     schema:
 327       openAPIV3Schema:
 328         description: Bucket is the Schema for the buckets API.
 329         properties:
 330           apiVersion:
 331             description: |-
 332               APIVersion defines the versioned schema of this representation of an object.
 333               Servers should convert recognized schemas to the latest internal value, and
 334               may reject unrecognized values.
 335               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
 336             type: string
 337           kind:
 338             description: |-
 339               Kind is a string value representing the REST resource this object represents.
 340               Servers may infer this from the endpoint the client submits requests to.
 341               Cannot be updated.
 342               In CamelCase.
 343               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 344             type: string
 345           metadata:
 346             type: object
 347           spec:
 348             description: |-
 349               BucketSpec specifies the required configuration to produce an Artifact for
 350               an object storage bucket.
 351             properties:
 352               bucketName:
 353                 description: BucketName is the name of the object storage bucket.
 354                 type: string
 355               certSecretRef:
 356                 description: |-
 357                   CertSecretRef can be given the name of a Secret containing
 358                   either or both of
 359
 360                   - a PEM-encoded client certificate (`tls.crt`) and private
 361                   key (`tls.key`);
 362                   - a PEM-encoded CA certificate (`ca.crt`)
 363
 364                   and whichever are supplied, will be used for connecting to the
 365                   bucket. The client cert and key are useful if you are
 366                   authenticating with a certificate; the CA cert is useful if
 367                   you are using a self-signed server certificate. The Secret must
 368                   be of type `Opaque` or `kubernetes.io/tls`.
 369
 370                   This field is only supported for the `generic` provider.
 371                 properties:
 372                   name:
 373                     description: Name of the referent.
 374                     type: string
 375                 required:
 376                 - name
 377                 type: object
 378               endpoint:
 379                 description: Endpoint is the object storage address the BucketName
 380                   is located at.
 381                 type: string
 382               ignore:
 383                 description: |-
 384                   Ignore overrides the set of excluded patterns in the .sourceignore format
 385                   (which is the same as .gitignore). If not provided, a default will be used,
 386                   consult the documentation for your version to find out what those are.
 387                 type: string
 388               insecure:
 389                 description: Insecure allows connecting to a non-TLS HTTP Endpoint.
 390                 type: boolean
 391               interval:
 392                 description: |-
 393                   Interval at which the Bucket Endpoint is checked for updates.
 394                   This interval is approximate and may be subject to jitter to ensure
 395                   efficient use of resources.
 396                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
 397                 type: string
 398               prefix:
 399                 description: Prefix to use for server-side filtering of files in the
 400                   Bucket.
 401                 type: string
 402               provider:
 403                 default: generic
 404                 description: |-
 405                   Provider of the object storage bucket.
 406                   Defaults to 'generic', which expects an S3 (API) compatible object
 407                   storage.
 408                 enum:
 409                 - generic
 410                 - aws
 411                 - gcp
 412                 - azure
 413                 type: string
 414               proxySecretRef:
 415                 description: |-
 416                   ProxySecretRef specifies the Secret containing the proxy configuration
 417                   to use while communicating with the Bucket server.
 418                 properties:
 419                   name:
 420                     description: Name of the referent.
 421                     type: string
 422                 required:
 423                 - name
 424                 type: object
 425               region:
 426                 description: Region of the Endpoint where the BucketName is located
 427                   in.
 428                 type: string
 429               secretRef:
 430                 description: |-
 431                   SecretRef specifies the Secret containing authentication credentials
 432                   for the Bucket.
 433                 properties:
 434                   name:
 435                     description: Name of the referent.
 436                     type: string
 437                 required:
 438                 - name
 439                 type: object
 440               sts:
 441                 description: |-
 442                   STS specifies the required configuration to use a Security Token
 443                   Service for fetching temporary credentials to authenticate in a
 444                   Bucket provider.
 445
 446                   This field is only supported for the `aws` and `generic` providers.
 447                 properties:
 448                   certSecretRef:
 449                     description: |-
 450                       CertSecretRef can be given the name of a Secret containing
 451                       either or both of
 452
 453                       - a PEM-encoded client certificate (`tls.crt`) and private
 454                       key (`tls.key`);
 455                       - a PEM-encoded CA certificate (`ca.crt`)
 456
 457                       and whichever are supplied, will be used for connecting to the
 458                       STS endpoint. The client cert and key are useful if you are
 459                       authenticating with a certificate; the CA cert is useful if
 460                       you are using a self-signed server certificate. The Secret must
 461                       be of type `Opaque` or `kubernetes.io/tls`.
 462
 463                       This field is only supported for the `ldap` provider.
 464                     properties:
 465                       name:
 466                         description: Name of the referent.
 467                         type: string
 468                     required:
 469                     - name
 470                     type: object
 471                   endpoint:
 472                     description: |-
 473                       Endpoint is the HTTP/S endpoint of the Security Token Service from
 474                       where temporary credentials will be fetched.
 475                     pattern: ^(http|https)://.*$
 476                     type: string
 477                   provider:
 478                     description: Provider of the Security Token Service.
 479                     enum:
 480                     - aws
 481                     - ldap
 482                     type: string
 483                   secretRef:
 484                     description: |-
 485                       SecretRef specifies the Secret containing authentication credentials
 486                       for the STS endpoint. This Secret must contain the fields `username`
 487                       and `password` and is supported only for the `ldap` provider.
 488                     properties:
 489                       name:
 490                         description: Name of the referent.
 491                         type: string
 492                     required:
 493                     - name
 494                     type: object
 495                 required:
 496                 - endpoint
 497                 - provider
 498                 type: object
 499               suspend:
 500                 description: |-
 501                   Suspend tells the controller to suspend the reconciliation of this
 502                   Bucket.
 503                 type: boolean
 504               timeout:
 505                 default: 60s
 506                 description: Timeout for fetch operations, defaults to 60s.
 507                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
 508                 type: string
 509             required:
 510             - bucketName
 511             - endpoint
 512             - interval
 513             type: object
 514             x-kubernetes-validations:
 515             - message: STS configuration is only supported for the 'aws' and 'generic'
 516                 Bucket providers
 517               rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts)
 518             - message: '''aws'' is the only supported STS provider for the ''aws''
 519                 Bucket provider'
 520               rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider
 521                 == 'aws'
 522             - message: '''ldap'' is the only supported STS provider for the ''generic''
 523                 Bucket provider'
 524               rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider
 525                 == 'ldap'
 526             - message: spec.sts.secretRef is not required for the 'aws' STS provider
 527               rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)'
 528             - message: spec.sts.certSecretRef is not required for the 'aws' STS provider
 529               rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)'
 530           status:
 531             default:
 532               observedGeneration: -1
 533             description: BucketStatus records the observed state of a Bucket.
 534             properties:
 535               artifact:
 536                 description: Artifact represents the last successful Bucket reconciliation.
 537                 properties:
 538                   digest:
 539                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
 540                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
 541                     type: string
 542                   lastUpdateTime:
 543                     description: |-
 544                       LastUpdateTime is the timestamp corresponding to the last update of the
 545                       Artifact.
 546                     format: date-time
 547                     type: string
 548                   metadata:
 549                     additionalProperties:
 550                       type: string
 551                     description: Metadata holds upstream information such as OCI annotations.
 552                     type: object
 553                   path:
 554                     description: |-
 555                       Path is the relative file path of the Artifact. It can be used to locate
 556                       the file in the root of the Artifact storage on the local file system of
 557                       the controller managing the Source.
 558                     type: string
 559                   revision:
 560                     description: |-
 561                       Revision is a human-readable identifier traceable in the origin source
 562                       system. It can be a Git commit SHA, Git tag, a Helm chart version, etc.
 563                     type: string
 564                   size:
 565                     description: Size is the number of bytes in the file.
 566                     format: int64
 567                     type: integer
 568                   url:
 569                     description: |-
 570                       URL is the HTTP address of the Artifact as exposed by the controller
 571                       managing the Source. It can be used to retrieve the Artifact for
 572                       consumption, e.g. by another controller applying the Artifact contents.
 573                     type: string
 574                 required:
 575                 - lastUpdateTime
 576                 - path
 577                 - revision
 578                 - url
 579                 type: object
 580               conditions:
 581                 description: Conditions holds the conditions for the Bucket.
 582                 items:
 583                   description: Condition contains details for one aspect of the current
 584                     state of this API Resource.
 585                   properties:
 586                     lastTransitionTime:
 587                       description: |-
 588                         lastTransitionTime is the last time the condition transitioned from one status to another.
 589                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
 590                       format: date-time
 591                       type: string
 592                     message:
 593                       description: |-
 594                         message is a human readable message indicating details about the transition.
 595                         This may be an empty string.
 596                       maxLength: 32768
 597                       type: string
 598                     observedGeneration:
 599                       description: |-
 600                         observedGeneration represents the .metadata.generation that the condition was set based upon.
 601                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
 602                         with respect to the current state of the instance.
 603                       format: int64
 604                       minimum: 0
 605                       type: integer
 606                     reason:
 607                       description: |-
 608                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
 609                         Producers of specific condition types may define expected values and meanings for this field,
 610                         and whether the values are considered a guaranteed API.
 611                         The value should be a CamelCase string.
 612                         This field may not be empty.
 613                       maxLength: 1024
 614                       minLength: 1
 615                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
 616                       type: string
 617                     status:
 618                       description: status of the condition, one of True, False, Unknown.
 619                       enum:
 620                       - "True"
 621                       - "False"
 622                       - Unknown
 623                       type: string
 624                     type:
 625                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
 626                       maxLength: 316
 627                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
 628                       type: string
 629                   required:
 630                   - lastTransitionTime
 631                   - message
 632                   - reason
 633                   - status
 634                   - type
 635                   type: object
 636                 type: array
 637               lastHandledReconcileAt:
 638                 description: |-
 639                   LastHandledReconcileAt holds the value of the most recent
 640                   reconcile request value, so a change of the annotation value
 641                   can be detected.
 642                 type: string
 643               observedGeneration:
 644                 description: ObservedGeneration is the last observed generation of
 645                   the Bucket object.
 646                 format: int64
 647                 type: integer
 648               observedIgnore:
 649                 description: |-
 650                   ObservedIgnore is the observed exclusion patterns used for constructing
 651                   the source artifact.
 652                 type: string
 653               url:
 654                 description: |-
 655                   URL is the dynamic fetch link for the latest Artifact.
 656                   It is provided on a "best effort" basis, and using the precise
 657                   BucketStatus.Artifact data is recommended.
 658                 type: string
 659             type: object
 660         type: object
 661     served: true
 662     storage: true
 663     subresources:
 664       status: {}
 665   - additionalPrinterColumns:
 666     - jsonPath: .spec.endpoint
 667       name: Endpoint
 668       type: string
 669     - jsonPath: .status.conditions[?(@.type=="Ready")].status
 670       name: Ready
 671       type: string
 672     - jsonPath: .status.conditions[?(@.type=="Ready")].message
 673       name: Status
 674       type: string
 675     - jsonPath: .metadata.creationTimestamp
 676       name: Age
 677       type: date
 678     deprecated: true
 679     deprecationWarning: v1beta1 Bucket is deprecated, upgrade to v1
 680     name: v1beta1
 681     schema:
 682       openAPIV3Schema:
 683         description: Bucket is the Schema for the buckets API
 684         properties:
 685           apiVersion:
 686             description: |-
 687               APIVersion defines the versioned schema of this representation of an object.
 688               Servers should convert recognized schemas to the latest internal value, and
 689               may reject unrecognized values.
 690               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
 691             type: string
 692           kind:
 693             description: |-
 694               Kind is a string value representing the REST resource this object represents.
 695               Servers may infer this from the endpoint the client submits requests to.
 696               Cannot be updated.
 697               In CamelCase.
 698               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 699             type: string
 700           metadata:
 701             type: object
 702           spec:
 703             description: BucketSpec defines the desired state of an S3 compatible
 704               bucket
 705             properties:
 706               accessFrom:
 707                 description: AccessFrom defines an Access Control List for allowing
 708                   cross-namespace references to this object.
 709                 properties:
 710                   namespaceSelectors:
 711                     description: |-
 712                       NamespaceSelectors is the list of namespace selectors to which this ACL applies.
 713                       Items in this list are evaluated using a logical OR operation.
 714                     items:
 715                       description: |-
 716                         NamespaceSelector selects the namespaces to which this ACL applies.
 717                         An empty map of MatchLabels matches all namespaces in a cluster.
 718                       properties:
 719                         matchLabels:
 720                           additionalProperties:
 721                             type: string
 722                           description: |-
 723                             MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
 724                             map is equivalent to an element of matchExpressions, whose key field is "key", the
 725                             operator is "In", and the values array contains only "value". The requirements are ANDed.
 726                           type: object
 727                       type: object
 728                     type: array
 729                 required:
 730                 - namespaceSelectors
 731                 type: object
 732               bucketName:
 733                 description: The bucket name.
 734                 type: string
 735               endpoint:
 736                 description: The bucket endpoint address.
 737                 type: string
 738               ignore:
 739                 description: |-
 740                   Ignore overrides the set of excluded patterns in the .sourceignore format
 741                   (which is the same as .gitignore). If not provided, a default will be used,
 742                   consult the documentation for your version to find out what those are.
 743                 type: string
 744               insecure:
 745                 description: Insecure allows connecting to a non-TLS S3 HTTP endpoint.
 746                 type: boolean
 747               interval:
 748                 description: The interval at which to check for bucket updates.
 749                 type: string
 750               provider:
 751                 default: generic
 752                 description: The S3 compatible storage provider name, default ('generic').
 753                 enum:
 754                 - generic
 755                 - aws
 756                 - gcp
 757                 type: string
 758               region:
 759                 description: The bucket region.
 760                 type: string
 761               secretRef:
 762                 description: |-
 763                   The name of the secret containing authentication credentials
 764                   for the Bucket.
 765                 properties:
 766                   name:
 767                     description: Name of the referent.
 768                     type: string
 769                 required:
 770                 - name
 771                 type: object
 772               suspend:
 773                 description: This flag tells the controller to suspend the reconciliation
 774                   of this source.
 775                 type: boolean
 776               timeout:
 777                 default: 60s
 778                 description: The timeout for download operations, defaults to 60s.
 779                 type: string
 780             required:
 781             - bucketName
 782             - endpoint
 783             - interval
 784             type: object
 785           status:
 786             default:
 787               observedGeneration: -1
 788             description: BucketStatus defines the observed state of a bucket
 789             properties:
 790               artifact:
 791                 description: Artifact represents the output of the last successful
 792                   Bucket sync.
 793                 properties:
 794                   checksum:
 795                     description: Checksum is the SHA256 checksum of the artifact.
 796                     type: string
 797                   lastUpdateTime:
 798                     description: |-
 799                       LastUpdateTime is the timestamp corresponding to the last update of this
 800                       artifact.
 801                     format: date-time
 802                     type: string
 803                   path:
 804                     description: Path is the relative file path of this artifact.
 805                     type: string
 806                   revision:
 807                     description: |-
 808                       Revision is a human readable identifier traceable in the origin source
 809                       system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm
 810                       chart version, etc.
 811                     type: string
 812                   url:
 813                     description: URL is the HTTP address of this artifact.
 814                     type: string
 815                 required:
 816                 - lastUpdateTime
 817                 - path
 818                 - url
 819                 type: object
 820               conditions:
 821                 description: Conditions holds the conditions for the Bucket.
 822                 items:
 823                   description: Condition contains details for one aspect of the current
 824                     state of this API Resource.
 825                   properties:
 826                     lastTransitionTime:
 827                       description: |-
 828                         lastTransitionTime is the last time the condition transitioned from one status to another.
 829                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
 830                       format: date-time
 831                       type: string
 832                     message:
 833                       description: |-
 834                         message is a human readable message indicating details about the transition.
 835                         This may be an empty string.
 836                       maxLength: 32768
 837                       type: string
 838                     observedGeneration:
 839                       description: |-
 840                         observedGeneration represents the .metadata.generation that the condition was set based upon.
 841                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
 842                         with respect to the current state of the instance.
 843                       format: int64
 844                       minimum: 0
 845                       type: integer
 846                     reason:
 847                       description: |-
 848                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
 849                         Producers of specific condition types may define expected values and meanings for this field,
 850                         and whether the values are considered a guaranteed API.
 851                         The value should be a CamelCase string.
 852                         This field may not be empty.
 853                       maxLength: 1024
 854                       minLength: 1
 855                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
 856                       type: string
 857                     status:
 858                       description: status of the condition, one of True, False, Unknown.
 859                       enum:
 860                       - "True"
 861                       - "False"
 862                       - Unknown
 863                       type: string
 864                     type:
 865                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
 866                       maxLength: 316
 867                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
 868                       type: string
 869                   required:
 870                   - lastTransitionTime
 871                   - message
 872                   - reason
 873                   - status
 874                   - type
 875                   type: object
 876                 type: array
 877               lastHandledReconcileAt:
 878                 description: |-
 879                   LastHandledReconcileAt holds the value of the most recent
 880                   reconcile request value, so a change of the annotation value
 881                   can be detected.
 882                 type: string
 883               observedGeneration:
 884                 description: ObservedGeneration is the last observed generation.
 885                 format: int64
 886                 type: integer
 887               url:
 888                 description: URL is the download link for the artifact output of the
 889                   last Bucket sync.
 890                 type: string
 891             type: object
 892         type: object
 893     served: true
 894     storage: false
 895     subresources:
 896       status: {}
 897   - additionalPrinterColumns:
 898     - jsonPath: .spec.endpoint
 899       name: Endpoint
 900       type: string
 901     - jsonPath: .metadata.creationTimestamp
 902       name: Age
 903       type: date
 904     - jsonPath: .status.conditions[?(@.type=="Ready")].status
 905       name: Ready
 906       type: string
 907     - jsonPath: .status.conditions[?(@.type=="Ready")].message
 908       name: Status
 909       type: string
 910     deprecated: true
 911     deprecationWarning: v1beta2 Bucket is deprecated, upgrade to v1
 912     name: v1beta2
 913     schema:
 914       openAPIV3Schema:
 915         description: Bucket is the Schema for the buckets API.
 916         properties:
 917           apiVersion:
 918             description: |-
 919               APIVersion defines the versioned schema of this representation of an object.
 920               Servers should convert recognized schemas to the latest internal value, and
 921               may reject unrecognized values.
 922               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
 923             type: string
 924           kind:
 925             description: |-
 926               Kind is a string value representing the REST resource this object represents.
 927               Servers may infer this from the endpoint the client submits requests to.
 928               Cannot be updated.
 929               In CamelCase.
 930               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 931             type: string
 932           metadata:
 933             type: object
 934           spec:
 935             description: |-
 936               BucketSpec specifies the required configuration to produce an Artifact for
 937               an object storage bucket.
 938             properties:
 939               accessFrom:
 940                 description: |-
 941                   AccessFrom specifies an Access Control List for allowing cross-namespace
 942                   references to this object.
 943                   NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
 944                 properties:
 945                   namespaceSelectors:
 946                     description: |-
 947                       NamespaceSelectors is the list of namespace selectors to which this ACL applies.
 948                       Items in this list are evaluated using a logical OR operation.
 949                     items:
 950                       description: |-
 951                         NamespaceSelector selects the namespaces to which this ACL applies.
 952                         An empty map of MatchLabels matches all namespaces in a cluster.
 953                       properties:
 954                         matchLabels:
 955                           additionalProperties:
 956                             type: string
 957                           description: |-
 958                             MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
 959                             map is equivalent to an element of matchExpressions, whose key field is "key", the
 960                             operator is "In", and the values array contains only "value". The requirements are ANDed.
 961                           type: object
 962                       type: object
 963                     type: array
 964                 required:
 965                 - namespaceSelectors
 966                 type: object
 967               bucketName:
 968                 description: BucketName is the name of the object storage bucket.
 969                 type: string
 970               certSecretRef:
 971                 description: |-
 972                   CertSecretRef can be given the name of a Secret containing
 973                   either or both of
 974
 975                   - a PEM-encoded client certificate (`tls.crt`) and private
 976                   key (`tls.key`);
 977                   - a PEM-encoded CA certificate (`ca.crt`)
 978
 979                   and whichever are supplied, will be used for connecting to the
 980                   bucket. The client cert and key are useful if you are
 981                   authenticating with a certificate; the CA cert is useful if
 982                   you are using a self-signed server certificate. The Secret must
 983                   be of type `Opaque` or `kubernetes.io/tls`.
 984
 985                   This field is only supported for the `generic` provider.
 986                 properties:
 987                   name:
 988                     description: Name of the referent.
 989                     type: string
 990                 required:
 991                 - name
 992                 type: object
 993               endpoint:
 994                 description: Endpoint is the object storage address the BucketName
 995                   is located at.
 996                 type: string
 997               ignore:
 998                 description: |-
 999                   Ignore overrides the set of excluded patterns in the .sourceignore format
1000                   (which is the same as .gitignore). If not provided, a default will be used,
1001                   consult the documentation for your version to find out what those are.
1002                 type: string
1003               insecure:
1004                 description: Insecure allows connecting to a non-TLS HTTP Endpoint.
1005                 type: boolean
1006               interval:
1007                 description: |-
1008                   Interval at which the Bucket Endpoint is checked for updates.
1009                   This interval is approximate and may be subject to jitter to ensure
1010                   efficient use of resources.
1011                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
1012                 type: string
1013               prefix:
1014                 description: Prefix to use for server-side filtering of files in the
1015                   Bucket.
1016                 type: string
1017               provider:
1018                 default: generic
1019                 description: |-
1020                   Provider of the object storage bucket.
1021                   Defaults to 'generic', which expects an S3 (API) compatible object
1022                   storage.
1023                 enum:
1024                 - generic
1025                 - aws
1026                 - gcp
1027                 - azure
1028                 type: string
1029               proxySecretRef:
1030                 description: |-
1031                   ProxySecretRef specifies the Secret containing the proxy configuration
1032                   to use while communicating with the Bucket server.
1033                 properties:
1034                   name:
1035                     description: Name of the referent.
1036                     type: string
1037                 required:
1038                 - name
1039                 type: object
1040               region:
1041                 description: Region of the Endpoint where the BucketName is located
1042                   in.
1043                 type: string
1044               secretRef:
1045                 description: |-
1046                   SecretRef specifies the Secret containing authentication credentials
1047                   for the Bucket.
1048                 properties:
1049                   name:
1050                     description: Name of the referent.
1051                     type: string
1052                 required:
1053                 - name
1054                 type: object
1055               sts:
1056                 description: |-
1057                   STS specifies the required configuration to use a Security Token
1058                   Service for fetching temporary credentials to authenticate in a
1059                   Bucket provider.
1060
1061                   This field is only supported for the `aws` and `generic` providers.
1062                 properties:
1063                   certSecretRef:
1064                     description: |-
1065                       CertSecretRef can be given the name of a Secret containing
1066                       either or both of
1067
1068                       - a PEM-encoded client certificate (`tls.crt`) and private
1069                       key (`tls.key`);
1070                       - a PEM-encoded CA certificate (`ca.crt`)
1071
1072                       and whichever are supplied, will be used for connecting to the
1073                       STS endpoint. The client cert and key are useful if you are
1074                       authenticating with a certificate; the CA cert is useful if
1075                       you are using a self-signed server certificate. The Secret must
1076                       be of type `Opaque` or `kubernetes.io/tls`.
1077
1078                       This field is only supported for the `ldap` provider.
1079                     properties:
1080                       name:
1081                         description: Name of the referent.
1082                         type: string
1083                     required:
1084                     - name
1085                     type: object
1086                   endpoint:
1087                     description: |-
1088                       Endpoint is the HTTP/S endpoint of the Security Token Service from
1089                       where temporary credentials will be fetched.
1090                     pattern: ^(http|https)://.*$
1091                     type: string
1092                   provider:
1093                     description: Provider of the Security Token Service.
1094                     enum:
1095                     - aws
1096                     - ldap
1097                     type: string
1098                   secretRef:
1099                     description: |-
1100                       SecretRef specifies the Secret containing authentication credentials
1101                       for the STS endpoint. This Secret must contain the fields `username`
1102                       and `password` and is supported only for the `ldap` provider.
1103                     properties:
1104                       name:
1105                         description: Name of the referent.
1106                         type: string
1107                     required:
1108                     - name
1109                     type: object
1110                 required:
1111                 - endpoint
1112                 - provider
1113                 type: object
1114               suspend:
1115                 description: |-
1116                   Suspend tells the controller to suspend the reconciliation of this
1117                   Bucket.
1118                 type: boolean
1119               timeout:
1120                 default: 60s
1121                 description: Timeout for fetch operations, defaults to 60s.
1122                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
1123                 type: string
1124             required:
1125             - bucketName
1126             - endpoint
1127             - interval
1128             type: object
1129             x-kubernetes-validations:
1130             - message: STS configuration is only supported for the 'aws' and 'generic'
1131                 Bucket providers
1132               rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts)
1133             - message: '''aws'' is the only supported STS provider for the ''aws''
1134                 Bucket provider'
1135               rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider
1136                 == 'aws'
1137             - message: '''ldap'' is the only supported STS provider for the ''generic''
1138                 Bucket provider'
1139               rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider
1140                 == 'ldap'
1141             - message: spec.sts.secretRef is not required for the 'aws' STS provider
1142               rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)'
1143             - message: spec.sts.certSecretRef is not required for the 'aws' STS provider
1144               rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)'
1145           status:
1146             default:
1147               observedGeneration: -1
1148             description: BucketStatus records the observed state of a Bucket.
1149             properties:
1150               artifact:
1151                 description: Artifact represents the last successful Bucket reconciliation.
1152                 properties:
1153                   digest:
1154                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
1155                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
1156                     type: string
1157                   lastUpdateTime:
1158                     description: |-
1159                       LastUpdateTime is the timestamp corresponding to the last update of the
1160                       Artifact.
1161                     format: date-time
1162                     type: string
1163                   metadata:
1164                     additionalProperties:
1165                       type: string
1166                     description: Metadata holds upstream information such as OCI annotations.
1167                     type: object
1168                   path:
1169                     description: |-
1170                       Path is the relative file path of the Artifact. It can be used to locate
1171                       the file in the root of the Artifact storage on the local file system of
1172                       the controller managing the Source.
1173                     type: string
1174                   revision:
1175                     description: |-
1176                       Revision is a human-readable identifier traceable in the origin source
1177                       system. It can be a Git commit SHA, Git tag, a Helm chart version, etc.
1178                     type: string
1179                   size:
1180                     description: Size is the number of bytes in the file.
1181                     format: int64
1182                     type: integer
1183                   url:
1184                     description: |-
1185                       URL is the HTTP address of the Artifact as exposed by the controller
1186                       managing the Source. It can be used to retrieve the Artifact for
1187                       consumption, e.g. by another controller applying the Artifact contents.
1188                     type: string
1189                 required:
1190                 - lastUpdateTime
1191                 - path
1192                 - revision
1193                 - url
1194                 type: object
1195               conditions:
1196                 description: Conditions holds the conditions for the Bucket.
1197                 items:
1198                   description: Condition contains details for one aspect of the current
1199                     state of this API Resource.
1200                   properties:
1201                     lastTransitionTime:
1202                       description: |-
1203                         lastTransitionTime is the last time the condition transitioned from one status to another.
1204                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
1205                       format: date-time
1206                       type: string
1207                     message:
1208                       description: |-
1209                         message is a human readable message indicating details about the transition.
1210                         This may be an empty string.
1211                       maxLength: 32768
1212                       type: string
1213                     observedGeneration:
1214                       description: |-
1215                         observedGeneration represents the .metadata.generation that the condition was set based upon.
1216                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
1217                         with respect to the current state of the instance.
1218                       format: int64
1219                       minimum: 0
1220                       type: integer
1221                     reason:
1222                       description: |-
1223                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
1224                         Producers of specific condition types may define expected values and meanings for this field,
1225                         and whether the values are considered a guaranteed API.
1226                         The value should be a CamelCase string.
1227                         This field may not be empty.
1228                       maxLength: 1024
1229                       minLength: 1
1230                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
1231                       type: string
1232                     status:
1233                       description: status of the condition, one of True, False, Unknown.
1234                       enum:
1235                       - "True"
1236                       - "False"
1237                       - Unknown
1238                       type: string
1239                     type:
1240                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
1241                       maxLength: 316
1242                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
1243                       type: string
1244                   required:
1245                   - lastTransitionTime
1246                   - message
1247                   - reason
1248                   - status
1249                   - type
1250                   type: object
1251                 type: array
1252               lastHandledReconcileAt:
1253                 description: |-
1254                   LastHandledReconcileAt holds the value of the most recent
1255                   reconcile request value, so a change of the annotation value
1256                   can be detected.
1257                 type: string
1258               observedGeneration:
1259                 description: ObservedGeneration is the last observed generation of
1260                   the Bucket object.
1261                 format: int64
1262                 type: integer
1263               observedIgnore:
1264                 description: |-
1265                   ObservedIgnore is the observed exclusion patterns used for constructing
1266                   the source artifact.
1267                 type: string
1268               url:
1269                 description: |-
1270                   URL is the dynamic fetch link for the latest Artifact.
1271                   It is provided on a "best effort" basis, and using the precise
1272                   BucketStatus.Artifact data is recommended.
1273                 type: string
1274             type: object
1275         type: object
1276     served: true
1277     storage: false
1278     subresources:
1279       status: {}
1280 ---
1281 apiVersion: apiextensions.k8s.io/v1
1282 kind: CustomResourceDefinition
1283 metadata:
1284   annotations:
1285     controller-gen.kubebuilder.io/version: v0.16.1
1286   labels:
1287     app.kubernetes.io/component: source-controller
1288     app.kubernetes.io/instance: flux-system
1289     app.kubernetes.io/part-of: flux
1290     app.kubernetes.io/version: v2.4.0
1291   name: gitrepositories.source.toolkit.fluxcd.io
1292 spec:
1293   group: source.toolkit.fluxcd.io
1294   names:
1295     kind: GitRepository
1296     listKind: GitRepositoryList
1297     plural: gitrepositories
1298     shortNames:
1299     - gitrepo
1300     singular: gitrepository
1301   scope: Namespaced
1302   versions:
1303   - additionalPrinterColumns:
1304     - jsonPath: .spec.url
1305       name: URL
1306       type: string
1307     - jsonPath: .metadata.creationTimestamp
1308       name: Age
1309       type: date
1310     - jsonPath: .status.conditions[?(@.type=="Ready")].status
1311       name: Ready
1312       type: string
1313     - jsonPath: .status.conditions[?(@.type=="Ready")].message
1314       name: Status
1315       type: string
1316     name: v1
1317     schema:
1318       openAPIV3Schema:
1319         description: GitRepository is the Schema for the gitrepositories API.
1320         properties:
1321           apiVersion:
1322             description: |-
1323               APIVersion defines the versioned schema of this representation of an object.
1324               Servers should convert recognized schemas to the latest internal value, and
1325               may reject unrecognized values.
1326               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
1327             type: string
1328           kind:
1329             description: |-
1330               Kind is a string value representing the REST resource this object represents.
1331               Servers may infer this from the endpoint the client submits requests to.
1332               Cannot be updated.
1333               In CamelCase.
1334               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
1335             type: string
1336           metadata:
1337             type: object
1338           spec:
1339             description: |-
1340               GitRepositorySpec specifies the required configuration to produce an
1341               Artifact for a Git repository.
1342             properties:
1343               ignore:
1344                 description: |-
1345                   Ignore overrides the set of excluded patterns in the .sourceignore format
1346                   (which is the same as .gitignore). If not provided, a default will be used,
1347                   consult the documentation for your version to find out what those are.
1348                 type: string
1349               include:
1350                 description: |-
1351                   Include specifies a list of GitRepository resources which Artifacts
1352                   should be included in the Artifact produced for this GitRepository.
1353                 items:
1354                   description: |-
1355                     GitRepositoryInclude specifies a local reference to a GitRepository which
1356                     Artifact (sub-)contents must be included, and where they should be placed.
1357                   properties:
1358                     fromPath:
1359                       description: |-
1360                         FromPath specifies the path to copy contents from, defaults to the root
1361                         of the Artifact.
1362                       type: string
1363                     repository:
1364                       description: |-
1365                         GitRepositoryRef specifies the GitRepository which Artifact contents
1366                         must be included.
1367                       properties:
1368                         name:
1369                           description: Name of the referent.
1370                           type: string
1371                       required:
1372                       - name
1373                       type: object
1374                     toPath:
1375                       description: |-
1376                         ToPath specifies the path to copy contents to, defaults to the name of
1377                         the GitRepositoryRef.
1378                       type: string
1379                   required:
1380                   - repository
1381                   type: object
1382                 type: array
1383               interval:
1384                 description: |-
1385                   Interval at which the GitRepository URL is checked for updates.
1386                   This interval is approximate and may be subject to jitter to ensure
1387                   efficient use of resources.
1388                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
1389                 type: string
1390               provider:
1391                 description: |-
1392                   Provider used for authentication, can be 'azure', 'generic'.
1393                   When not specified, defaults to 'generic'.
1394                 enum:
1395                 - generic
1396                 - azure
1397                 type: string
1398               proxySecretRef:
1399                 description: |-
1400                   ProxySecretRef specifies the Secret containing the proxy configuration
1401                   to use while communicating with the Git server.
1402                 properties:
1403                   name:
1404                     description: Name of the referent.
1405                     type: string
1406                 required:
1407                 - name
1408                 type: object
1409               recurseSubmodules:
1410                 description: |-
1411                   RecurseSubmodules enables the initialization of all submodules within
1412                   the GitRepository as cloned from the URL, using their default settings.
1413                 type: boolean
1414               ref:
1415                 description: |-
1416                   Reference specifies the Git reference to resolve and monitor for
1417                   changes, defaults to the 'master' branch.
1418                 properties:
1419                   branch:
1420                     description: Branch to check out, defaults to 'master' if no other
1421                       field is defined.
1422                     type: string
1423                   commit:
1424                     description: |-
1425                       Commit SHA to check out, takes precedence over all reference fields.
1426
1427                       This can be combined with Branch to shallow clone the branch, in which
1428                       the commit is expected to exist.
1429                     type: string
1430                   name:
1431                     description: |-
1432                       Name of the reference to check out; takes precedence over Branch, Tag and SemVer.
1433
1434                       It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description
1435                       Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head"
1436                     type: string
1437                   semver:
1438                     description: SemVer tag expression to check out, takes precedence
1439                       over Tag.
1440                     type: string
1441                   tag:
1442                     description: Tag to check out, takes precedence over Branch.
1443                     type: string
1444                 type: object
1445               secretRef:
1446                 description: |-
1447                   SecretRef specifies the Secret containing authentication credentials for
1448                   the GitRepository.
1449                   For HTTPS repositories the Secret must contain 'username' and 'password'
1450                   fields for basic auth or 'bearerToken' field for token auth.
1451                   For SSH repositories the Secret must contain 'identity'
1452                   and 'known_hosts' fields.
1453                 properties:
1454                   name:
1455                     description: Name of the referent.
1456                     type: string
1457                 required:
1458                 - name
1459                 type: object
1460               suspend:
1461                 description: |-
1462                   Suspend tells the controller to suspend the reconciliation of this
1463                   GitRepository.
1464                 type: boolean
1465               timeout:
1466                 default: 60s
1467                 description: Timeout for Git operations like cloning, defaults to
1468                   60s.
1469                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
1470                 type: string
1471               url:
1472                 description: URL specifies the Git repository URL, it can be an HTTP/S
1473                   or SSH address.
1474                 pattern: ^(http|https|ssh)://.*$
1475                 type: string
1476               verify:
1477                 description: |-
1478                   Verification specifies the configuration to verify the Git commit
1479                   signature(s).
1480                 properties:
1481                   mode:
1482                     default: HEAD
1483                     description: |-
1484                       Mode specifies which Git object(s) should be verified.
1485
1486                       The variants "head" and "HEAD" both imply the same thing, i.e. verify
1487                       the commit that the HEAD of the Git repository points to. The variant
1488                       "head" solely exists to ensure backwards compatibility.
1489                     enum:
1490                     - head
1491                     - HEAD
1492                     - Tag
1493                     - TagAndHEAD
1494                     type: string
1495                   secretRef:
1496                     description: |-
1497                       SecretRef specifies the Secret containing the public keys of trusted Git
1498                       authors.
1499                     properties:
1500                       name:
1501                         description: Name of the referent.
1502                         type: string
1503                     required:
1504                     - name
1505                     type: object
1506                 required:
1507                 - secretRef
1508                 type: object
1509             required:
1510             - interval
1511             - url
1512             type: object
1513           status:
1514             default:
1515               observedGeneration: -1
1516             description: GitRepositoryStatus records the observed state of a Git repository.
1517             properties:
1518               artifact:
1519                 description: Artifact represents the last successful GitRepository
1520                   reconciliation.
1521                 properties:
1522                   digest:
1523                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
1524                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
1525                     type: string
1526                   lastUpdateTime:
1527                     description: |-
1528                       LastUpdateTime is the timestamp corresponding to the last update of the
1529                       Artifact.
1530                     format: date-time
1531                     type: string
1532                   metadata:
1533                     additionalProperties:
1534                       type: string
1535                     description: Metadata holds upstream information such as OCI annotations.
1536                     type: object
1537                   path:
1538                     description: |-
1539                       Path is the relative file path of the Artifact. It can be used to locate
1540                       the file in the root of the Artifact storage on the local file system of
1541                       the controller managing the Source.
1542                     type: string
1543                   revision:
1544                     description: |-
1545                       Revision is a human-readable identifier traceable in the origin source
1546                       system. It can be a Git commit SHA, Git tag, a Helm chart version, etc.
1547                     type: string
1548                   size:
1549                     description: Size is the number of bytes in the file.
1550                     format: int64
1551                     type: integer
1552                   url:
1553                     description: |-
1554                       URL is the HTTP address of the Artifact as exposed by the controller
1555                       managing the Source. It can be used to retrieve the Artifact for
1556                       consumption, e.g. by another controller applying the Artifact contents.
1557                     type: string
1558                 required:
1559                 - lastUpdateTime
1560                 - path
1561                 - revision
1562                 - url
1563                 type: object
1564               conditions:
1565                 description: Conditions holds the conditions for the GitRepository.
1566                 items:
1567                   description: Condition contains details for one aspect of the current
1568                     state of this API Resource.
1569                   properties:
1570                     lastTransitionTime:
1571                       description: |-
1572                         lastTransitionTime is the last time the condition transitioned from one status to another.
1573                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
1574                       format: date-time
1575                       type: string
1576                     message:
1577                       description: |-
1578                         message is a human readable message indicating details about the transition.
1579                         This may be an empty string.
1580                       maxLength: 32768
1581                       type: string
1582                     observedGeneration:
1583                       description: |-
1584                         observedGeneration represents the .metadata.generation that the condition was set based upon.
1585                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
1586                         with respect to the current state of the instance.
1587                       format: int64
1588                       minimum: 0
1589                       type: integer
1590                     reason:
1591                       description: |-
1592                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
1593                         Producers of specific condition types may define expected values and meanings for this field,
1594                         and whether the values are considered a guaranteed API.
1595                         The value should be a CamelCase string.
1596                         This field may not be empty.
1597                       maxLength: 1024
1598                       minLength: 1
1599                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
1600                       type: string
1601                     status:
1602                       description: status of the condition, one of True, False, Unknown.
1603                       enum:
1604                       - "True"
1605                       - "False"
1606                       - Unknown
1607                       type: string
1608                     type:
1609                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
1610                       maxLength: 316
1611                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
1612                       type: string
1613                   required:
1614                   - lastTransitionTime
1615                   - message
1616                   - reason
1617                   - status
1618                   - type
1619                   type: object
1620                 type: array
1621               includedArtifacts:
1622                 description: |-
1623                   IncludedArtifacts contains a list of the last successfully included
1624                   Artifacts as instructed by GitRepositorySpec.Include.
1625                 items:
1626                   description: Artifact represents the output of a Source reconciliation.
1627                   properties:
1628                     digest:
1629                       description: Digest is the digest of the file in the form of
1630                         '<algorithm>:<checksum>'.
1631                       pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
1632                       type: string
1633                     lastUpdateTime:
1634                       description: |-
1635                         LastUpdateTime is the timestamp corresponding to the last update of the
1636                         Artifact.
1637                       format: date-time
1638                       type: string
1639                     metadata:
1640                       additionalProperties:
1641                         type: string
1642                       description: Metadata holds upstream information such as OCI
1643                         annotations.
1644                       type: object
1645                     path:
1646                       description: |-
1647                         Path is the relative file path of the Artifact. It can be used to locate
1648                         the file in the root of the Artifact storage on the local file system of
1649                         the controller managing the Source.
1650                       type: string
1651                     revision:
1652                       description: |-
1653                         Revision is a human-readable identifier traceable in the origin source
1654                         system. It can be a Git commit SHA, Git tag, a Helm chart version, etc.
1655                       type: string
1656                     size:
1657                       description: Size is the number of bytes in the file.
1658                       format: int64
1659                       type: integer
1660                     url:
1661                       description: |-
1662                         URL is the HTTP address of the Artifact as exposed by the controller
1663                         managing the Source. It can be used to retrieve the Artifact for
1664                         consumption, e.g. by another controller applying the Artifact contents.
1665                       type: string
1666                   required:
1667                   - lastUpdateTime
1668                   - path
1669                   - revision
1670                   - url
1671                   type: object
1672                 type: array
1673               lastHandledReconcileAt:
1674                 description: |-
1675                   LastHandledReconcileAt holds the value of the most recent
1676                   reconcile request value, so a change of the annotation value
1677                   can be detected.
1678                 type: string
1679               observedGeneration:
1680                 description: |-
1681                   ObservedGeneration is the last observed generation of the GitRepository
1682                   object.
1683                 format: int64
1684                 type: integer
1685               observedIgnore:
1686                 description: |-
1687                   ObservedIgnore is the observed exclusion patterns used for constructing
1688                   the source artifact.
1689                 type: string
1690               observedInclude:
1691                 description: |-
1692                   ObservedInclude is the observed list of GitRepository resources used to
1693                   produce the current Artifact.
1694                 items:
1695                   description: |-
1696                     GitRepositoryInclude specifies a local reference to a GitRepository which
1697                     Artifact (sub-)contents must be included, and where they should be placed.
1698                   properties:
1699                     fromPath:
1700                       description: |-
1701                         FromPath specifies the path to copy contents from, defaults to the root
1702                         of the Artifact.
1703                       type: string
1704                     repository:
1705                       description: |-
1706                         GitRepositoryRef specifies the GitRepository which Artifact contents
1707                         must be included.
1708                       properties:
1709                         name:
1710                           description: Name of the referent.
1711                           type: string
1712                       required:
1713                       - name
1714                       type: object
1715                     toPath:
1716                       description: |-
1717                         ToPath specifies the path to copy contents to, defaults to the name of
1718                         the GitRepositoryRef.
1719                       type: string
1720                   required:
1721                   - repository
1722                   type: object
1723                 type: array
1724               observedRecurseSubmodules:
1725                 description: |-
1726                   ObservedRecurseSubmodules is the observed resource submodules
1727                   configuration used to produce the current Artifact.
1728                 type: boolean
1729               sourceVerificationMode:
1730                 description: |-
1731                   SourceVerificationMode is the last used verification mode indicating
1732                   which Git object(s) have been verified.
1733                 type: string
1734             type: object
1735         type: object
1736     served: true
1737     storage: true
1738     subresources:
1739       status: {}
1740   - additionalPrinterColumns:
1741     - jsonPath: .spec.url
1742       name: URL
1743       type: string
1744     - jsonPath: .status.conditions[?(@.type=="Ready")].status
1745       name: Ready
1746       type: string
1747     - jsonPath: .status.conditions[?(@.type=="Ready")].message
1748       name: Status
1749       type: string
1750     - jsonPath: .metadata.creationTimestamp
1751       name: Age
1752       type: date
1753     deprecated: true
1754     deprecationWarning: v1beta1 GitRepository is deprecated, upgrade to v1
1755     name: v1beta1
1756     schema:
1757       openAPIV3Schema:
1758         description: GitRepository is the Schema for the gitrepositories API
1759         properties:
1760           apiVersion:
1761             description: |-
1762               APIVersion defines the versioned schema of this representation of an object.
1763               Servers should convert recognized schemas to the latest internal value, and
1764               may reject unrecognized values.
1765               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
1766             type: string
1767           kind:
1768             description: |-
1769               Kind is a string value representing the REST resource this object represents.
1770               Servers may infer this from the endpoint the client submits requests to.
1771               Cannot be updated.
1772               In CamelCase.
1773               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
1774             type: string
1775           metadata:
1776             type: object
1777           spec:
1778             description: GitRepositorySpec defines the desired state of a Git repository.
1779             properties:
1780               accessFrom:
1781                 description: AccessFrom defines an Access Control List for allowing
1782                   cross-namespace references to this object.
1783                 properties:
1784                   namespaceSelectors:
1785                     description: |-
1786                       NamespaceSelectors is the list of namespace selectors to which this ACL applies.
1787                       Items in this list are evaluated using a logical OR operation.
1788                     items:
1789                       description: |-
1790                         NamespaceSelector selects the namespaces to which this ACL applies.
1791                         An empty map of MatchLabels matches all namespaces in a cluster.
1792                       properties:
1793                         matchLabels:
1794                           additionalProperties:
1795                             type: string
1796                           description: |-
1797                             MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
1798                             map is equivalent to an element of matchExpressions, whose key field is "key", the
1799                             operator is "In", and the values array contains only "value". The requirements are ANDed.
1800                           type: object
1801                       type: object
1802                     type: array
1803                 required:
1804                 - namespaceSelectors
1805                 type: object
1806               gitImplementation:
1807                 default: go-git
1808                 description: |-
1809                   Determines which git client library to use.
1810                   Defaults to go-git, valid values are ('go-git', 'libgit2').
1811                 enum:
1812                 - go-git
1813                 - libgit2
1814                 type: string
1815               ignore:
1816                 description: |-
1817                   Ignore overrides the set of excluded patterns in the .sourceignore format
1818                   (which is the same as .gitignore). If not provided, a default will be used,
1819                   consult the documentation for your version to find out what those are.
1820                 type: string
1821               include:
1822                 description: Extra git repositories to map into the repository
1823                 items:
1824                   description: GitRepositoryInclude defines a source with a from and
1825                     to path.
1826                   properties:
1827                     fromPath:
1828                       description: The path to copy contents from, defaults to the
1829                         root directory.
1830                       type: string
1831                     repository:
1832                       description: Reference to a GitRepository to include.
1833                       properties:
1834                         name:
1835                           description: Name of the referent.
1836                           type: string
1837                       required:
1838                       - name
1839                       type: object
1840                     toPath:
1841                       description: The path to copy contents to, defaults to the name
1842                         of the source ref.
1843                       type: string
1844                   required:
1845                   - repository
1846                   type: object
1847                 type: array
1848               interval:
1849                 description: The interval at which to check for repository updates.
1850                 type: string
1851               recurseSubmodules:
1852                 description: |-
1853                   When enabled, after the clone is created, initializes all submodules within,
1854                   using their default settings.
1855                   This option is available only when using the 'go-git' GitImplementation.
1856                 type: boolean
1857               ref:
1858                 description: |-
1859                   The Git reference to checkout and monitor for changes, defaults to
1860                   master branch.
1861                 properties:
1862                   branch:
1863                     description: The Git branch to checkout, defaults to master.
1864                     type: string
1865                   commit:
1866                     description: The Git commit SHA to checkout, if specified Tag
1867                       filters will be ignored.
1868                     type: string
1869                   semver:
1870                     description: The Git tag semver expression, takes precedence over
1871                       Tag.
1872                     type: string
1873                   tag:
1874                     description: The Git tag to checkout, takes precedence over Branch.
1875                     type: string
1876                 type: object
1877               secretRef:
1878                 description: |-
1879                   The secret name containing the Git credentials.
1880                   For HTTPS repositories the secret must contain username and password
1881                   fields.
1882                   For SSH repositories the secret must contain identity and known_hosts
1883                   fields.
1884                 properties:
1885                   name:
1886                     description: Name of the referent.
1887                     type: string
1888                 required:
1889                 - name
1890                 type: object
1891               suspend:
1892                 description: This flag tells the controller to suspend the reconciliation
1893                   of this source.
1894                 type: boolean
1895               timeout:
1896                 default: 60s
1897                 description: The timeout for remote Git operations like cloning, defaults
1898                   to 60s.
1899                 type: string
1900               url:
1901                 description: The repository URL, can be a HTTP/S or SSH address.
1902                 pattern: ^(http|https|ssh)://.*$
1903                 type: string
1904               verify:
1905                 description: Verify OpenPGP signature for the Git commit HEAD points
1906                   to.
1907                 properties:
1908                   mode:
1909                     description: Mode describes what git object should be verified,
1910                       currently ('head').
1911                     enum:
1912                     - head
1913                     type: string
1914                   secretRef:
1915                     description: The secret name containing the public keys of all
1916                       trusted Git authors.
1917                     properties:
1918                       name:
1919                         description: Name of the referent.
1920                         type: string
1921                     required:
1922                     - name
1923                     type: object
1924                 required:
1925                 - mode
1926                 type: object
1927             required:
1928             - interval
1929             - url
1930             type: object
1931           status:
1932             default:
1933               observedGeneration: -1
1934             description: GitRepositoryStatus defines the observed state of a Git repository.
1935             properties:
1936               artifact:
1937                 description: Artifact represents the output of the last successful
1938                   repository sync.
1939                 properties:
1940                   checksum:
1941                     description: Checksum is the SHA256 checksum of the artifact.
1942                     type: string
1943                   lastUpdateTime:
1944                     description: |-
1945                       LastUpdateTime is the timestamp corresponding to the last update of this
1946                       artifact.
1947                     format: date-time
1948                     type: string
1949                   path:
1950                     description: Path is the relative file path of this artifact.
1951                     type: string
1952                   revision:
1953                     description: |-
1954                       Revision is a human readable identifier traceable in the origin source
1955                       system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm
1956                       chart version, etc.
1957                     type: string
1958                   url:
1959                     description: URL is the HTTP address of this artifact.
1960                     type: string
1961                 required:
1962                 - lastUpdateTime
1963                 - path
1964                 - url
1965                 type: object
1966               conditions:
1967                 description: Conditions holds the conditions for the GitRepository.
1968                 items:
1969                   description: Condition contains details for one aspect of the current
1970                     state of this API Resource.
1971                   properties:
1972                     lastTransitionTime:
1973                       description: |-
1974                         lastTransitionTime is the last time the condition transitioned from one status to another.
1975                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
1976                       format: date-time
1977                       type: string
1978                     message:
1979                       description: |-
1980                         message is a human readable message indicating details about the transition.
1981                         This may be an empty string.
1982                       maxLength: 32768
1983                       type: string
1984                     observedGeneration:
1985                       description: |-
1986                         observedGeneration represents the .metadata.generation that the condition was set based upon.
1987                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
1988                         with respect to the current state of the instance.
1989                       format: int64
1990                       minimum: 0
1991                       type: integer
1992                     reason:
1993                       description: |-
1994                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
1995                         Producers of specific condition types may define expected values and meanings for this field,
1996                         and whether the values are considered a guaranteed API.
1997                         The value should be a CamelCase string.
1998                         This field may not be empty.
1999                       maxLength: 1024
2000                       minLength: 1
2001                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
2002                       type: string
2003                     status:
2004                       description: status of the condition, one of True, False, Unknown.
2005                       enum:
2006                       - "True"
2007                       - "False"
2008                       - Unknown
2009                       type: string
2010                     type:
2011                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
2012                       maxLength: 316
2013                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
2014                       type: string
2015                   required:
2016                   - lastTransitionTime
2017                   - message
2018                   - reason
2019                   - status
2020                   - type
2021                   type: object
2022                 type: array
2023               includedArtifacts:
2024                 description: IncludedArtifacts represents the included artifacts from
2025                   the last successful repository sync.
2026                 items:
2027                   description: Artifact represents the output of a source synchronisation.
2028                   properties:
2029                     checksum:
2030                       description: Checksum is the SHA256 checksum of the artifact.
2031                       type: string
2032                     lastUpdateTime:
2033                       description: |-
2034                         LastUpdateTime is the timestamp corresponding to the last update of this
2035                         artifact.
2036                       format: date-time
2037                       type: string
2038                     path:
2039                       description: Path is the relative file path of this artifact.
2040                       type: string
2041                     revision:
2042                       description: |-
2043                         Revision is a human readable identifier traceable in the origin source
2044                         system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm
2045                         chart version, etc.
2046                       type: string
2047                     url:
2048                       description: URL is the HTTP address of this artifact.
2049                       type: string
2050                   required:
2051                   - lastUpdateTime
2052                   - path
2053                   - url
2054                   type: object
2055                 type: array
2056               lastHandledReconcileAt:
2057                 description: |-
2058                   LastHandledReconcileAt holds the value of the most recent
2059                   reconcile request value, so a change of the annotation value
2060                   can be detected.
2061                 type: string
2062               observedGeneration:
2063                 description: ObservedGeneration is the last observed generation.
2064                 format: int64
2065                 type: integer
2066               url:
2067                 description: |-
2068                   URL is the download link for the artifact output of the last repository
2069                   sync.
2070                 type: string
2071             type: object
2072         type: object
2073     served: true
2074     storage: false
2075     subresources:
2076       status: {}
2077   - additionalPrinterColumns:
2078     - jsonPath: .spec.url
2079       name: URL
2080       type: string
2081     - jsonPath: .metadata.creationTimestamp
2082       name: Age
2083       type: date
2084     - jsonPath: .status.conditions[?(@.type=="Ready")].status
2085       name: Ready
2086       type: string
2087     - jsonPath: .status.conditions[?(@.type=="Ready")].message
2088       name: Status
2089       type: string
2090     deprecated: true
2091     deprecationWarning: v1beta2 GitRepository is deprecated, upgrade to v1
2092     name: v1beta2
2093     schema:
2094       openAPIV3Schema:
2095         description: GitRepository is the Schema for the gitrepositories API.
2096         properties:
2097           apiVersion:
2098             description: |-
2099               APIVersion defines the versioned schema of this representation of an object.
2100               Servers should convert recognized schemas to the latest internal value, and
2101               may reject unrecognized values.
2102               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
2103             type: string
2104           kind:
2105             description: |-
2106               Kind is a string value representing the REST resource this object represents.
2107               Servers may infer this from the endpoint the client submits requests to.
2108               Cannot be updated.
2109               In CamelCase.
2110               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
2111             type: string
2112           metadata:
2113             type: object
2114           spec:
2115             description: |-
2116               GitRepositorySpec specifies the required configuration to produce an
2117               Artifact for a Git repository.
2118             properties:
2119               accessFrom:
2120                 description: |-
2121                   AccessFrom specifies an Access Control List for allowing cross-namespace
2122                   references to this object.
2123                   NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
2124                 properties:
2125                   namespaceSelectors:
2126                     description: |-
2127                       NamespaceSelectors is the list of namespace selectors to which this ACL applies.
2128                       Items in this list are evaluated using a logical OR operation.
2129                     items:
2130                       description: |-
2131                         NamespaceSelector selects the namespaces to which this ACL applies.
2132                         An empty map of MatchLabels matches all namespaces in a cluster.
2133                       properties:
2134                         matchLabels:
2135                           additionalProperties:
2136                             type: string
2137                           description: |-
2138                             MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
2139                             map is equivalent to an element of matchExpressions, whose key field is "key", the
2140                             operator is "In", and the values array contains only "value". The requirements are ANDed.
2141                           type: object
2142                       type: object
2143                     type: array
2144                 required:
2145                 - namespaceSelectors
2146                 type: object
2147               gitImplementation:
2148                 default: go-git
2149                 description: |-
2150                   GitImplementation specifies which Git client library implementation to
2151                   use. Defaults to 'go-git', valid values are ('go-git', 'libgit2').
2152                   Deprecated: gitImplementation is deprecated now that 'go-git' is the
2153                   only supported implementation.
2154                 enum:
2155                 - go-git
2156                 - libgit2
2157                 type: string
2158               ignore:
2159                 description: |-
2160                   Ignore overrides the set of excluded patterns in the .sourceignore format
2161                   (which is the same as .gitignore). If not provided, a default will be used,
2162                   consult the documentation for your version to find out what those are.
2163                 type: string
2164               include:
2165                 description: |-
2166                   Include specifies a list of GitRepository resources which Artifacts
2167                   should be included in the Artifact produced for this GitRepository.
2168                 items:
2169                   description: |-
2170                     GitRepositoryInclude specifies a local reference to a GitRepository which
2171                     Artifact (sub-)contents must be included, and where they should be placed.
2172                   properties:
2173                     fromPath:
2174                       description: |-
2175                         FromPath specifies the path to copy contents from, defaults to the root
2176                         of the Artifact.
2177                       type: string
2178                     repository:
2179                       description: |-
2180                         GitRepositoryRef specifies the GitRepository which Artifact contents
2181                         must be included.
2182                       properties:
2183                         name:
2184                           description: Name of the referent.
2185                           type: string
2186                       required:
2187                       - name
2188                       type: object
2189                     toPath:
2190                       description: |-
2191                         ToPath specifies the path to copy contents to, defaults to the name of
2192                         the GitRepositoryRef.
2193                       type: string
2194                   required:
2195                   - repository
2196                   type: object
2197                 type: array
2198               interval:
2199                 description: Interval at which to check the GitRepository for updates.
2200                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
2201                 type: string
2202               recurseSubmodules:
2203                 description: |-
2204                   RecurseSubmodules enables the initialization of all submodules within
2205                   the GitRepository as cloned from the URL, using their default settings.
2206                 type: boolean
2207               ref:
2208                 description: |-
2209                   Reference specifies the Git reference to resolve and monitor for
2210                   changes, defaults to the 'master' branch.
2211                 properties:
2212                   branch:
2213                     description: Branch to check out, defaults to 'master' if no other
2214                       field is defined.
2215                     type: string
2216                   commit:
2217                     description: |-
2218                       Commit SHA to check out, takes precedence over all reference fields.
2219
2220                       This can be combined with Branch to shallow clone the branch, in which
2221                       the commit is expected to exist.
2222                     type: string
2223                   name:
2224                     description: |-
2225                       Name of the reference to check out; takes precedence over Branch, Tag and SemVer.
2226
2227                       It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description
2228                       Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head"
2229                     type: string
2230                   semver:
2231                     description: SemVer tag expression to check out, takes precedence
2232                       over Tag.
2233                     type: string
2234                   tag:
2235                     description: Tag to check out, takes precedence over Branch.
2236                     type: string
2237                 type: object
2238               secretRef:
2239                 description: |-
2240                   SecretRef specifies the Secret containing authentication credentials for
2241                   the GitRepository.
2242                   For HTTPS repositories the Secret must contain 'username' and 'password'
2243                   fields for basic auth or 'bearerToken' field for token auth.
2244                   For SSH repositories the Secret must contain 'identity'
2245                   and 'known_hosts' fields.
2246                 properties:
2247                   name:
2248                     description: Name of the referent.
2249                     type: string
2250                 required:
2251                 - name
2252                 type: object
2253               suspend:
2254                 description: |-
2255                   Suspend tells the controller to suspend the reconciliation of this
2256                   GitRepository.
2257                 type: boolean
2258               timeout:
2259                 default: 60s
2260                 description: Timeout for Git operations like cloning, defaults to
2261                   60s.
2262                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
2263                 type: string
2264               url:
2265                 description: URL specifies the Git repository URL, it can be an HTTP/S
2266                   or SSH address.
2267                 pattern: ^(http|https|ssh)://.*$
2268                 type: string
2269               verify:
2270                 description: |-
2271                   Verification specifies the configuration to verify the Git commit
2272                   signature(s).
2273                 properties:
2274                   mode:
2275                     description: Mode specifies what Git object should be verified,
2276                       currently ('head').
2277                     enum:
2278                     - head
2279                     type: string
2280                   secretRef:
2281                     description: |-
2282                       SecretRef specifies the Secret containing the public keys of trusted Git
2283                       authors.
2284                     properties:
2285                       name:
2286                         description: Name of the referent.
2287                         type: string
2288                     required:
2289                     - name
2290                     type: object
2291                 required:
2292                 - mode
2293                 - secretRef
2294                 type: object
2295             required:
2296             - interval
2297             - url
2298             type: object
2299           status:
2300             default:
2301               observedGeneration: -1
2302             description: GitRepositoryStatus records the observed state of a Git repository.
2303             properties:
2304               artifact:
2305                 description: Artifact represents the last successful GitRepository
2306                   reconciliation.
2307                 properties:
2308                   digest:
2309                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
2310                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
2311                     type: string
2312                   lastUpdateTime:
2313                     description: |-
2314                       LastUpdateTime is the timestamp corresponding to the last update of the
2315                       Artifact.
2316                     format: date-time
2317                     type: string
2318                   metadata:
2319                     additionalProperties:
2320                       type: string
2321                     description: Metadata holds upstream information such as OCI annotations.
2322                     type: object
2323                   path:
2324                     description: |-
2325                       Path is the relative file path of the Artifact. It can be used to locate
2326                       the file in the root of the Artifact storage on the local file system of
2327                       the controller managing the Source.
2328                     type: string
2329                   revision:
2330                     description: |-
2331                       Revision is a human-readable identifier traceable in the origin source
2332                       system. It can be a Git commit SHA, Git tag, a Helm chart version, etc.
2333                     type: string
2334                   size:
2335                     description: Size is the number of bytes in the file.
2336                     format: int64
2337                     type: integer
2338                   url:
2339                     description: |-
2340                       URL is the HTTP address of the Artifact as exposed by the controller
2341                       managing the Source. It can be used to retrieve the Artifact for
2342                       consumption, e.g. by another controller applying the Artifact contents.
2343                     type: string
2344                 required:
2345                 - lastUpdateTime
2346                 - path
2347                 - revision
2348                 - url
2349                 type: object
2350               conditions:
2351                 description: Conditions holds the conditions for the GitRepository.
2352                 items:
2353                   description: Condition contains details for one aspect of the current
2354                     state of this API Resource.
2355                   properties:
2356                     lastTransitionTime:
2357                       description: |-
2358                         lastTransitionTime is the last time the condition transitioned from one status to another.
2359                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
2360                       format: date-time
2361                       type: string
2362                     message:
2363                       description: |-
2364                         message is a human readable message indicating details about the transition.
2365                         This may be an empty string.
2366                       maxLength: 32768
2367                       type: string
2368                     observedGeneration:
2369                       description: |-
2370                         observedGeneration represents the .metadata.generation that the condition was set based upon.
2371                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
2372                         with respect to the current state of the instance.
2373                       format: int64
2374                       minimum: 0
2375                       type: integer
2376                     reason:
2377                       description: |-
2378                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
2379                         Producers of specific condition types may define expected values and meanings for this field,
2380                         and whether the values are considered a guaranteed API.
2381                         The value should be a CamelCase string.
2382                         This field may not be empty.
2383                       maxLength: 1024
2384                       minLength: 1
2385                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
2386                       type: string
2387                     status:
2388                       description: status of the condition, one of True, False, Unknown.
2389                       enum:
2390                       - "True"
2391                       - "False"
2392                       - Unknown
2393                       type: string
2394                     type:
2395                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
2396                       maxLength: 316
2397                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
2398                       type: string
2399                   required:
2400                   - lastTransitionTime
2401                   - message
2402                   - reason
2403                   - status
2404                   - type
2405                   type: object
2406                 type: array
2407               contentConfigChecksum:
2408                 description: |-
2409                   ContentConfigChecksum is a checksum of all the configurations related to
2410                   the content of the source artifact:
2411                    - .spec.ignore
2412                    - .spec.recurseSubmodules
2413                    - .spec.included and the checksum of the included artifacts
2414                   observed in .status.observedGeneration version of the object. This can
2415                   be used to determine if the content of the included repository has
2416                   changed.
2417                   It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`.
2418
2419                   Deprecated: Replaced with explicit fields for observed artifact content
2420                   config in the status.
2421                 type: string
2422               includedArtifacts:
2423                 description: |-
2424                   IncludedArtifacts contains a list of the last successfully included
2425                   Artifacts as instructed by GitRepositorySpec.Include.
2426                 items:
2427                   description: Artifact represents the output of a Source reconciliation.
2428                   properties:
2429                     digest:
2430                       description: Digest is the digest of the file in the form of
2431                         '<algorithm>:<checksum>'.
2432                       pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
2433                       type: string
2434                     lastUpdateTime:
2435                       description: |-
2436                         LastUpdateTime is the timestamp corresponding to the last update of the
2437                         Artifact.
2438                       format: date-time
2439                       type: string
2440                     metadata:
2441                       additionalProperties:
2442                         type: string
2443                       description: Metadata holds upstream information such as OCI
2444                         annotations.
2445                       type: object
2446                     path:
2447                       description: |-
2448                         Path is the relative file path of the Artifact. It can be used to locate
2449                         the file in the root of the Artifact storage on the local file system of
2450                         the controller managing the Source.
2451                       type: string
2452                     revision:
2453                       description: |-
2454                         Revision is a human-readable identifier traceable in the origin source
2455                         system. It can be a Git commit SHA, Git tag, a Helm chart version, etc.
2456                       type: string
2457                     size:
2458                       description: Size is the number of bytes in the file.
2459                       format: int64
2460                       type: integer
2461                     url:
2462                       description: |-
2463                         URL is the HTTP address of the Artifact as exposed by the controller
2464                         managing the Source. It can be used to retrieve the Artifact for
2465                         consumption, e.g. by another controller applying the Artifact contents.
2466                       type: string
2467                   required:
2468                   - lastUpdateTime
2469                   - path
2470                   - revision
2471                   - url
2472                   type: object
2473                 type: array
2474               lastHandledReconcileAt:
2475                 description: |-
2476                   LastHandledReconcileAt holds the value of the most recent
2477                   reconcile request value, so a change of the annotation value
2478                   can be detected.
2479                 type: string
2480               observedGeneration:
2481                 description: |-
2482                   ObservedGeneration is the last observed generation of the GitRepository
2483                   object.
2484                 format: int64
2485                 type: integer
2486               observedIgnore:
2487                 description: |-
2488                   ObservedIgnore is the observed exclusion patterns used for constructing
2489                   the source artifact.
2490                 type: string
2491               observedInclude:
2492                 description: |-
2493                   ObservedInclude is the observed list of GitRepository resources used to
2494                   to produce the current Artifact.
2495                 items:
2496                   description: |-
2497                     GitRepositoryInclude specifies a local reference to a GitRepository which
2498                     Artifact (sub-)contents must be included, and where they should be placed.
2499                   properties:
2500                     fromPath:
2501                       description: |-
2502                         FromPath specifies the path to copy contents from, defaults to the root
2503                         of the Artifact.
2504                       type: string
2505                     repository:
2506                       description: |-
2507                         GitRepositoryRef specifies the GitRepository which Artifact contents
2508                         must be included.
2509                       properties:
2510                         name:
2511                           description: Name of the referent.
2512                           type: string
2513                       required:
2514                       - name
2515                       type: object
2516                     toPath:
2517                       description: |-
2518                         ToPath specifies the path to copy contents to, defaults to the name of
2519                         the GitRepositoryRef.
2520                       type: string
2521                   required:
2522                   - repository
2523                   type: object
2524                 type: array
2525               observedRecurseSubmodules:
2526                 description: |-
2527                   ObservedRecurseSubmodules is the observed resource submodules
2528                   configuration used to produce the current Artifact.
2529                 type: boolean
2530               url:
2531                 description: |-
2532                   URL is the dynamic fetch link for the latest Artifact.
2533                   It is provided on a "best effort" basis, and using the precise
2534                   GitRepositoryStatus.Artifact data is recommended.
2535                 type: string
2536             type: object
2537         type: object
2538     served: true
2539     storage: false
2540     subresources:
2541       status: {}
2542 ---
2543 apiVersion: apiextensions.k8s.io/v1
2544 kind: CustomResourceDefinition
2545 metadata:
2546   annotations:
2547     controller-gen.kubebuilder.io/version: v0.16.1
2548   labels:
2549     app.kubernetes.io/component: source-controller
2550     app.kubernetes.io/instance: flux-system
2551     app.kubernetes.io/part-of: flux
2552     app.kubernetes.io/version: v2.4.0
2553   name: helmcharts.source.toolkit.fluxcd.io
2554 spec:
2555   group: source.toolkit.fluxcd.io
2556   names:
2557     kind: HelmChart
2558     listKind: HelmChartList
2559     plural: helmcharts
2560     shortNames:
2561     - hc
2562     singular: helmchart
2563   scope: Namespaced
2564   versions:
2565   - additionalPrinterColumns:
2566     - jsonPath: .spec.chart
2567       name: Chart
2568       type: string
2569     - jsonPath: .spec.version
2570       name: Version
2571       type: string
2572     - jsonPath: .spec.sourceRef.kind
2573       name: Source Kind
2574       type: string
2575     - jsonPath: .spec.sourceRef.name
2576       name: Source Name
2577       type: string
2578     - jsonPath: .metadata.creationTimestamp
2579       name: Age
2580       type: date
2581     - jsonPath: .status.conditions[?(@.type=="Ready")].status
2582       name: Ready
2583       type: string
2584     - jsonPath: .status.conditions[?(@.type=="Ready")].message
2585       name: Status
2586       type: string
2587     name: v1
2588     schema:
2589       openAPIV3Schema:
2590         description: HelmChart is the Schema for the helmcharts API.
2591         properties:
2592           apiVersion:
2593             description: |-
2594               APIVersion defines the versioned schema of this representation of an object.
2595               Servers should convert recognized schemas to the latest internal value, and
2596               may reject unrecognized values.
2597               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
2598             type: string
2599           kind:
2600             description: |-
2601               Kind is a string value representing the REST resource this object represents.
2602               Servers may infer this from the endpoint the client submits requests to.
2603               Cannot be updated.
2604               In CamelCase.
2605               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
2606             type: string
2607           metadata:
2608             type: object
2609           spec:
2610             description: HelmChartSpec specifies the desired state of a Helm chart.
2611             properties:
2612               chart:
2613                 description: |-
2614                   Chart is the name or path the Helm chart is available at in the
2615                   SourceRef.
2616                 type: string
2617               ignoreMissingValuesFiles:
2618                 description: |-
2619                   IgnoreMissingValuesFiles controls whether to silently ignore missing values
2620                   files rather than failing.
2621                 type: boolean
2622               interval:
2623                 description: |-
2624                   Interval at which the HelmChart SourceRef is checked for updates.
2625                   This interval is approximate and may be subject to jitter to ensure
2626                   efficient use of resources.
2627                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
2628                 type: string
2629               reconcileStrategy:
2630                 default: ChartVersion
2631                 description: |-
2632                   ReconcileStrategy determines what enables the creation of a new artifact.
2633                   Valid values are ('ChartVersion', 'Revision').
2634                   See the documentation of the values for an explanation on their behavior.
2635                   Defaults to ChartVersion when omitted.
2636                 enum:
2637                 - ChartVersion
2638                 - Revision
2639                 type: string
2640               sourceRef:
2641                 description: SourceRef is the reference to the Source the chart is
2642                   available at.
2643                 properties:
2644                   apiVersion:
2645                     description: APIVersion of the referent.
2646                     type: string
2647                   kind:
2648                     description: |-
2649                       Kind of the referent, valid values are ('HelmRepository', 'GitRepository',
2650                       'Bucket').
2651                     enum:
2652                     - HelmRepository
2653                     - GitRepository
2654                     - Bucket
2655                     type: string
2656                   name:
2657                     description: Name of the referent.
2658                     type: string
2659                 required:
2660                 - kind
2661                 - name
2662                 type: object
2663               suspend:
2664                 description: |-
2665                   Suspend tells the controller to suspend the reconciliation of this
2666                   source.
2667                 type: boolean
2668               valuesFiles:
2669                 description: |-
2670                   ValuesFiles is an alternative list of values files to use as the chart
2671                   values (values.yaml is not included by default), expected to be a
2672                   relative path in the SourceRef.
2673                   Values files are merged in the order of this list with the last file
2674                   overriding the first. Ignored when omitted.
2675                 items:
2676                   type: string
2677                 type: array
2678               verify:
2679                 description: |-
2680                   Verify contains the secret name containing the trusted public keys
2681                   used to verify the signature and specifies which provider to use to check
2682                   whether OCI image is authentic.
2683                   This field is only supported when using HelmRepository source with spec.type 'oci'.
2684                   Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified.
2685                 properties:
2686                   matchOIDCIdentity:
2687                     description: |-
2688                       MatchOIDCIdentity specifies the identity matching criteria to use
2689                       while verifying an OCI artifact which was signed using Cosign keyless
2690                       signing. The artifact's identity is deemed to be verified if any of the
2691                       specified matchers match against the identity.
2692                     items:
2693                       description: |-
2694                         OIDCIdentityMatch specifies options for verifying the certificate identity,
2695                         i.e. the issuer and the subject of the certificate.
2696                       properties:
2697                         issuer:
2698                           description: |-
2699                             Issuer specifies the regex pattern to match against to verify
2700                             the OIDC issuer in the Fulcio certificate. The pattern must be a
2701                             valid Go regular expression.
2702                           type: string
2703                         subject:
2704                           description: |-
2705                             Subject specifies the regex pattern to match against to verify
2706                             the identity subject in the Fulcio certificate. The pattern must
2707                             be a valid Go regular expression.
2708                           type: string
2709                       required:
2710                       - issuer
2711                       - subject
2712                       type: object
2713                     type: array
2714                   provider:
2715                     default: cosign
2716                     description: Provider specifies the technology used to sign the
2717                       OCI Artifact.
2718                     enum:
2719                     - cosign
2720                     - notation
2721                     type: string
2722                   secretRef:
2723                     description: |-
2724                       SecretRef specifies the Kubernetes Secret containing the
2725                       trusted public keys.
2726                     properties:
2727                       name:
2728                         description: Name of the referent.
2729                         type: string
2730                     required:
2731                     - name
2732                     type: object
2733                 required:
2734                 - provider
2735                 type: object
2736               version:
2737                 default: '*'
2738                 description: |-
2739                   Version is the chart version semver expression, ignored for charts from
2740                   GitRepository and Bucket sources. Defaults to latest when omitted.
2741                 type: string
2742             required:
2743             - chart
2744             - interval
2745             - sourceRef
2746             type: object
2747           status:
2748             default:
2749               observedGeneration: -1
2750             description: HelmChartStatus records the observed state of the HelmChart.
2751             properties:
2752               artifact:
2753                 description: Artifact represents the output of the last successful
2754                   reconciliation.
2755                 properties:
2756                   digest:
2757                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
2758                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
2759                     type: string
2760                   lastUpdateTime:
2761                     description: |-
2762                       LastUpdateTime is the timestamp corresponding to the last update of the
2763                       Artifact.
2764                     format: date-time
2765                     type: string
2766                   metadata:
2767                     additionalProperties:
2768                       type: string
2769                     description: Metadata holds upstream information such as OCI annotations.
2770                     type: object
2771                   path:
2772                     description: |-
2773                       Path is the relative file path of the Artifact. It can be used to locate
2774                       the file in the root of the Artifact storage on the local file system of
2775                       the controller managing the Source.
2776                     type: string
2777                   revision:
2778                     description: |-
2779                       Revision is a human-readable identifier traceable in the origin source
2780                       system. It can be a Git commit SHA, Git tag, a Helm chart version, etc.
2781                     type: string
2782                   size:
2783                     description: Size is the number of bytes in the file.
2784                     format: int64
2785                     type: integer
2786                   url:
2787                     description: |-
2788                       URL is the HTTP address of the Artifact as exposed by the controller
2789                       managing the Source. It can be used to retrieve the Artifact for
2790                       consumption, e.g. by another controller applying the Artifact contents.
2791                     type: string
2792                 required:
2793                 - lastUpdateTime
2794                 - path
2795                 - revision
2796                 - url
2797                 type: object
2798               conditions:
2799                 description: Conditions holds the conditions for the HelmChart.
2800                 items:
2801                   description: Condition contains details for one aspect of the current
2802                     state of this API Resource.
2803                   properties:
2804                     lastTransitionTime:
2805                       description: |-
2806                         lastTransitionTime is the last time the condition transitioned from one status to another.
2807                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
2808                       format: date-time
2809                       type: string
2810                     message:
2811                       description: |-
2812                         message is a human readable message indicating details about the transition.
2813                         This may be an empty string.
2814                       maxLength: 32768
2815                       type: string
2816                     observedGeneration:
2817                       description: |-
2818                         observedGeneration represents the .metadata.generation that the condition was set based upon.
2819                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
2820                         with respect to the current state of the instance.
2821                       format: int64
2822                       minimum: 0
2823                       type: integer
2824                     reason:
2825                       description: |-
2826                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
2827                         Producers of specific condition types may define expected values and meanings for this field,
2828                         and whether the values are considered a guaranteed API.
2829                         The value should be a CamelCase string.
2830                         This field may not be empty.
2831                       maxLength: 1024
2832                       minLength: 1
2833                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
2834                       type: string
2835                     status:
2836                       description: status of the condition, one of True, False, Unknown.
2837                       enum:
2838                       - "True"
2839                       - "False"
2840                       - Unknown
2841                       type: string
2842                     type:
2843                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
2844                       maxLength: 316
2845                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
2846                       type: string
2847                   required:
2848                   - lastTransitionTime
2849                   - message
2850                   - reason
2851                   - status
2852                   - type
2853                   type: object
2854                 type: array
2855               lastHandledReconcileAt:
2856                 description: |-
2857                   LastHandledReconcileAt holds the value of the most recent
2858                   reconcile request value, so a change of the annotation value
2859                   can be detected.
2860                 type: string
2861               observedChartName:
2862                 description: |-
2863                   ObservedChartName is the last observed chart name as specified by the
2864                   resolved chart reference.
2865                 type: string
2866               observedGeneration:
2867                 description: |-
2868                   ObservedGeneration is the last observed generation of the HelmChart
2869                   object.
2870                 format: int64
2871                 type: integer
2872               observedSourceArtifactRevision:
2873                 description: |-
2874                   ObservedSourceArtifactRevision is the last observed Artifact.Revision
2875                   of the HelmChartSpec.SourceRef.
2876                 type: string
2877               observedValuesFiles:
2878                 description: |-
2879                   ObservedValuesFiles are the observed value files of the last successful
2880                   reconciliation.
2881                   It matches the chart in the last successfully reconciled artifact.
2882                 items:
2883                   type: string
2884                 type: array
2885               url:
2886                 description: |-
2887                   URL is the dynamic fetch link for the latest Artifact.
2888                   It is provided on a "best effort" basis, and using the precise
2889                   BucketStatus.Artifact data is recommended.
2890                 type: string
2891             type: object
2892         type: object
2893     served: true
2894     storage: true
2895     subresources:
2896       status: {}
2897   - additionalPrinterColumns:
2898     - jsonPath: .spec.chart
2899       name: Chart
2900       type: string
2901     - jsonPath: .spec.version
2902       name: Version
2903       type: string
2904     - jsonPath: .spec.sourceRef.kind
2905       name: Source Kind
2906       type: string
2907     - jsonPath: .spec.sourceRef.name
2908       name: Source Name
2909       type: string
2910     - jsonPath: .status.conditions[?(@.type=="Ready")].status
2911       name: Ready
2912       type: string
2913     - jsonPath: .status.conditions[?(@.type=="Ready")].message
2914       name: Status
2915       type: string
2916     - jsonPath: .metadata.creationTimestamp
2917       name: Age
2918       type: date
2919     deprecated: true
2920     deprecationWarning: v1beta1 HelmChart is deprecated, upgrade to v1
2921     name: v1beta1
2922     schema:
2923       openAPIV3Schema:
2924         description: HelmChart is the Schema for the helmcharts API
2925         properties:
2926           apiVersion:
2927             description: |-
2928               APIVersion defines the versioned schema of this representation of an object.
2929               Servers should convert recognized schemas to the latest internal value, and
2930               may reject unrecognized values.
2931               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
2932             type: string
2933           kind:
2934             description: |-
2935               Kind is a string value representing the REST resource this object represents.
2936               Servers may infer this from the endpoint the client submits requests to.
2937               Cannot be updated.
2938               In CamelCase.
2939               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
2940             type: string
2941           metadata:
2942             type: object
2943           spec:
2944             description: HelmChartSpec defines the desired state of a Helm chart.
2945             properties:
2946               accessFrom:
2947                 description: AccessFrom defines an Access Control List for allowing
2948                   cross-namespace references to this object.
2949                 properties:
2950                   namespaceSelectors:
2951                     description: |-
2952                       NamespaceSelectors is the list of namespace selectors to which this ACL applies.
2953                       Items in this list are evaluated using a logical OR operation.
2954                     items:
2955                       description: |-
2956                         NamespaceSelector selects the namespaces to which this ACL applies.
2957                         An empty map of MatchLabels matches all namespaces in a cluster.
2958                       properties:
2959                         matchLabels:
2960                           additionalProperties:
2961                             type: string
2962                           description: |-
2963                             MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
2964                             map is equivalent to an element of matchExpressions, whose key field is "key", the
2965                             operator is "In", and the values array contains only "value". The requirements are ANDed.
2966                           type: object
2967                       type: object
2968                     type: array
2969                 required:
2970                 - namespaceSelectors
2971                 type: object
2972               chart:
2973                 description: The name or path the Helm chart is available at in the
2974                   SourceRef.
2975                 type: string
2976               interval:
2977                 description: The interval at which to check the Source for updates.
2978                 type: string
2979               reconcileStrategy:
2980                 default: ChartVersion
2981                 description: |-
2982                   Determines what enables the creation of a new artifact. Valid values are
2983                   ('ChartVersion', 'Revision').
2984                   See the documentation of the values for an explanation on their behavior.
2985                   Defaults to ChartVersion when omitted.
2986                 enum:
2987                 - ChartVersion
2988                 - Revision
2989                 type: string
2990               sourceRef:
2991                 description: The reference to the Source the chart is available at.
2992                 properties:
2993                   apiVersion:
2994                     description: APIVersion of the referent.
2995                     type: string
2996                   kind:
2997                     description: |-
2998                       Kind of the referent, valid values are ('HelmRepository', 'GitRepository',
2999                       'Bucket').
3000                     enum:
3001                     - HelmRepository
3002                     - GitRepository
3003                     - Bucket
3004                     type: string
3005                   name:
3006                     description: Name of the referent.
3007                     type: string
3008                 required:
3009                 - kind
3010                 - name
3011                 type: object
3012               suspend:
3013                 description: This flag tells the controller to suspend the reconciliation
3014                   of this source.
3015                 type: boolean
3016               valuesFile:
3017                 description: |-
3018                   Alternative values file to use as the default chart values, expected to
3019                   be a relative path in the SourceRef. Deprecated in favor of ValuesFiles,
3020                   for backwards compatibility the file defined here is merged before the
3021                   ValuesFiles items. Ignored when omitted.
3022                 type: string
3023               valuesFiles:
3024                 description: |-
3025                   Alternative list of values files to use as the chart values (values.yaml
3026                   is not included by default), expected to be a relative path in the SourceRef.
3027                   Values files are merged in the order of this list with the last file overriding
3028                   the first. Ignored when omitted.
3029                 items:
3030                   type: string
3031                 type: array
3032               version:
3033                 default: '*'
3034                 description: |-
3035                   The chart version semver expression, ignored for charts from GitRepository
3036                   and Bucket sources. Defaults to latest when omitted.
3037                 type: string
3038             required:
3039             - chart
3040             - interval
3041             - sourceRef
3042             type: object
3043           status:
3044             default:
3045               observedGeneration: -1
3046             description: HelmChartStatus defines the observed state of the HelmChart.
3047             properties:
3048               artifact:
3049                 description: Artifact represents the output of the last successful
3050                   chart sync.
3051                 properties:
3052                   checksum:
3053                     description: Checksum is the SHA256 checksum of the artifact.
3054                     type: string
3055                   lastUpdateTime:
3056                     description: |-
3057                       LastUpdateTime is the timestamp corresponding to the last update of this
3058                       artifact.
3059                     format: date-time
3060                     type: string
3061                   path:
3062                     description: Path is the relative file path of this artifact.
3063                     type: string
3064                   revision:
3065                     description: |-
3066                       Revision is a human readable identifier traceable in the origin source
3067                       system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm
3068                       chart version, etc.
3069                     type: string
3070                   url:
3071                     description: URL is the HTTP address of this artifact.
3072                     type: string
3073                 required:
3074                 - lastUpdateTime
3075                 - path
3076                 - url
3077                 type: object
3078               conditions:
3079                 description: Conditions holds the conditions for the HelmChart.
3080                 items:
3081                   description: Condition contains details for one aspect of the current
3082                     state of this API Resource.
3083                   properties:
3084                     lastTransitionTime:
3085                       description: |-
3086                         lastTransitionTime is the last time the condition transitioned from one status to another.
3087                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
3088                       format: date-time
3089                       type: string
3090                     message:
3091                       description: |-
3092                         message is a human readable message indicating details about the transition.
3093                         This may be an empty string.
3094                       maxLength: 32768
3095                       type: string
3096                     observedGeneration:
3097                       description: |-
3098                         observedGeneration represents the .metadata.generation that the condition was set based upon.
3099                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
3100                         with respect to the current state of the instance.
3101                       format: int64
3102                       minimum: 0
3103                       type: integer
3104                     reason:
3105                       description: |-
3106                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
3107                         Producers of specific condition types may define expected values and meanings for this field,
3108                         and whether the values are considered a guaranteed API.
3109                         The value should be a CamelCase string.
3110                         This field may not be empty.
3111                       maxLength: 1024
3112                       minLength: 1
3113                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3114                       type: string
3115                     status:
3116                       description: status of the condition, one of True, False, Unknown.
3117                       enum:
3118                       - "True"
3119                       - "False"
3120                       - Unknown
3121                       type: string
3122                     type:
3123                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
3124                       maxLength: 316
3125                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3126                       type: string
3127                   required:
3128                   - lastTransitionTime
3129                   - message
3130                   - reason
3131                   - status
3132                   - type
3133                   type: object
3134                 type: array
3135               lastHandledReconcileAt:
3136                 description: |-
3137                   LastHandledReconcileAt holds the value of the most recent
3138                   reconcile request value, so a change of the annotation value
3139                   can be detected.
3140                 type: string
3141               observedGeneration:
3142                 description: ObservedGeneration is the last observed generation.
3143                 format: int64
3144                 type: integer
3145               url:
3146                 description: URL is the download link for the last chart pulled.
3147                 type: string
3148             type: object
3149         type: object
3150     served: true
3151     storage: false
3152     subresources:
3153       status: {}
3154   - additionalPrinterColumns:
3155     - jsonPath: .spec.chart
3156       name: Chart
3157       type: string
3158     - jsonPath: .spec.version
3159       name: Version
3160       type: string
3161     - jsonPath: .spec.sourceRef.kind
3162       name: Source Kind
3163       type: string
3164     - jsonPath: .spec.sourceRef.name
3165       name: Source Name
3166       type: string
3167     - jsonPath: .metadata.creationTimestamp
3168       name: Age
3169       type: date
3170     - jsonPath: .status.conditions[?(@.type=="Ready")].status
3171       name: Ready
3172       type: string
3173     - jsonPath: .status.conditions[?(@.type=="Ready")].message
3174       name: Status
3175       type: string
3176     deprecated: true
3177     deprecationWarning: v1beta2 HelmChart is deprecated, upgrade to v1
3178     name: v1beta2
3179     schema:
3180       openAPIV3Schema:
3181         description: HelmChart is the Schema for the helmcharts API.
3182         properties:
3183           apiVersion:
3184             description: |-
3185               APIVersion defines the versioned schema of this representation of an object.
3186               Servers should convert recognized schemas to the latest internal value, and
3187               may reject unrecognized values.
3188               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
3189             type: string
3190           kind:
3191             description: |-
3192               Kind is a string value representing the REST resource this object represents.
3193               Servers may infer this from the endpoint the client submits requests to.
3194               Cannot be updated.
3195               In CamelCase.
3196               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
3197             type: string
3198           metadata:
3199             type: object
3200           spec:
3201             description: HelmChartSpec specifies the desired state of a Helm chart.
3202             properties:
3203               accessFrom:
3204                 description: |-
3205                   AccessFrom specifies an Access Control List for allowing cross-namespace
3206                   references to this object.
3207                   NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
3208                 properties:
3209                   namespaceSelectors:
3210                     description: |-
3211                       NamespaceSelectors is the list of namespace selectors to which this ACL applies.
3212                       Items in this list are evaluated using a logical OR operation.
3213                     items:
3214                       description: |-
3215                         NamespaceSelector selects the namespaces to which this ACL applies.
3216                         An empty map of MatchLabels matches all namespaces in a cluster.
3217                       properties:
3218                         matchLabels:
3219                           additionalProperties:
3220                             type: string
3221                           description: |-
3222                             MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
3223                             map is equivalent to an element of matchExpressions, whose key field is "key", the
3224                             operator is "In", and the values array contains only "value". The requirements are ANDed.
3225                           type: object
3226                       type: object
3227                     type: array
3228                 required:
3229                 - namespaceSelectors
3230                 type: object
3231               chart:
3232                 description: |-
3233                   Chart is the name or path the Helm chart is available at in the
3234                   SourceRef.
3235                 type: string
3236               ignoreMissingValuesFiles:
3237                 description: |-
3238                   IgnoreMissingValuesFiles controls whether to silently ignore missing values
3239                   files rather than failing.
3240                 type: boolean
3241               interval:
3242                 description: |-
3243                   Interval at which the HelmChart SourceRef is checked for updates.
3244                   This interval is approximate and may be subject to jitter to ensure
3245                   efficient use of resources.
3246                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
3247                 type: string
3248               reconcileStrategy:
3249                 default: ChartVersion
3250                 description: |-
3251                   ReconcileStrategy determines what enables the creation of a new artifact.
3252                   Valid values are ('ChartVersion', 'Revision').
3253                   See the documentation of the values for an explanation on their behavior.
3254                   Defaults to ChartVersion when omitted.
3255                 enum:
3256                 - ChartVersion
3257                 - Revision
3258                 type: string
3259               sourceRef:
3260                 description: SourceRef is the reference to the Source the chart is
3261                   available at.
3262                 properties:
3263                   apiVersion:
3264                     description: APIVersion of the referent.
3265                     type: string
3266                   kind:
3267                     description: |-
3268                       Kind of the referent, valid values are ('HelmRepository', 'GitRepository',
3269                       'Bucket').
3270                     enum:
3271                     - HelmRepository
3272                     - GitRepository
3273                     - Bucket
3274                     type: string
3275                   name:
3276                     description: Name of the referent.
3277                     type: string
3278                 required:
3279                 - kind
3280                 - name
3281                 type: object
3282               suspend:
3283                 description: |-
3284                   Suspend tells the controller to suspend the reconciliation of this
3285                   source.
3286                 type: boolean
3287               valuesFile:
3288                 description: |-
3289                   ValuesFile is an alternative values file to use as the default chart
3290                   values, expected to be a relative path in the SourceRef. Deprecated in
3291                   favor of ValuesFiles, for backwards compatibility the file specified here
3292                   is merged before the ValuesFiles items. Ignored when omitted.
3293                 type: string
3294               valuesFiles:
3295                 description: |-
3296                   ValuesFiles is an alternative list of values files to use as the chart
3297                   values (values.yaml is not included by default), expected to be a
3298                   relative path in the SourceRef.
3299                   Values files are merged in the order of this list with the last file
3300                   overriding the first. Ignored when omitted.
3301                 items:
3302                   type: string
3303                 type: array
3304               verify:
3305                 description: |-
3306                   Verify contains the secret name containing the trusted public keys
3307                   used to verify the signature and specifies which provider to use to check
3308                   whether OCI image is authentic.
3309                   This field is only supported when using HelmRepository source with spec.type 'oci'.
3310                   Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified.
3311                 properties:
3312                   matchOIDCIdentity:
3313                     description: |-
3314                       MatchOIDCIdentity specifies the identity matching criteria to use
3315                       while verifying an OCI artifact which was signed using Cosign keyless
3316                       signing. The artifact's identity is deemed to be verified if any of the
3317                       specified matchers match against the identity.
3318                     items:
3319                       description: |-
3320                         OIDCIdentityMatch specifies options for verifying the certificate identity,
3321                         i.e. the issuer and the subject of the certificate.
3322                       properties:
3323                         issuer:
3324                           description: |-
3325                             Issuer specifies the regex pattern to match against to verify
3326                             the OIDC issuer in the Fulcio certificate. The pattern must be a
3327                             valid Go regular expression.
3328                           type: string
3329                         subject:
3330                           description: |-
3331                             Subject specifies the regex pattern to match against to verify
3332                             the identity subject in the Fulcio certificate. The pattern must
3333                             be a valid Go regular expression.
3334                           type: string
3335                       required:
3336                       - issuer
3337                       - subject
3338                       type: object
3339                     type: array
3340                   provider:
3341                     default: cosign
3342                     description: Provider specifies the technology used to sign the
3343                       OCI Artifact.
3344                     enum:
3345                     - cosign
3346                     - notation
3347                     type: string
3348                   secretRef:
3349                     description: |-
3350                       SecretRef specifies the Kubernetes Secret containing the
3351                       trusted public keys.
3352                     properties:
3353                       name:
3354                         description: Name of the referent.
3355                         type: string
3356                     required:
3357                     - name
3358                     type: object
3359                 required:
3360                 - provider
3361                 type: object
3362               version:
3363                 default: '*'
3364                 description: |-
3365                   Version is the chart version semver expression, ignored for charts from
3366                   GitRepository and Bucket sources. Defaults to latest when omitted.
3367                 type: string
3368             required:
3369             - chart
3370             - interval
3371             - sourceRef
3372             type: object
3373           status:
3374             default:
3375               observedGeneration: -1
3376             description: HelmChartStatus records the observed state of the HelmChart.
3377             properties:
3378               artifact:
3379                 description: Artifact represents the output of the last successful
3380                   reconciliation.
3381                 properties:
3382                   digest:
3383                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
3384                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
3385                     type: string
3386                   lastUpdateTime:
3387                     description: |-
3388                       LastUpdateTime is the timestamp corresponding to the last update of the
3389                       Artifact.
3390                     format: date-time
3391                     type: string
3392                   metadata:
3393                     additionalProperties:
3394                       type: string
3395                     description: Metadata holds upstream information such as OCI annotations.
3396                     type: object
3397                   path:
3398                     description: |-
3399                       Path is the relative file path of the Artifact. It can be used to locate
3400                       the file in the root of the Artifact storage on the local file system of
3401                       the controller managing the Source.
3402                     type: string
3403                   revision:
3404                     description: |-
3405                       Revision is a human-readable identifier traceable in the origin source
3406                       system. It can be a Git commit SHA, Git tag, a Helm chart version, etc.
3407                     type: string
3408                   size:
3409                     description: Size is the number of bytes in the file.
3410                     format: int64
3411                     type: integer
3412                   url:
3413                     description: |-
3414                       URL is the HTTP address of the Artifact as exposed by the controller
3415                       managing the Source. It can be used to retrieve the Artifact for
3416                       consumption, e.g. by another controller applying the Artifact contents.
3417                     type: string
3418                 required:
3419                 - lastUpdateTime
3420                 - path
3421                 - revision
3422                 - url
3423                 type: object
3424               conditions:
3425                 description: Conditions holds the conditions for the HelmChart.
3426                 items:
3427                   description: Condition contains details for one aspect of the current
3428                     state of this API Resource.
3429                   properties:
3430                     lastTransitionTime:
3431                       description: |-
3432                         lastTransitionTime is the last time the condition transitioned from one status to another.
3433                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
3434                       format: date-time
3435                       type: string
3436                     message:
3437                       description: |-
3438                         message is a human readable message indicating details about the transition.
3439                         This may be an empty string.
3440                       maxLength: 32768
3441                       type: string
3442                     observedGeneration:
3443                       description: |-
3444                         observedGeneration represents the .metadata.generation that the condition was set based upon.
3445                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
3446                         with respect to the current state of the instance.
3447                       format: int64
3448                       minimum: 0
3449                       type: integer
3450                     reason:
3451                       description: |-
3452                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
3453                         Producers of specific condition types may define expected values and meanings for this field,
3454                         and whether the values are considered a guaranteed API.
3455                         The value should be a CamelCase string.
3456                         This field may not be empty.
3457                       maxLength: 1024
3458                       minLength: 1
3459                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3460                       type: string
3461                     status:
3462                       description: status of the condition, one of True, False, Unknown.
3463                       enum:
3464                       - "True"
3465                       - "False"
3466                       - Unknown
3467                       type: string
3468                     type:
3469                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
3470                       maxLength: 316
3471                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3472                       type: string
3473                   required:
3474                   - lastTransitionTime
3475                   - message
3476                   - reason
3477                   - status
3478                   - type
3479                   type: object
3480                 type: array
3481               lastHandledReconcileAt:
3482                 description: |-
3483                   LastHandledReconcileAt holds the value of the most recent
3484                   reconcile request value, so a change of the annotation value
3485                   can be detected.
3486                 type: string
3487               observedChartName:
3488                 description: |-
3489                   ObservedChartName is the last observed chart name as specified by the
3490                   resolved chart reference.
3491                 type: string
3492               observedGeneration:
3493                 description: |-
3494                   ObservedGeneration is the last observed generation of the HelmChart
3495                   object.
3496                 format: int64
3497                 type: integer
3498               observedSourceArtifactRevision:
3499                 description: |-
3500                   ObservedSourceArtifactRevision is the last observed Artifact.Revision
3501                   of the HelmChartSpec.SourceRef.
3502                 type: string
3503               observedValuesFiles:
3504                 description: |-
3505                   ObservedValuesFiles are the observed value files of the last successful
3506                   reconciliation.
3507                   It matches the chart in the last successfully reconciled artifact.
3508                 items:
3509                   type: string
3510                 type: array
3511               url:
3512                 description: |-
3513                   URL is the dynamic fetch link for the latest Artifact.
3514                   It is provided on a "best effort" basis, and using the precise
3515                   BucketStatus.Artifact data is recommended.
3516                 type: string
3517             type: object
3518         type: object
3519     served: true
3520     storage: false
3521     subresources:
3522       status: {}
3523 ---
3524 apiVersion: apiextensions.k8s.io/v1
3525 kind: CustomResourceDefinition
3526 metadata:
3527   annotations:
3528     controller-gen.kubebuilder.io/version: v0.16.1
3529   labels:
3530     app.kubernetes.io/component: source-controller
3531     app.kubernetes.io/instance: flux-system
3532     app.kubernetes.io/part-of: flux
3533     app.kubernetes.io/version: v2.4.0
3534   name: helmrepositories.source.toolkit.fluxcd.io
3535 spec:
3536   group: source.toolkit.fluxcd.io
3537   names:
3538     kind: HelmRepository
3539     listKind: HelmRepositoryList
3540     plural: helmrepositories
3541     shortNames:
3542     - helmrepo
3543     singular: helmrepository
3544   scope: Namespaced
3545   versions:
3546   - additionalPrinterColumns:
3547     - jsonPath: .spec.url
3548       name: URL
3549       type: string
3550     - jsonPath: .metadata.creationTimestamp
3551       name: Age
3552       type: date
3553     - jsonPath: .status.conditions[?(@.type=="Ready")].status
3554       name: Ready
3555       type: string
3556     - jsonPath: .status.conditions[?(@.type=="Ready")].message
3557       name: Status
3558       type: string
3559     name: v1
3560     schema:
3561       openAPIV3Schema:
3562         description: HelmRepository is the Schema for the helmrepositories API.
3563         properties:
3564           apiVersion:
3565             description: |-
3566               APIVersion defines the versioned schema of this representation of an object.
3567               Servers should convert recognized schemas to the latest internal value, and
3568               may reject unrecognized values.
3569               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
3570             type: string
3571           kind:
3572             description: |-
3573               Kind is a string value representing the REST resource this object represents.
3574               Servers may infer this from the endpoint the client submits requests to.
3575               Cannot be updated.
3576               In CamelCase.
3577               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
3578             type: string
3579           metadata:
3580             type: object
3581           spec:
3582             description: |-
3583               HelmRepositorySpec specifies the required configuration to produce an
3584               Artifact for a Helm repository index YAML.
3585             properties:
3586               accessFrom:
3587                 description: |-
3588                   AccessFrom specifies an Access Control List for allowing cross-namespace
3589                   references to this object.
3590                   NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
3591                 properties:
3592                   namespaceSelectors:
3593                     description: |-
3594                       NamespaceSelectors is the list of namespace selectors to which this ACL applies.
3595                       Items in this list are evaluated using a logical OR operation.
3596                     items:
3597                       description: |-
3598                         NamespaceSelector selects the namespaces to which this ACL applies.
3599                         An empty map of MatchLabels matches all namespaces in a cluster.
3600                       properties:
3601                         matchLabels:
3602                           additionalProperties:
3603                             type: string
3604                           description: |-
3605                             MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
3606                             map is equivalent to an element of matchExpressions, whose key field is "key", the
3607                             operator is "In", and the values array contains only "value". The requirements are ANDed.
3608                           type: object
3609                       type: object
3610                     type: array
3611                 required:
3612                 - namespaceSelectors
3613                 type: object
3614               certSecretRef:
3615                 description: |-
3616                   CertSecretRef can be given the name of a Secret containing
3617                   either or both of
3618
3619                   - a PEM-encoded client certificate (`tls.crt`) and private
3620                   key (`tls.key`);
3621                   - a PEM-encoded CA certificate (`ca.crt`)
3622
3623                   and whichever are supplied, will be used for connecting to the
3624                   registry. The client cert and key are useful if you are
3625                   authenticating with a certificate; the CA cert is useful if
3626                   you are using a self-signed server certificate. The Secret must
3627                   be of type `Opaque` or `kubernetes.io/tls`.
3628
3629                   It takes precedence over the values specified in the Secret referred
3630                   to by `.spec.secretRef`.
3631                 properties:
3632                   name:
3633                     description: Name of the referent.
3634                     type: string
3635                 required:
3636                 - name
3637                 type: object
3638               insecure:
3639                 description: |-
3640                   Insecure allows connecting to a non-TLS HTTP container registry.
3641                   This field is only taken into account if the .spec.type field is set to 'oci'.
3642                 type: boolean
3643               interval:
3644                 description: |-
3645                   Interval at which the HelmRepository URL is checked for updates.
3646                   This interval is approximate and may be subject to jitter to ensure
3647                   efficient use of resources.
3648                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
3649                 type: string
3650               passCredentials:
3651                 description: |-
3652                   PassCredentials allows the credentials from the SecretRef to be passed
3653                   on to a host that does not match the host as defined in URL.
3654                   This may be required if the host of the advertised chart URLs in the
3655                   index differ from the defined URL.
3656                   Enabling this should be done with caution, as it can potentially result
3657                   in credentials getting stolen in a MITM-attack.
3658                 type: boolean
3659               provider:
3660                 default: generic
3661                 description: |-
3662                   Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'.
3663                   This field is optional, and only taken into account if the .spec.type field is set to 'oci'.
3664                   When not specified, defaults to 'generic'.
3665                 enum:
3666                 - generic
3667                 - aws
3668                 - azure
3669                 - gcp
3670                 type: string
3671               secretRef:
3672                 description: |-
3673                   SecretRef specifies the Secret containing authentication credentials
3674                   for the HelmRepository.
3675                   For HTTP/S basic auth the secret must contain 'username' and 'password'
3676                   fields.
3677                   Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile'
3678                   keys is deprecated. Please use `.spec.certSecretRef` instead.
3679                 properties:
3680                   name:
3681                     description: Name of the referent.
3682                     type: string
3683                 required:
3684                 - name
3685                 type: object
3686               suspend:
3687                 description: |-
3688                   Suspend tells the controller to suspend the reconciliation of this
3689                   HelmRepository.
3690                 type: boolean
3691               timeout:
3692                 description: |-
3693                   Timeout is used for the index fetch operation for an HTTPS helm repository,
3694                   and for remote OCI Repository operations like pulling for an OCI helm
3695                   chart by the associated HelmChart.
3696                   Its default value is 60s.
3697                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
3698                 type: string
3699               type:
3700                 description: |-
3701                   Type of the HelmRepository.
3702                   When this field is set to  "oci", the URL field value must be prefixed with "oci://".
3703                 enum:
3704                 - default
3705                 - oci
3706                 type: string
3707               url:
3708                 description: |-
3709                   URL of the Helm repository, a valid URL contains at least a protocol and
3710                   host.
3711                 pattern: ^(http|https|oci)://.*$
3712                 type: string
3713             required:
3714             - url
3715             type: object
3716           status:
3717             default:
3718               observedGeneration: -1
3719             description: HelmRepositoryStatus records the observed state of the HelmRepository.
3720             properties:
3721               artifact:
3722                 description: Artifact represents the last successful HelmRepository
3723                   reconciliation.
3724                 properties:
3725                   digest:
3726                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
3727                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
3728                     type: string
3729                   lastUpdateTime:
3730                     description: |-
3731                       LastUpdateTime is the timestamp corresponding to the last update of the
3732                       Artifact.
3733                     format: date-time
3734                     type: string
3735                   metadata:
3736                     additionalProperties:
3737                       type: string
3738                     description: Metadata holds upstream information such as OCI annotations.
3739                     type: object
3740                   path:
3741                     description: |-
3742                       Path is the relative file path of the Artifact. It can be used to locate
3743                       the file in the root of the Artifact storage on the local file system of
3744                       the controller managing the Source.
3745                     type: string
3746                   revision:
3747                     description: |-
3748                       Revision is a human-readable identifier traceable in the origin source
3749                       system. It can be a Git commit SHA, Git tag, a Helm chart version, etc.
3750                     type: string
3751                   size:
3752                     description: Size is the number of bytes in the file.
3753                     format: int64
3754                     type: integer
3755                   url:
3756                     description: |-
3757                       URL is the HTTP address of the Artifact as exposed by the controller
3758                       managing the Source. It can be used to retrieve the Artifact for
3759                       consumption, e.g. by another controller applying the Artifact contents.
3760                     type: string
3761                 required:
3762                 - lastUpdateTime
3763                 - path
3764                 - revision
3765                 - url
3766                 type: object
3767               conditions:
3768                 description: Conditions holds the conditions for the HelmRepository.
3769                 items:
3770                   description: Condition contains details for one aspect of the current
3771                     state of this API Resource.
3772                   properties:
3773                     lastTransitionTime:
3774                       description: |-
3775                         lastTransitionTime is the last time the condition transitioned from one status to another.
3776                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
3777                       format: date-time
3778                       type: string
3779                     message:
3780                       description: |-
3781                         message is a human readable message indicating details about the transition.
3782                         This may be an empty string.
3783                       maxLength: 32768
3784                       type: string
3785                     observedGeneration:
3786                       description: |-
3787                         observedGeneration represents the .metadata.generation that the condition was set based upon.
3788                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
3789                         with respect to the current state of the instance.
3790                       format: int64
3791                       minimum: 0
3792                       type: integer
3793                     reason:
3794                       description: |-
3795                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
3796                         Producers of specific condition types may define expected values and meanings for this field,
3797                         and whether the values are considered a guaranteed API.
3798                         The value should be a CamelCase string.
3799                         This field may not be empty.
3800                       maxLength: 1024
3801                       minLength: 1
3802                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3803                       type: string
3804                     status:
3805                       description: status of the condition, one of True, False, Unknown.
3806                       enum:
3807                       - "True"
3808                       - "False"
3809                       - Unknown
3810                       type: string
3811                     type:
3812                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
3813                       maxLength: 316
3814                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3815                       type: string
3816                   required:
3817                   - lastTransitionTime
3818                   - message
3819                   - reason
3820                   - status
3821                   - type
3822                   type: object
3823                 type: array
3824               lastHandledReconcileAt:
3825                 description: |-
3826                   LastHandledReconcileAt holds the value of the most recent
3827                   reconcile request value, so a change of the annotation value
3828                   can be detected.
3829                 type: string
3830               observedGeneration:
3831                 description: |-
3832                   ObservedGeneration is the last observed generation of the HelmRepository
3833                   object.
3834                 format: int64
3835                 type: integer
3836               url:
3837                 description: |-
3838                   URL is the dynamic fetch link for the latest Artifact.
3839                   It is provided on a "best effort" basis, and using the precise
3840                   HelmRepositoryStatus.Artifact data is recommended.
3841                 type: string
3842             type: object
3843         type: object
3844     served: true
3845     storage: true
3846     subresources:
3847       status: {}
3848   - additionalPrinterColumns:
3849     - jsonPath: .spec.url
3850       name: URL
3851       type: string
3852     - jsonPath: .status.conditions[?(@.type=="Ready")].status
3853       name: Ready
3854       type: string
3855     - jsonPath: .status.conditions[?(@.type=="Ready")].message
3856       name: Status
3857       type: string
3858     - jsonPath: .metadata.creationTimestamp
3859       name: Age
3860       type: date
3861     deprecated: true
3862     deprecationWarning: v1beta1 HelmRepository is deprecated, upgrade to v1
3863     name: v1beta1
3864     schema:
3865       openAPIV3Schema:
3866         description: HelmRepository is the Schema for the helmrepositories API
3867         properties:
3868           apiVersion:
3869             description: |-
3870               APIVersion defines the versioned schema of this representation of an object.
3871               Servers should convert recognized schemas to the latest internal value, and
3872               may reject unrecognized values.
3873               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
3874             type: string
3875           kind:
3876             description: |-
3877               Kind is a string value representing the REST resource this object represents.
3878               Servers may infer this from the endpoint the client submits requests to.
3879               Cannot be updated.
3880               In CamelCase.
3881               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
3882             type: string
3883           metadata:
3884             type: object
3885           spec:
3886             description: HelmRepositorySpec defines the reference to a Helm repository.
3887             properties:
3888               accessFrom:
3889                 description: AccessFrom defines an Access Control List for allowing
3890                   cross-namespace references to this object.
3891                 properties:
3892                   namespaceSelectors:
3893                     description: |-
3894                       NamespaceSelectors is the list of namespace selectors to which this ACL applies.
3895                       Items in this list are evaluated using a logical OR operation.
3896                     items:
3897                       description: |-
3898                         NamespaceSelector selects the namespaces to which this ACL applies.
3899                         An empty map of MatchLabels matches all namespaces in a cluster.
3900                       properties:
3901                         matchLabels:
3902                           additionalProperties:
3903                             type: string
3904                           description: |-
3905                             MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
3906                             map is equivalent to an element of matchExpressions, whose key field is "key", the
3907                             operator is "In", and the values array contains only "value". The requirements are ANDed.
3908                           type: object
3909                       type: object
3910                     type: array
3911                 required:
3912                 - namespaceSelectors
3913                 type: object
3914               interval:
3915                 description: The interval at which to check the upstream for updates.
3916                 type: string
3917               passCredentials:
3918                 description: |-
3919                   PassCredentials allows the credentials from the SecretRef to be passed on to
3920                   a host that does not match the host as defined in URL.
3921                   This may be required if the host of the advertised chart URLs in the index
3922                   differ from the defined URL.
3923                   Enabling this should be done with caution, as it can potentially result in
3924                   credentials getting stolen in a MITM-attack.
3925                 type: boolean
3926               secretRef:
3927                 description: |-
3928                   The name of the secret containing authentication credentials for the Helm
3929                   repository.
3930                   For HTTP/S basic auth the secret must contain username and
3931                   password fields.
3932                   For TLS the secret must contain a certFile and keyFile, and/or
3933                   caFile fields.
3934                 properties:
3935                   name:
3936                     description: Name of the referent.
3937                     type: string
3938                 required:
3939                 - name
3940                 type: object
3941               suspend:
3942                 description: This flag tells the controller to suspend the reconciliation
3943                   of this source.
3944                 type: boolean
3945               timeout:
3946                 default: 60s
3947                 description: The timeout of index downloading, defaults to 60s.
3948                 type: string
3949               url:
3950                 description: The Helm repository URL, a valid URL contains at least
3951                   a protocol and host.
3952                 type: string
3953             required:
3954             - interval
3955             - url
3956             type: object
3957           status:
3958             default:
3959               observedGeneration: -1
3960             description: HelmRepositoryStatus defines the observed state of the HelmRepository.
3961             properties:
3962               artifact:
3963                 description: Artifact represents the output of the last successful
3964                   repository sync.
3965                 properties:
3966                   checksum:
3967                     description: Checksum is the SHA256 checksum of the artifact.
3968                     type: string
3969                   lastUpdateTime:
3970                     description: |-
3971                       LastUpdateTime is the timestamp corresponding to the last update of this
3972                       artifact.
3973                     format: date-time
3974                     type: string
3975                   path:
3976                     description: Path is the relative file path of this artifact.
3977                     type: string
3978                   revision:
3979                     description: |-
3980                       Revision is a human readable identifier traceable in the origin source
3981                       system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm
3982                       chart version, etc.
3983                     type: string
3984                   url:
3985                     description: URL is the HTTP address of this artifact.
3986                     type: string
3987                 required:
3988                 - lastUpdateTime
3989                 - path
3990                 - url
3991                 type: object
3992               conditions:
3993                 description: Conditions holds the conditions for the HelmRepository.
3994                 items:
3995                   description: Condition contains details for one aspect of the current
3996                     state of this API Resource.
3997                   properties:
3998                     lastTransitionTime:
3999                       description: |-
4000                         lastTransitionTime is the last time the condition transitioned from one status to another.
4001                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
4002                       format: date-time
4003                       type: string
4004                     message:
4005                       description: |-
4006                         message is a human readable message indicating details about the transition.
4007                         This may be an empty string.
4008                       maxLength: 32768
4009                       type: string
4010                     observedGeneration:
4011                       description: |-
4012                         observedGeneration represents the .metadata.generation that the condition was set based upon.
4013                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
4014                         with respect to the current state of the instance.
4015                       format: int64
4016                       minimum: 0
4017                       type: integer
4018                     reason:
4019                       description: |-
4020                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
4021                         Producers of specific condition types may define expected values and meanings for this field,
4022                         and whether the values are considered a guaranteed API.
4023                         The value should be a CamelCase string.
4024                         This field may not be empty.
4025                       maxLength: 1024
4026                       minLength: 1
4027                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
4028                       type: string
4029                     status:
4030                       description: status of the condition, one of True, False, Unknown.
4031                       enum:
4032                       - "True"
4033                       - "False"
4034                       - Unknown
4035                       type: string
4036                     type:
4037                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
4038                       maxLength: 316
4039                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
4040                       type: string
4041                   required:
4042                   - lastTransitionTime
4043                   - message
4044                   - reason
4045                   - status
4046                   - type
4047                   type: object
4048                 type: array
4049               lastHandledReconcileAt:
4050                 description: |-
4051                   LastHandledReconcileAt holds the value of the most recent
4052                   reconcile request value, so a change of the annotation value
4053                   can be detected.
4054                 type: string
4055               observedGeneration:
4056                 description: ObservedGeneration is the last observed generation.
4057                 format: int64
4058                 type: integer
4059               url:
4060                 description: URL is the download link for the last index fetched.
4061                 type: string
4062             type: object
4063         type: object
4064     served: true
4065     storage: false
4066     subresources:
4067       status: {}
4068   - additionalPrinterColumns:
4069     - jsonPath: .spec.url
4070       name: URL
4071       type: string
4072     - jsonPath: .metadata.creationTimestamp
4073       name: Age
4074       type: date
4075     - jsonPath: .status.conditions[?(@.type=="Ready")].status
4076       name: Ready
4077       type: string
4078     - jsonPath: .status.conditions[?(@.type=="Ready")].message
4079       name: Status
4080       type: string
4081     deprecated: true
4082     deprecationWarning: v1beta2 HelmRepository is deprecated, upgrade to v1
4083     name: v1beta2
4084     schema:
4085       openAPIV3Schema:
4086         description: HelmRepository is the Schema for the helmrepositories API.
4087         properties:
4088           apiVersion:
4089             description: |-
4090               APIVersion defines the versioned schema of this representation of an object.
4091               Servers should convert recognized schemas to the latest internal value, and
4092               may reject unrecognized values.
4093               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
4094             type: string
4095           kind:
4096             description: |-
4097               Kind is a string value representing the REST resource this object represents.
4098               Servers may infer this from the endpoint the client submits requests to.
4099               Cannot be updated.
4100               In CamelCase.
4101               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
4102             type: string
4103           metadata:
4104             type: object
4105           spec:
4106             description: |-
4107               HelmRepositorySpec specifies the required configuration to produce an
4108               Artifact for a Helm repository index YAML.
4109             properties:
4110               accessFrom:
4111                 description: |-
4112                   AccessFrom specifies an Access Control List for allowing cross-namespace
4113                   references to this object.
4114                   NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
4115                 properties:
4116                   namespaceSelectors:
4117                     description: |-
4118                       NamespaceSelectors is the list of namespace selectors to which this ACL applies.
4119                       Items in this list are evaluated using a logical OR operation.
4120                     items:
4121                       description: |-
4122                         NamespaceSelector selects the namespaces to which this ACL applies.
4123                         An empty map of MatchLabels matches all namespaces in a cluster.
4124                       properties:
4125                         matchLabels:
4126                           additionalProperties:
4127                             type: string
4128                           description: |-
4129                             MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
4130                             map is equivalent to an element of matchExpressions, whose key field is "key", the
4131                             operator is "In", and the values array contains only "value". The requirements are ANDed.
4132                           type: object
4133                       type: object
4134                     type: array
4135                 required:
4136                 - namespaceSelectors
4137                 type: object
4138               certSecretRef:
4139                 description: |-
4140                   CertSecretRef can be given the name of a Secret containing
4141                   either or both of
4142
4143                   - a PEM-encoded client certificate (`tls.crt`) and private
4144                   key (`tls.key`);
4145                   - a PEM-encoded CA certificate (`ca.crt`)
4146
4147                   and whichever are supplied, will be used for connecting to the
4148                   registry. The client cert and key are useful if you are
4149                   authenticating with a certificate; the CA cert is useful if
4150                   you are using a self-signed server certificate. The Secret must
4151                   be of type `Opaque` or `kubernetes.io/tls`.
4152
4153                   It takes precedence over the values specified in the Secret referred
4154                   to by `.spec.secretRef`.
4155                 properties:
4156                   name:
4157                     description: Name of the referent.
4158                     type: string
4159                 required:
4160                 - name
4161                 type: object
4162               insecure:
4163                 description: |-
4164                   Insecure allows connecting to a non-TLS HTTP container registry.
4165                   This field is only taken into account if the .spec.type field is set to 'oci'.
4166                 type: boolean
4167               interval:
4168                 description: |-
4169                   Interval at which the HelmRepository URL is checked for updates.
4170                   This interval is approximate and may be subject to jitter to ensure
4171                   efficient use of resources.
4172                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
4173                 type: string
4174               passCredentials:
4175                 description: |-
4176                   PassCredentials allows the credentials from the SecretRef to be passed
4177                   on to a host that does not match the host as defined in URL.
4178                   This may be required if the host of the advertised chart URLs in the
4179                   index differ from the defined URL.
4180                   Enabling this should be done with caution, as it can potentially result
4181                   in credentials getting stolen in a MITM-attack.
4182                 type: boolean
4183               provider:
4184                 default: generic
4185                 description: |-
4186                   Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'.
4187                   This field is optional, and only taken into account if the .spec.type field is set to 'oci'.
4188                   When not specified, defaults to 'generic'.
4189                 enum:
4190                 - generic
4191                 - aws
4192                 - azure
4193                 - gcp
4194                 type: string
4195               secretRef:
4196                 description: |-
4197                   SecretRef specifies the Secret containing authentication credentials
4198                   for the HelmRepository.
4199                   For HTTP/S basic auth the secret must contain 'username' and 'password'
4200                   fields.
4201                   Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile'
4202                   keys is deprecated. Please use `.spec.certSecretRef` instead.
4203                 properties:
4204                   name:
4205                     description: Name of the referent.
4206                     type: string
4207                 required:
4208                 - name
4209                 type: object
4210               suspend:
4211                 description: |-
4212                   Suspend tells the controller to suspend the reconciliation of this
4213                   HelmRepository.
4214                 type: boolean
4215               timeout:
4216                 description: |-
4217                   Timeout is used for the index fetch operation for an HTTPS helm repository,
4218                   and for remote OCI Repository operations like pulling for an OCI helm
4219                   chart by the associated HelmChart.
4220                   Its default value is 60s.
4221                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
4222                 type: string
4223               type:
4224                 description: |-
4225                   Type of the HelmRepository.
4226                   When this field is set to  "oci", the URL field value must be prefixed with "oci://".
4227                 enum:
4228                 - default
4229                 - oci
4230                 type: string
4231               url:
4232                 description: |-
4233                   URL of the Helm repository, a valid URL contains at least a protocol and
4234                   host.
4235                 pattern: ^(http|https|oci)://.*$
4236                 type: string
4237             required:
4238             - url
4239             type: object
4240           status:
4241             default:
4242               observedGeneration: -1
4243             description: HelmRepositoryStatus records the observed state of the HelmRepository.
4244             properties:
4245               artifact:
4246                 description: Artifact represents the last successful HelmRepository
4247                   reconciliation.
4248                 properties:
4249                   digest:
4250                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
4251                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
4252                     type: string
4253                   lastUpdateTime:
4254                     description: |-
4255                       LastUpdateTime is the timestamp corresponding to the last update of the
4256                       Artifact.
4257                     format: date-time
4258                     type: string
4259                   metadata:
4260                     additionalProperties:
4261                       type: string
4262                     description: Metadata holds upstream information such as OCI annotations.
4263                     type: object
4264                   path:
4265                     description: |-
4266                       Path is the relative file path of the Artifact. It can be used to locate
4267                       the file in the root of the Artifact storage on the local file system of
4268                       the controller managing the Source.
4269                     type: string
4270                   revision:
4271                     description: |-
4272                       Revision is a human-readable identifier traceable in the origin source
4273                       system. It can be a Git commit SHA, Git tag, a Helm chart version, etc.
4274                     type: string
4275                   size:
4276                     description: Size is the number of bytes in the file.
4277                     format: int64
4278                     type: integer
4279                   url:
4280                     description: |-
4281                       URL is the HTTP address of the Artifact as exposed by the controller
4282                       managing the Source. It can be used to retrieve the Artifact for
4283                       consumption, e.g. by another controller applying the Artifact contents.
4284                     type: string
4285                 required:
4286                 - lastUpdateTime
4287                 - path
4288                 - revision
4289                 - url
4290                 type: object
4291               conditions:
4292                 description: Conditions holds the conditions for the HelmRepository.
4293                 items:
4294                   description: Condition contains details for one aspect of the current
4295                     state of this API Resource.
4296                   properties:
4297                     lastTransitionTime:
4298                       description: |-
4299                         lastTransitionTime is the last time the condition transitioned from one status to another.
4300                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
4301                       format: date-time
4302                       type: string
4303                     message:
4304                       description: |-
4305                         message is a human readable message indicating details about the transition.
4306                         This may be an empty string.
4307                       maxLength: 32768
4308                       type: string
4309                     observedGeneration:
4310                       description: |-
4311                         observedGeneration represents the .metadata.generation that the condition was set based upon.
4312                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
4313                         with respect to the current state of the instance.
4314                       format: int64
4315                       minimum: 0
4316                       type: integer
4317                     reason:
4318                       description: |-
4319                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
4320                         Producers of specific condition types may define expected values and meanings for this field,
4321                         and whether the values are considered a guaranteed API.
4322                         The value should be a CamelCase string.
4323                         This field may not be empty.
4324                       maxLength: 1024
4325                       minLength: 1
4326                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
4327                       type: string
4328                     status:
4329                       description: status of the condition, one of True, False, Unknown.
4330                       enum:
4331                       - "True"
4332                       - "False"
4333                       - Unknown
4334                       type: string
4335                     type:
4336                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
4337                       maxLength: 316
4338                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
4339                       type: string
4340                   required:
4341                   - lastTransitionTime
4342                   - message
4343                   - reason
4344                   - status
4345                   - type
4346                   type: object
4347                 type: array
4348               lastHandledReconcileAt:
4349                 description: |-
4350                   LastHandledReconcileAt holds the value of the most recent
4351                   reconcile request value, so a change of the annotation value
4352                   can be detected.
4353                 type: string
4354               observedGeneration:
4355                 description: |-
4356                   ObservedGeneration is the last observed generation of the HelmRepository
4357                   object.
4358                 format: int64
4359                 type: integer
4360               url:
4361                 description: |-
4362                   URL is the dynamic fetch link for the latest Artifact.
4363                   It is provided on a "best effort" basis, and using the precise
4364                   HelmRepositoryStatus.Artifact data is recommended.
4365                 type: string
4366             type: object
4367         type: object
4368     served: true
4369     storage: false
4370     subresources:
4371       status: {}
4372 ---
4373 apiVersion: apiextensions.k8s.io/v1
4374 kind: CustomResourceDefinition
4375 metadata:
4376   annotations:
4377     controller-gen.kubebuilder.io/version: v0.16.1
4378   labels:
4379     app.kubernetes.io/component: source-controller
4380     app.kubernetes.io/instance: flux-system
4381     app.kubernetes.io/part-of: flux
4382     app.kubernetes.io/version: v2.4.0
4383   name: ocirepositories.source.toolkit.fluxcd.io
4384 spec:
4385   group: source.toolkit.fluxcd.io
4386   names:
4387     kind: OCIRepository
4388     listKind: OCIRepositoryList
4389     plural: ocirepositories
4390     shortNames:
4391     - ocirepo
4392     singular: ocirepository
4393   scope: Namespaced
4394   versions:
4395   - additionalPrinterColumns:
4396     - jsonPath: .spec.url
4397       name: URL
4398       type: string
4399     - jsonPath: .status.conditions[?(@.type=="Ready")].status
4400       name: Ready
4401       type: string
4402     - jsonPath: .status.conditions[?(@.type=="Ready")].message
4403       name: Status
4404       type: string
4405     - jsonPath: .metadata.creationTimestamp
4406       name: Age
4407       type: date
4408     name: v1beta2
4409     schema:
4410       openAPIV3Schema:
4411         description: OCIRepository is the Schema for the ocirepositories API
4412         properties:
4413           apiVersion:
4414             description: |-
4415               APIVersion defines the versioned schema of this representation of an object.
4416               Servers should convert recognized schemas to the latest internal value, and
4417               may reject unrecognized values.
4418               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
4419             type: string
4420           kind:
4421             description: |-
4422               Kind is a string value representing the REST resource this object represents.
4423               Servers may infer this from the endpoint the client submits requests to.
4424               Cannot be updated.
4425               In CamelCase.
4426               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
4427             type: string
4428           metadata:
4429             type: object
4430           spec:
4431             description: OCIRepositorySpec defines the desired state of OCIRepository
4432             properties:
4433               certSecretRef:
4434                 description: |-
4435                   CertSecretRef can be given the name of a Secret containing
4436                   either or both of
4437
4438                   - a PEM-encoded client certificate (`tls.crt`) and private
4439                   key (`tls.key`);
4440                   - a PEM-encoded CA certificate (`ca.crt`)
4441
4442                   and whichever are supplied, will be used for connecting to the
4443                   registry. The client cert and key are useful if you are
4444                   authenticating with a certificate; the CA cert is useful if
4445                   you are using a self-signed server certificate. The Secret must
4446                   be of type `Opaque` or `kubernetes.io/tls`.
4447
4448                   Note: Support for the `caFile`, `certFile` and `keyFile` keys have
4449                   been deprecated.
4450                 properties:
4451                   name:
4452                     description: Name of the referent.
4453                     type: string
4454                 required:
4455                 - name
4456                 type: object
4457               ignore:
4458                 description: |-
4459                   Ignore overrides the set of excluded patterns in the .sourceignore format
4460                   (which is the same as .gitignore). If not provided, a default will be used,
4461                   consult the documentation for your version to find out what those are.
4462                 type: string
4463               insecure:
4464                 description: Insecure allows connecting to a non-TLS HTTP container
4465                   registry.
4466                 type: boolean
4467               interval:
4468                 description: |-
4469                   Interval at which the OCIRepository URL is checked for updates.
4470                   This interval is approximate and may be subject to jitter to ensure
4471                   efficient use of resources.
4472                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
4473                 type: string
4474               layerSelector:
4475                 description: |-
4476                   LayerSelector specifies which layer should be extracted from the OCI artifact.
4477                   When not specified, the first layer found in the artifact is selected.
4478                 properties:
4479                   mediaType:
4480                     description: |-
4481                       MediaType specifies the OCI media type of the layer
4482                       which should be extracted from the OCI Artifact. The
4483                       first layer matching this type is selected.
4484                     type: string
4485                   operation:
4486                     description: |-
4487                       Operation specifies how the selected layer should be processed.
4488                       By default, the layer compressed content is extracted to storage.
4489                       When the operation is set to 'copy', the layer compressed content
4490                       is persisted to storage as it is.
4491                     enum:
4492                     - extract
4493                     - copy
4494                     type: string
4495                 type: object
4496               provider:
4497                 default: generic
4498                 description: |-
4499                   The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'.
4500                   When not specified, defaults to 'generic'.
4501                 enum:
4502                 - generic
4503                 - aws
4504                 - azure
4505                 - gcp
4506                 type: string
4507               proxySecretRef:
4508                 description: |-
4509                   ProxySecretRef specifies the Secret containing the proxy configuration
4510                   to use while communicating with the container registry.
4511                 properties:
4512                   name:
4513                     description: Name of the referent.
4514                     type: string
4515                 required:
4516                 - name
4517                 type: object
4518               ref:
4519                 description: |-
4520                   The OCI reference to pull and monitor for changes,
4521                   defaults to the latest tag.
4522                 properties:
4523                   digest:
4524                     description: |-
4525                       Digest is the image digest to pull, takes precedence over SemVer.
4526                       The value should be in the format 'sha256:<HASH>'.
4527                     type: string
4528                   semver:
4529                     description: |-
4530                       SemVer is the range of tags to pull selecting the latest within
4531                       the range, takes precedence over Tag.
4532                     type: string
4533                   semverFilter:
4534                     description: SemverFilter is a regex pattern to filter the tags
4535                       within the SemVer range.
4536                     type: string
4537                   tag:
4538                     description: Tag is the image tag to pull, defaults to latest.
4539                     type: string
4540                 type: object
4541               secretRef:
4542                 description: |-
4543                   SecretRef contains the secret name containing the registry login
4544                   credentials to resolve image metadata.
4545                   The secret must be of type kubernetes.io/dockerconfigjson.
4546                 properties:
4547                   name:
4548                     description: Name of the referent.
4549                     type: string
4550                 required:
4551                 - name
4552                 type: object
4553               serviceAccountName:
4554                 description: |-
4555                   ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate
4556                   the image pull if the service account has attached pull secrets. For more information:
4557                   https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account
4558                 type: string
4559               suspend:
4560                 description: This flag tells the controller to suspend the reconciliation
4561                   of this source.
4562                 type: boolean
4563               timeout:
4564                 default: 60s
4565                 description: The timeout for remote OCI Repository operations like
4566                   pulling, defaults to 60s.
4567                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
4568                 type: string
4569               url:
4570                 description: |-
4571                   URL is a reference to an OCI artifact repository hosted
4572                   on a remote container registry.
4573                 pattern: ^oci://.*$
4574                 type: string
4575               verify:
4576                 description: |-
4577                   Verify contains the secret name containing the trusted public keys
4578                   used to verify the signature and specifies which provider to use to check
4579                   whether OCI image is authentic.
4580                 properties:
4581                   matchOIDCIdentity:
4582                     description: |-
4583                       MatchOIDCIdentity specifies the identity matching criteria to use
4584                       while verifying an OCI artifact which was signed using Cosign keyless
4585                       signing. The artifact's identity is deemed to be verified if any of the
4586                       specified matchers match against the identity.
4587                     items:
4588                       description: |-
4589                         OIDCIdentityMatch specifies options for verifying the certificate identity,
4590                         i.e. the issuer and the subject of the certificate.
4591                       properties:
4592                         issuer:
4593                           description: |-
4594                             Issuer specifies the regex pattern to match against to verify
4595                             the OIDC issuer in the Fulcio certificate. The pattern must be a
4596                             valid Go regular expression.
4597                           type: string
4598                         subject:
4599                           description: |-
4600                             Subject specifies the regex pattern to match against to verify
4601                             the identity subject in the Fulcio certificate. The pattern must
4602                             be a valid Go regular expression.
4603                           type: string
4604                       required:
4605                       - issuer
4606                       - subject
4607                       type: object
4608                     type: array
4609                   provider:
4610                     default: cosign
4611                     description: Provider specifies the technology used to sign the
4612                       OCI Artifact.
4613                     enum:
4614                     - cosign
4615                     - notation
4616                     type: string
4617                   secretRef:
4618                     description: |-
4619                       SecretRef specifies the Kubernetes Secret containing the
4620                       trusted public keys.
4621                     properties:
4622                       name:
4623                         description: Name of the referent.
4624                         type: string
4625                     required:
4626                     - name
4627                     type: object
4628                 required:
4629                 - provider
4630                 type: object
4631             required:
4632             - interval
4633             - url
4634             type: object
4635           status:
4636             default:
4637               observedGeneration: -1
4638             description: OCIRepositoryStatus defines the observed state of OCIRepository
4639             properties:
4640               artifact:
4641                 description: Artifact represents the output of the last successful
4642                   OCI Repository sync.
4643                 properties:
4644                   digest:
4645                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
4646                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
4647                     type: string
4648                   lastUpdateTime:
4649                     description: |-
4650                       LastUpdateTime is the timestamp corresponding to the last update of the
4651                       Artifact.
4652                     format: date-time
4653                     type: string
4654                   metadata:
4655                     additionalProperties:
4656                       type: string
4657                     description: Metadata holds upstream information such as OCI annotations.
4658                     type: object
4659                   path:
4660                     description: |-
4661                       Path is the relative file path of the Artifact. It can be used to locate
4662                       the file in the root of the Artifact storage on the local file system of
4663                       the controller managing the Source.
4664                     type: string
4665                   revision:
4666                     description: |-
4667                       Revision is a human-readable identifier traceable in the origin source
4668                       system. It can be a Git commit SHA, Git tag, a Helm chart version, etc.
4669                     type: string
4670                   size:
4671                     description: Size is the number of bytes in the file.
4672                     format: int64
4673                     type: integer
4674                   url:
4675                     description: |-
4676                       URL is the HTTP address of the Artifact as exposed by the controller
4677                       managing the Source. It can be used to retrieve the Artifact for
4678                       consumption, e.g. by another controller applying the Artifact contents.
4679                     type: string
4680                 required:
4681                 - lastUpdateTime
4682                 - path
4683                 - revision
4684                 - url
4685                 type: object
4686               conditions:
4687                 description: Conditions holds the conditions for the OCIRepository.
4688                 items:
4689                   description: Condition contains details for one aspect of the current
4690                     state of this API Resource.
4691                   properties:
4692                     lastTransitionTime:
4693                       description: |-
4694                         lastTransitionTime is the last time the condition transitioned from one status to another.
4695                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
4696                       format: date-time
4697                       type: string
4698                     message:
4699                       description: |-
4700                         message is a human readable message indicating details about the transition.
4701                         This may be an empty string.
4702                       maxLength: 32768
4703                       type: string
4704                     observedGeneration:
4705                       description: |-
4706                         observedGeneration represents the .metadata.generation that the condition was set based upon.
4707                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
4708                         with respect to the current state of the instance.
4709                       format: int64
4710                       minimum: 0
4711                       type: integer
4712                     reason:
4713                       description: |-
4714                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
4715                         Producers of specific condition types may define expected values and meanings for this field,
4716                         and whether the values are considered a guaranteed API.
4717                         The value should be a CamelCase string.
4718                         This field may not be empty.
4719                       maxLength: 1024
4720                       minLength: 1
4721                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
4722                       type: string
4723                     status:
4724                       description: status of the condition, one of True, False, Unknown.
4725                       enum:
4726                       - "True"
4727                       - "False"
4728                       - Unknown
4729                       type: string
4730                     type:
4731                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
4732                       maxLength: 316
4733                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
4734                       type: string
4735                   required:
4736                   - lastTransitionTime
4737                   - message
4738                   - reason
4739                   - status
4740                   - type
4741                   type: object
4742                 type: array
4743               contentConfigChecksum:
4744                 description: |-
4745                   ContentConfigChecksum is a checksum of all the configurations related to
4746                   the content of the source artifact:
4747                    - .spec.ignore
4748                    - .spec.layerSelector
4749                   observed in .status.observedGeneration version of the object. This can
4750                   be used to determine if the content configuration has changed and the
4751                   artifact needs to be rebuilt.
4752                   It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`.
4753
4754                   Deprecated: Replaced with explicit fields for observed artifact content
4755                   config in the status.
4756                 type: string
4757               lastHandledReconcileAt:
4758                 description: |-
4759                   LastHandledReconcileAt holds the value of the most recent
4760                   reconcile request value, so a change of the annotation value
4761                   can be detected.
4762                 type: string
4763               observedGeneration:
4764                 description: ObservedGeneration is the last observed generation.
4765                 format: int64
4766                 type: integer
4767               observedIgnore:
4768                 description: |-
4769                   ObservedIgnore is the observed exclusion patterns used for constructing
4770                   the source artifact.
4771                 type: string
4772               observedLayerSelector:
4773                 description: |-
4774                   ObservedLayerSelector is the observed layer selector used for constructing
4775                   the source artifact.
4776                 properties:
4777                   mediaType:
4778                     description: |-
4779                       MediaType specifies the OCI media type of the layer
4780                       which should be extracted from the OCI Artifact. The
4781                       first layer matching this type is selected.
4782                     type: string
4783                   operation:
4784                     description: |-
4785                       Operation specifies how the selected layer should be processed.
4786                       By default, the layer compressed content is extracted to storage.
4787                       When the operation is set to 'copy', the layer compressed content
4788                       is persisted to storage as it is.
4789                     enum:
4790                     - extract
4791                     - copy
4792                     type: string
4793                 type: object
4794               url:
4795                 description: URL is the download link for the artifact output of the
4796                   last OCI Repository sync.
4797                 type: string
4798             type: object
4799         type: object
4800     served: true
4801     storage: true
4802     subresources:
4803       status: {}
4804 ---
4805 apiVersion: v1
4806 kind: ServiceAccount
4807 metadata:
4808   labels:
4809     app.kubernetes.io/component: source-controller
4810     app.kubernetes.io/instance: flux-system
4811     app.kubernetes.io/part-of: flux
4812     app.kubernetes.io/version: v2.4.0
4813   name: source-controller
4814   namespace: flux-system
4815 ---
4816 apiVersion: v1
4817 kind: Service
4818 metadata:
4819   labels:
4820     app.kubernetes.io/component: source-controller
4821     app.kubernetes.io/instance: flux-system
4822     app.kubernetes.io/part-of: flux
4823     app.kubernetes.io/version: v2.4.0
4824     control-plane: controller
4825   name: source-controller
4826   namespace: flux-system
4827 spec:
4828   ports:
4829   - name: http
4830     port: 80
4831     protocol: TCP
4832     targetPort: http
4833   selector:
4834     app: source-controller
4835   type: ClusterIP
4836 ---
4837 apiVersion: apps/v1
4838 kind: Deployment
4839 metadata:
4840   labels:
4841     app.kubernetes.io/component: source-controller
4842     app.kubernetes.io/instance: flux-system
4843     app.kubernetes.io/part-of: flux
4844     app.kubernetes.io/version: v2.4.0
4845     control-plane: controller
4846   name: source-controller
4847   namespace: flux-system
4848 spec:
4849   replicas: 1
4850   selector:
4851     matchLabels:
4852       app: source-controller
4853   strategy:
4854     type: Recreate
4855   template:
4856     metadata:
4857       annotations:
4858         prometheus.io/port: "8080"
4859         prometheus.io/scrape: "true"
4860       labels:
4861         app: source-controller
4862     spec:
4863       containers:
4864       - args:
4865         - --events-addr=http://notification-controller.flux-system.svc.cluster.local./
4866         - --watch-all-namespaces=true
4867         - --log-level=info
4868         - --log-encoding=json
4869         - --enable-leader-election
4870         - --storage-path=/data
4871         - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local.
4872         env:
4873         - name: RUNTIME_NAMESPACE
4874           valueFrom:
4875             fieldRef:
4876               fieldPath: metadata.namespace
4877         - name: TUF_ROOT
4878           value: /tmp/.sigstore
4879         - name: GOMAXPROCS
4880           valueFrom:
4881             resourceFieldRef:
4882               containerName: manager
4883               resource: limits.cpu
4884         - name: GOMEMLIMIT
4885           valueFrom:
4886             resourceFieldRef:
4887               containerName: manager
4888               resource: limits.memory
4889         image: ghcr.io/fluxcd/source-controller:v1.4.1
4890         imagePullPolicy: IfNotPresent
4891         livenessProbe:
4892           httpGet:
4893             path: /healthz
4894             port: healthz
4895         name: manager
4896         ports:
4897         - containerPort: 9090
4898           name: http
4899           protocol: TCP
4900         - containerPort: 8080
4901           name: http-prom
4902           protocol: TCP
4903         - containerPort: 9440
4904           name: healthz
4905           protocol: TCP
4906         readinessProbe:
4907           httpGet:
4908             path: /
4909             port: http
4910         resources:
4911           limits:
4912             cpu: 1000m
4913             memory: 1Gi
4914           requests:
4915             cpu: 50m
4916             memory: 64Mi
4917         securityContext:
4918           allowPrivilegeEscalation: false
4919           capabilities:
4920             drop:
4921             - ALL
4922           readOnlyRootFilesystem: true
4923           runAsNonRoot: true
4924           seccompProfile:
4925             type: RuntimeDefault
4926         volumeMounts:
4927         - mountPath: /data
4928           name: data
4929         - mountPath: /tmp
4930           name: tmp
4931       nodeSelector:
4932         kubernetes.io/os: linux
4933       priorityClassName: system-cluster-critical
4934       securityContext:
4935         fsGroup: 1337
4936       serviceAccountName: source-controller
4937       terminationGracePeriodSeconds: 10
4938       volumes:
4939       - emptyDir: {}
4940         name: data
4941       - emptyDir: {}
4942         name: tmp
4943 ---
4944 apiVersion: apiextensions.k8s.io/v1
4945 kind: CustomResourceDefinition
4946 metadata:
4947   annotations:
4948     controller-gen.kubebuilder.io/version: v0.16.1
4949   labels:
4950     app.kubernetes.io/component: kustomize-controller
4951     app.kubernetes.io/instance: flux-system
4952     app.kubernetes.io/part-of: flux
4953     app.kubernetes.io/version: v2.4.0
4954   name: kustomizations.kustomize.toolkit.fluxcd.io
4955 spec:
4956   group: kustomize.toolkit.fluxcd.io
4957   names:
4958     kind: Kustomization
4959     listKind: KustomizationList
4960     plural: kustomizations
4961     shortNames:
4962     - ks
4963     singular: kustomization
4964   scope: Namespaced
4965   versions:
4966   - additionalPrinterColumns:
4967     - jsonPath: .metadata.creationTimestamp
4968       name: Age
4969       type: date
4970     - jsonPath: .status.conditions[?(@.type=="Ready")].status
4971       name: Ready
4972       type: string
4973     - jsonPath: .status.conditions[?(@.type=="Ready")].message
4974       name: Status
4975       type: string
4976     name: v1
4977     schema:
4978       openAPIV3Schema:
4979         description: Kustomization is the Schema for the kustomizations API.
4980         properties:
4981           apiVersion:
4982             description: |-
4983               APIVersion defines the versioned schema of this representation of an object.
4984               Servers should convert recognized schemas to the latest internal value, and
4985               may reject unrecognized values.
4986               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
4987             type: string
4988           kind:
4989             description: |-
4990               Kind is a string value representing the REST resource this object represents.
4991               Servers may infer this from the endpoint the client submits requests to.
4992               Cannot be updated.
4993               In CamelCase.
4994               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
4995             type: string
4996           metadata:
4997             type: object
4998           spec:
4999             description: |-
5000               KustomizationSpec defines the configuration to calculate the desired state
5001               from a Source using Kustomize.
5002             properties:
5003               commonMetadata:
5004                 description: |-
5005                   CommonMetadata specifies the common labels and annotations that are
5006                   applied to all resources. Any existing label or annotation will be
5007                   overridden if its key matches a common one.
5008                 properties:
5009                   annotations:
5010                     additionalProperties:
5011                       type: string
5012                     description: Annotations to be added to the object's metadata.
5013                     type: object
5014                   labels:
5015                     additionalProperties:
5016                       type: string
5017                     description: Labels to be added to the object's metadata.
5018                     type: object
5019                 type: object
5020               components:
5021                 description: Components specifies relative paths to specifications
5022                   of other Components.
5023                 items:
5024                   type: string
5025                 type: array
5026               decryption:
5027                 description: Decrypt Kubernetes secrets before applying them on the
5028                   cluster.
5029                 properties:
5030                   provider:
5031                     description: Provider is the name of the decryption engine.
5032                     enum:
5033                     - sops
5034                     type: string
5035                   secretRef:
5036                     description: The secret name containing the private OpenPGP keys
5037                       used for decryption.
5038                     properties:
5039                       name:
5040                         description: Name of the referent.
5041                         type: string
5042                     required:
5043                     - name
5044                     type: object
5045                 required:
5046                 - provider
5047                 type: object
5048               dependsOn:
5049                 description: |-
5050                   DependsOn may contain a meta.NamespacedObjectReference slice
5051                   with references to Kustomization resources that must be ready before this
5052                   Kustomization can be reconciled.
5053                 items:
5054                   description: |-
5055                     NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any
5056                     namespace.
5057                   properties:
5058                     name:
5059                       description: Name of the referent.
5060                       type: string
5061                     namespace:
5062                       description: Namespace of the referent, when not specified it
5063                         acts as LocalObjectReference.
5064                       type: string
5065                   required:
5066                   - name
5067                   type: object
5068                 type: array
5069               force:
5070                 default: false
5071                 description: |-
5072                   Force instructs the controller to recreate resources
5073                   when patching fails due to an immutable field change.
5074                 type: boolean
5075               healthChecks:
5076                 description: A list of resources to be included in the health assessment.
5077                 items:
5078                   description: |-
5079                     NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object
5080                     in any namespace.
5081                   properties:
5082                     apiVersion:
5083                       description: API version of the referent, if not specified the
5084                         Kubernetes preferred version will be used.
5085                       type: string
5086                     kind:
5087                       description: Kind of the referent.
5088                       type: string
5089                     name:
5090                       description: Name of the referent.
5091                       type: string
5092                     namespace:
5093                       description: Namespace of the referent, when not specified it
5094                         acts as LocalObjectReference.
5095                       type: string
5096                   required:
5097                   - kind
5098                   - name
5099                   type: object
5100                 type: array
5101               images:
5102                 description: |-
5103                   Images is a list of (image name, new name, new tag or digest)
5104                   for changing image names, tags or digests. This can also be achieved with a
5105                   patch, but this operator is simpler to specify.
5106                 items:
5107                   description: Image contains an image name, a new name, a new tag
5108                     or digest, which will replace the original name and tag.
5109                   properties:
5110                     digest:
5111                       description: |-
5112                         Digest is the value used to replace the original image tag.
5113                         If digest is present NewTag value is ignored.
5114                       type: string
5115                     name:
5116                       description: Name is a tag-less image name.
5117                       type: string
5118                     newName:
5119                       description: NewName is the value used to replace the original
5120                         name.
5121                       type: string
5122                     newTag:
5123                       description: NewTag is the value used to replace the original
5124                         tag.
5125                       type: string
5126                   required:
5127                   - name
5128                   type: object
5129                 type: array
5130               interval:
5131                 description: |-
5132                   The interval at which to reconcile the Kustomization.
5133                   This interval is approximate and may be subject to jitter to ensure
5134                   efficient use of resources.
5135                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
5136                 type: string
5137               kubeConfig:
5138                 description: |-
5139                   The KubeConfig for reconciling the Kustomization on a remote cluster.
5140                   When used in combination with KustomizationSpec.ServiceAccountName,
5141                   forces the controller to act on behalf of that Service Account at the
5142                   target cluster.
5143                   If the --default-service-account flag is set, its value will be used as
5144                   a controller level fallback for when KustomizationSpec.ServiceAccountName
5145                   is empty.
5146                 properties:
5147                   secretRef:
5148                     description: |-
5149                       SecretRef holds the name of a secret that contains a key with
5150                       the kubeconfig file as the value. If no key is set, the key will default
5151                       to 'value'.
5152                       It is recommended that the kubeconfig is self-contained, and the secret
5153                       is regularly updated if credentials such as a cloud-access-token expire.
5154                       Cloud specific `cmd-path` auth helpers will not function without adding
5155                       binaries and credentials to the Pod that is responsible for reconciling
5156                       Kubernetes resources.
5157                     properties:
5158                       key:
5159                         description: Key in the Secret, when not specified an implementation-specific
5160                           default key is used.
5161                         type: string
5162                       name:
5163                         description: Name of the Secret.
5164                         type: string
5165                     required:
5166                     - name
5167                     type: object
5168                 required:
5169                 - secretRef
5170                 type: object
5171               namePrefix:
5172                 description: NamePrefix will prefix the names of all managed resources.
5173                 maxLength: 200
5174                 minLength: 1
5175                 type: string
5176               nameSuffix:
5177                 description: NameSuffix will suffix the names of all managed resources.
5178                 maxLength: 200
5179                 minLength: 1
5180                 type: string
5181               patches:
5182                 description: |-
5183                   Strategic merge and JSON patches, defined as inline YAML objects,
5184                   capable of targeting objects based on kind, label and annotation selectors.
5185                 items:
5186                   description: |-
5187                     Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should
5188                     be applied to.
5189                   properties:
5190                     patch:
5191                       description: |-
5192                         Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with
5193                         an array of operation objects.
5194                       type: string
5195                     target:
5196                       description: Target points to the resources that the patch document
5197                         should be applied to.
5198                       properties:
5199                         annotationSelector:
5200                           description: |-
5201                             AnnotationSelector is a string that follows the label selection expression
5202                             https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
5203                             It matches with the resource annotations.
5204                           type: string
5205                         group:
5206                           description: |-
5207                             Group is the API group to select resources from.
5208                             Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources.
5209                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5210                           type: string
5211                         kind:
5212                           description: |-
5213                             Kind of the API Group to select resources from.
5214                             Together with Group and Version it is capable of unambiguously
5215                             identifying and/or selecting resources.
5216                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5217                           type: string
5218                         labelSelector:
5219                           description: |-
5220                             LabelSelector is a string that follows the label selection expression
5221                             https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
5222                             It matches with the resource labels.
5223                           type: string
5224                         name:
5225                           description: Name to match resources with.
5226                           type: string
5227                         namespace:
5228                           description: Namespace to select resources from.
5229                           type: string
5230                         version:
5231                           description: |-
5232                             Version of the API Group to select resources from.
5233                             Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources.
5234                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5235                           type: string
5236                       type: object
5237                   required:
5238                   - patch
5239                   type: object
5240                 type: array
5241               path:
5242                 description: |-
5243                   Path to the directory containing the kustomization.yaml file, or the
5244                   set of plain YAMLs a kustomization.yaml should be generated for.
5245                   Defaults to 'None', which translates to the root path of the SourceRef.
5246                 type: string
5247               postBuild:
5248                 description: |-
5249                   PostBuild describes which actions to perform on the YAML manifest
5250                   generated by building the kustomize overlay.
5251                 properties:
5252                   substitute:
5253                     additionalProperties:
5254                       type: string
5255                     description: |-
5256                       Substitute holds a map of key/value pairs.
5257                       The variables defined in your YAML manifests that match any of the keys
5258                       defined in the map will be substituted with the set value.
5259                       Includes support for bash string replacement functions
5260                       e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}.
5261                     type: object
5262                   substituteFrom:
5263                     description: |-
5264                       SubstituteFrom holds references to ConfigMaps and Secrets containing
5265                       the variables and their values to be substituted in the YAML manifests.
5266                       The ConfigMap and the Secret data keys represent the var names, and they
5267                       must match the vars declared in the manifests for the substitution to
5268                       happen.
5269                     items:
5270                       description: |-
5271                         SubstituteReference contains a reference to a resource containing
5272                         the variables name and value.
5273                       properties:
5274                         kind:
5275                           description: Kind of the values referent, valid values are
5276                             ('Secret', 'ConfigMap').
5277                           enum:
5278                           - Secret
5279                           - ConfigMap
5280                           type: string
5281                         name:
5282                           description: |-
5283                             Name of the values referent. Should reside in the same namespace as the
5284                             referring resource.
5285                           maxLength: 253
5286                           minLength: 1
5287                           type: string
5288                         optional:
5289                           default: false
5290                           description: |-
5291                             Optional indicates whether the referenced resource must exist, or whether to
5292                             tolerate its absence. If true and the referenced resource is absent, proceed
5293                             as if the resource was present but empty, without any variables defined.
5294                           type: boolean
5295                       required:
5296                       - kind
5297                       - name
5298                       type: object
5299                     type: array
5300                 type: object
5301               prune:
5302                 description: Prune enables garbage collection.
5303                 type: boolean
5304               retryInterval:
5305                 description: |-
5306                   The interval at which to retry a previously failed reconciliation.
5307                   When not specified, the controller uses the KustomizationSpec.Interval
5308                   value to retry failures.
5309                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
5310                 type: string
5311               serviceAccountName:
5312                 description: |-
5313                   The name of the Kubernetes service account to impersonate
5314                   when reconciling this Kustomization.
5315                 type: string
5316               sourceRef:
5317                 description: Reference of the source where the kustomization file
5318                   is.
5319                 properties:
5320                   apiVersion:
5321                     description: API version of the referent.
5322                     type: string
5323                   kind:
5324                     description: Kind of the referent.
5325                     enum:
5326                     - OCIRepository
5327                     - GitRepository
5328                     - Bucket
5329                     type: string
5330                   name:
5331                     description: Name of the referent.
5332                     type: string
5333                   namespace:
5334                     description: |-
5335                       Namespace of the referent, defaults to the namespace of the Kubernetes
5336                       resource object that contains the reference.
5337                     type: string
5338                 required:
5339                 - kind
5340                 - name
5341                 type: object
5342               suspend:
5343                 description: |-
5344                   This flag tells the controller to suspend subsequent kustomize executions,
5345                   it does not apply to already started executions. Defaults to false.
5346                 type: boolean
5347               targetNamespace:
5348                 description: |-
5349                   TargetNamespace sets or overrides the namespace in the
5350                   kustomization.yaml file.
5351                 maxLength: 63
5352                 minLength: 1
5353                 type: string
5354               timeout:
5355                 description: |-
5356                   Timeout for validation, apply and health checking operations.
5357                   Defaults to 'Interval' duration.
5358                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
5359                 type: string
5360               wait:
5361                 description: |-
5362                   Wait instructs the controller to check the health of all the reconciled
5363                   resources. When enabled, the HealthChecks are ignored. Defaults to false.
5364                 type: boolean
5365             required:
5366             - interval
5367             - prune
5368             - sourceRef
5369             type: object
5370           status:
5371             default:
5372               observedGeneration: -1
5373             description: KustomizationStatus defines the observed state of a kustomization.
5374             properties:
5375               conditions:
5376                 items:
5377                   description: Condition contains details for one aspect of the current
5378                     state of this API Resource.
5379                   properties:
5380                     lastTransitionTime:
5381                       description: |-
5382                         lastTransitionTime is the last time the condition transitioned from one status to another.
5383                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
5384                       format: date-time
5385                       type: string
5386                     message:
5387                       description: |-
5388                         message is a human readable message indicating details about the transition.
5389                         This may be an empty string.
5390                       maxLength: 32768
5391                       type: string
5392                     observedGeneration:
5393                       description: |-
5394                         observedGeneration represents the .metadata.generation that the condition was set based upon.
5395                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
5396                         with respect to the current state of the instance.
5397                       format: int64
5398                       minimum: 0
5399                       type: integer
5400                     reason:
5401                       description: |-
5402                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
5403                         Producers of specific condition types may define expected values and meanings for this field,
5404                         and whether the values are considered a guaranteed API.
5405                         The value should be a CamelCase string.
5406                         This field may not be empty.
5407                       maxLength: 1024
5408                       minLength: 1
5409                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
5410                       type: string
5411                     status:
5412                       description: status of the condition, one of True, False, Unknown.
5413                       enum:
5414                       - "True"
5415                       - "False"
5416                       - Unknown
5417                       type: string
5418                     type:
5419                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
5420                       maxLength: 316
5421                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
5422                       type: string
5423                   required:
5424                   - lastTransitionTime
5425                   - message
5426                   - reason
5427                   - status
5428                   - type
5429                   type: object
5430                 type: array
5431               inventory:
5432                 description: |-
5433                   Inventory contains the list of Kubernetes resource object references that
5434                   have been successfully applied.
5435                 properties:
5436                   entries:
5437                     description: Entries of Kubernetes resource object references.
5438                     items:
5439                       description: ResourceRef contains the information necessary
5440                         to locate a resource within a cluster.
5441                       properties:
5442                         id:
5443                           description: |-
5444                             ID is the string representation of the Kubernetes resource object's metadata,
5445                             in the format '<namespace>_<name>_<group>_<kind>'.
5446                           type: string
5447                         v:
5448                           description: Version is the API version of the Kubernetes
5449                             resource object's kind.
5450                           type: string
5451                       required:
5452                       - id
5453                       - v
5454                       type: object
5455                     type: array
5456                 required:
5457                 - entries
5458                 type: object
5459               lastAppliedRevision:
5460                 description: |-
5461                   The last successfully applied revision.
5462                   Equals the Revision of the applied Artifact from the referenced Source.
5463                 type: string
5464               lastAttemptedRevision:
5465                 description: LastAttemptedRevision is the revision of the last reconciliation
5466                   attempt.
5467                 type: string
5468               lastHandledReconcileAt:
5469                 description: |-
5470                   LastHandledReconcileAt holds the value of the most recent
5471                   reconcile request value, so a change of the annotation value
5472                   can be detected.
5473                 type: string
5474               observedGeneration:
5475                 description: ObservedGeneration is the last reconciled generation.
5476                 format: int64
5477                 type: integer
5478             type: object
5479         type: object
5480     served: true
5481     storage: true
5482     subresources:
5483       status: {}
5484   - additionalPrinterColumns:
5485     - jsonPath: .status.conditions[?(@.type=="Ready")].status
5486       name: Ready
5487       type: string
5488     - jsonPath: .status.conditions[?(@.type=="Ready")].message
5489       name: Status
5490       type: string
5491     - jsonPath: .metadata.creationTimestamp
5492       name: Age
5493       type: date
5494     deprecated: true
5495     deprecationWarning: v1beta1 Kustomization is deprecated, upgrade to v1
5496     name: v1beta1
5497     schema:
5498       openAPIV3Schema:
5499         description: Kustomization is the Schema for the kustomizations API.
5500         properties:
5501           apiVersion:
5502             description: |-
5503               APIVersion defines the versioned schema of this representation of an object.
5504               Servers should convert recognized schemas to the latest internal value, and
5505               may reject unrecognized values.
5506               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
5507             type: string
5508           kind:
5509             description: |-
5510               Kind is a string value representing the REST resource this object represents.
5511               Servers may infer this from the endpoint the client submits requests to.
5512               Cannot be updated.
5513               In CamelCase.
5514               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
5515             type: string
5516           metadata:
5517             type: object
5518           spec:
5519             description: KustomizationSpec defines the desired state of a kustomization.
5520             properties:
5521               decryption:
5522                 description: Decrypt Kubernetes secrets before applying them on the
5523                   cluster.
5524                 properties:
5525                   provider:
5526                     description: Provider is the name of the decryption engine.
5527                     enum:
5528                     - sops
5529                     type: string
5530                   secretRef:
5531                     description: The secret name containing the private OpenPGP keys
5532                       used for decryption.
5533                     properties:
5534                       name:
5535                         description: Name of the referent.
5536                         type: string
5537                     required:
5538                     - name
5539                     type: object
5540                 required:
5541                 - provider
5542                 type: object
5543               dependsOn:
5544                 description: |-
5545                   DependsOn may contain a meta.NamespacedObjectReference slice
5546                   with references to Kustomization resources that must be ready before this
5547                   Kustomization can be reconciled.
5548                 items:
5549                   description: |-
5550                     NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any
5551                     namespace.
5552                   properties:
5553                     name:
5554                       description: Name of the referent.
5555                       type: string
5556                     namespace:
5557                       description: Namespace of the referent, when not specified it
5558                         acts as LocalObjectReference.
5559                       type: string
5560                   required:
5561                   - name
5562                   type: object
5563                 type: array
5564               force:
5565                 default: false
5566                 description: |-
5567                   Force instructs the controller to recreate resources
5568                   when patching fails due to an immutable field change.
5569                 type: boolean
5570               healthChecks:
5571                 description: A list of resources to be included in the health assessment.
5572                 items:
5573                   description: |-
5574                     NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object
5575                     in any namespace.
5576                   properties:
5577                     apiVersion:
5578                       description: API version of the referent, if not specified the
5579                         Kubernetes preferred version will be used.
5580                       type: string
5581                     kind:
5582                       description: Kind of the referent.
5583                       type: string
5584                     name:
5585                       description: Name of the referent.
5586                       type: string
5587                     namespace:
5588                       description: Namespace of the referent, when not specified it
5589                         acts as LocalObjectReference.
5590                       type: string
5591                   required:
5592                   - kind
5593                   - name
5594                   type: object
5595                 type: array
5596               images:
5597                 description: |-
5598                   Images is a list of (image name, new name, new tag or digest)
5599                   for changing image names, tags or digests. This can also be achieved with a
5600                   patch, but this operator is simpler to specify.
5601                 items:
5602                   description: Image contains an image name, a new name, a new tag
5603                     or digest, which will replace the original name and tag.
5604                   properties:
5605                     digest:
5606                       description: |-
5607                         Digest is the value used to replace the original image tag.
5608                         If digest is present NewTag value is ignored.
5609                       type: string
5610                     name:
5611                       description: Name is a tag-less image name.
5612                       type: string
5613                     newName:
5614                       description: NewName is the value used to replace the original
5615                         name.
5616                       type: string
5617                     newTag:
5618                       description: NewTag is the value used to replace the original
5619                         tag.
5620                       type: string
5621                   required:
5622                   - name
5623                   type: object
5624                 type: array
5625               interval:
5626                 description: The interval at which to reconcile the Kustomization.
5627                 type: string
5628               kubeConfig:
5629                 description: |-
5630                   The KubeConfig for reconciling the Kustomization on a remote cluster.
5631                   When specified, KubeConfig takes precedence over ServiceAccountName.
5632                 properties:
5633                   secretRef:
5634                     description: |-
5635                       SecretRef holds the name to a secret that contains a 'value' key with
5636                       the kubeconfig file as the value. It must be in the same namespace as
5637                       the Kustomization.
5638                       It is recommended that the kubeconfig is self-contained, and the secret
5639                       is regularly updated if credentials such as a cloud-access-token expire.
5640                       Cloud specific `cmd-path` auth helpers will not function without adding
5641                       binaries and credentials to the Pod that is responsible for reconciling
5642                       the Kustomization.
5643                     properties:
5644                       name:
5645                         description: Name of the referent.
5646                         type: string
5647                     required:
5648                     - name
5649                     type: object
5650                 required:
5651                 - secretRef
5652                 type: object
5653               patches:
5654                 description: |-
5655                   Strategic merge and JSON patches, defined as inline YAML objects,
5656                   capable of targeting objects based on kind, label and annotation selectors.
5657                 items:
5658                   description: |-
5659                     Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should
5660                     be applied to.
5661                   properties:
5662                     patch:
5663                       description: |-
5664                         Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with
5665                         an array of operation objects.
5666                       type: string
5667                     target:
5668                       description: Target points to the resources that the patch document
5669                         should be applied to.
5670                       properties:
5671                         annotationSelector:
5672                           description: |-
5673                             AnnotationSelector is a string that follows the label selection expression
5674                             https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
5675                             It matches with the resource annotations.
5676                           type: string
5677                         group:
5678                           description: |-
5679                             Group is the API group to select resources from.
5680                             Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources.
5681                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5682                           type: string
5683                         kind:
5684                           description: |-
5685                             Kind of the API Group to select resources from.
5686                             Together with Group and Version it is capable of unambiguously
5687                             identifying and/or selecting resources.
5688                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5689                           type: string
5690                         labelSelector:
5691                           description: |-
5692                             LabelSelector is a string that follows the label selection expression
5693                             https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
5694                             It matches with the resource labels.
5695                           type: string
5696                         name:
5697                           description: Name to match resources with.
5698                           type: string
5699                         namespace:
5700                           description: Namespace to select resources from.
5701                           type: string
5702                         version:
5703                           description: |-
5704                             Version of the API Group to select resources from.
5705                             Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources.
5706                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5707                           type: string
5708                       type: object
5709                   required:
5710                   - patch
5711                   type: object
5712                 type: array
5713               patchesJson6902:
5714                 description: JSON 6902 patches, defined as inline YAML objects.
5715                 items:
5716                   description: JSON6902Patch contains a JSON6902 patch and the target
5717                     the patch should be applied to.
5718                   properties:
5719                     patch:
5720                       description: Patch contains the JSON6902 patch document with
5721                         an array of operation objects.
5722                       items:
5723                         description: |-
5724                           JSON6902 is a JSON6902 operation object.
5725                           https://datatracker.ietf.org/doc/html/rfc6902#section-4
5726                         properties:
5727                           from:
5728                             description: |-
5729                               From contains a JSON-pointer value that references a location within the target document where the operation is
5730                               performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations.
5731                             type: string
5732                           op:
5733                             description: |-
5734                               Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or
5735                               "test".
5736                               https://datatracker.ietf.org/doc/html/rfc6902#section-4
5737                             enum:
5738                             - test
5739                             - remove
5740                             - add
5741                             - replace
5742                             - move
5743                             - copy
5744                             type: string
5745                           path:
5746                             description: |-
5747                               Path contains the JSON-pointer value that references a location within the target document where the operation
5748                               is performed. The meaning of the value depends on the value of Op.
5749                             type: string
5750                           value:
5751                             description: |-
5752                               Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into
5753                               account by all operations.
5754                             x-kubernetes-preserve-unknown-fields: true
5755                         required:
5756                         - op
5757                         - path
5758                         type: object
5759                       type: array
5760                     target:
5761                       description: Target points to the resources that the patch document
5762                         should be applied to.
5763                       properties:
5764                         annotationSelector:
5765                           description: |-
5766                             AnnotationSelector is a string that follows the label selection expression
5767                             https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
5768                             It matches with the resource annotations.
5769                           type: string
5770                         group:
5771                           description: |-
5772                             Group is the API group to select resources from.
5773                             Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources.
5774                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5775                           type: string
5776                         kind:
5777                           description: |-
5778                             Kind of the API Group to select resources from.
5779                             Together with Group and Version it is capable of unambiguously
5780                             identifying and/or selecting resources.
5781                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5782                           type: string
5783                         labelSelector:
5784                           description: |-
5785                             LabelSelector is a string that follows the label selection expression
5786                             https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
5787                             It matches with the resource labels.
5788                           type: string
5789                         name:
5790                           description: Name to match resources with.
5791                           type: string
5792                         namespace:
5793                           description: Namespace to select resources from.
5794                           type: string
5795                         version:
5796                           description: |-
5797                             Version of the API Group to select resources from.
5798                             Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources.
5799                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5800                           type: string
5801                       type: object
5802                   required:
5803                   - patch
5804                   - target
5805                   type: object
5806                 type: array
5807               patchesStrategicMerge:
5808                 description: Strategic merge patches, defined as inline YAML objects.
5809                 items:
5810                   x-kubernetes-preserve-unknown-fields: true
5811                 type: array
5812               path:
5813                 description: |-
5814                   Path to the directory containing the kustomization.yaml file, or the
5815                   set of plain YAMLs a kustomization.yaml should be generated for.
5816                   Defaults to 'None', which translates to the root path of the SourceRef.
5817                 type: string
5818               postBuild:
5819                 description: |-
5820                   PostBuild describes which actions to perform on the YAML manifest
5821                   generated by building the kustomize overlay.
5822                 properties:
5823                   substitute:
5824                     additionalProperties:
5825                       type: string
5826                     description: |-
5827                       Substitute holds a map of key/value pairs.
5828                       The variables defined in your YAML manifests
5829                       that match any of the keys defined in the map
5830                       will be substituted with the set value.
5831                       Includes support for bash string replacement functions
5832                       e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}.
5833                     type: object
5834                   substituteFrom:
5835                     description: |-
5836                       SubstituteFrom holds references to ConfigMaps and Secrets containing
5837                       the variables and their values to be substituted in the YAML manifests.
5838                       The ConfigMap and the Secret data keys represent the var names and they
5839                       must match the vars declared in the manifests for the substitution to happen.
5840                     items:
5841                       description: |-
5842                         SubstituteReference contains a reference to a resource containing
5843                         the variables name and value.
5844                       properties:
5845                         kind:
5846                           description: Kind of the values referent, valid values are
5847                             ('Secret', 'ConfigMap').
5848                           enum:
5849                           - Secret
5850                           - ConfigMap
5851                           type: string
5852                         name:
5853                           description: |-
5854                             Name of the values referent. Should reside in the same namespace as the
5855                             referring resource.
5856                           maxLength: 253
5857                           minLength: 1
5858                           type: string
5859                       required:
5860                       - kind
5861                       - name
5862                       type: object
5863                     type: array
5864                 type: object
5865               prune:
5866                 description: Prune enables garbage collection.
5867                 type: boolean
5868               retryInterval:
5869                 description: |-
5870                   The interval at which to retry a previously failed reconciliation.
5871                   When not specified, the controller uses the KustomizationSpec.Interval
5872                   value to retry failures.
5873                 type: string
5874               serviceAccountName:
5875                 description: |-
5876                   The name of the Kubernetes service account to impersonate
5877                   when reconciling this Kustomization.
5878                 type: string
5879               sourceRef:
5880                 description: Reference of the source where the kustomization file
5881                   is.
5882                 properties:
5883                   apiVersion:
5884                     description: API version of the referent
5885                     type: string
5886                   kind:
5887                     description: Kind of the referent
5888                     enum:
5889                     - GitRepository
5890                     - Bucket
5891                     type: string
5892                   name:
5893                     description: Name of the referent
5894                     type: string
5895                   namespace:
5896                     description: Namespace of the referent, defaults to the Kustomization
5897                       namespace
5898                     type: string
5899                 required:
5900                 - kind
5901                 - name
5902                 type: object
5903               suspend:
5904                 description: |-
5905                   This flag tells the controller to suspend subsequent kustomize executions,
5906                   it does not apply to already started executions. Defaults to false.
5907                 type: boolean
5908               targetNamespace:
5909                 description: |-
5910                   TargetNamespace sets or overrides the namespace in the
5911                   kustomization.yaml file.
5912                 maxLength: 63
5913                 minLength: 1
5914                 type: string
5915               timeout:
5916                 description: |-
5917                   Timeout for validation, apply and health checking operations.
5918                   Defaults to 'Interval' duration.
5919                 type: string
5920               validation:
5921                 description: |-
5922                   Validate the Kubernetes objects before applying them on the cluster.
5923                   The validation strategy can be 'client' (local dry-run), 'server'
5924                   (APIServer dry-run) or 'none'.
5925                   When 'Force' is 'true', validation will fallback to 'client' if set to
5926                   'server' because server-side validation is not supported in this scenario.
5927                 enum:
5928                 - none
5929                 - client
5930                 - server
5931                 type: string
5932             required:
5933             - interval
5934             - prune
5935             - sourceRef
5936             type: object
5937           status:
5938             default:
5939               observedGeneration: -1
5940             description: KustomizationStatus defines the observed state of a kustomization.
5941             properties:
5942               conditions:
5943                 items:
5944                   description: Condition contains details for one aspect of the current
5945                     state of this API Resource.
5946                   properties:
5947                     lastTransitionTime:
5948                       description: |-
5949                         lastTransitionTime is the last time the condition transitioned from one status to another.
5950                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
5951                       format: date-time
5952                       type: string
5953                     message:
5954                       description: |-
5955                         message is a human readable message indicating details about the transition.
5956                         This may be an empty string.
5957                       maxLength: 32768
5958                       type: string
5959                     observedGeneration:
5960                       description: |-
5961                         observedGeneration represents the .metadata.generation that the condition was set based upon.
5962                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
5963                         with respect to the current state of the instance.
5964                       format: int64
5965                       minimum: 0
5966                       type: integer
5967                     reason:
5968                       description: |-
5969                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
5970                         Producers of specific condition types may define expected values and meanings for this field,
5971                         and whether the values are considered a guaranteed API.
5972                         The value should be a CamelCase string.
5973                         This field may not be empty.
5974                       maxLength: 1024
5975                       minLength: 1
5976                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
5977                       type: string
5978                     status:
5979                       description: status of the condition, one of True, False, Unknown.
5980                       enum:
5981                       - "True"
5982                       - "False"
5983                       - Unknown
5984                       type: string
5985                     type:
5986                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
5987                       maxLength: 316
5988                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
5989                       type: string
5990                   required:
5991                   - lastTransitionTime
5992                   - message
5993                   - reason
5994                   - status
5995                   - type
5996                   type: object
5997                 type: array
5998               lastAppliedRevision:
5999                 description: |-
6000                   The last successfully applied revision.
6001                   The revision format for Git sources is <branch|tag>/<commit-sha>.
6002                 type: string
6003               lastAttemptedRevision:
6004                 description: LastAttemptedRevision is the revision of the last reconciliation
6005                   attempt.
6006                 type: string
6007               lastHandledReconcileAt:
6008                 description: |-
6009                   LastHandledReconcileAt holds the value of the most recent
6010                   reconcile request value, so a change of the annotation value
6011                   can be detected.
6012                 type: string
6013               observedGeneration:
6014                 description: ObservedGeneration is the last reconciled generation.
6015                 format: int64
6016                 type: integer
6017               snapshot:
6018                 description: The last successfully applied revision metadata.
6019                 properties:
6020                   checksum:
6021                     description: The manifests sha1 checksum.
6022                     type: string
6023                   entries:
6024                     description: A list of Kubernetes kinds grouped by namespace.
6025                     items:
6026                       description: |-
6027                         Snapshot holds the metadata of namespaced
6028                         Kubernetes objects
6029                       properties:
6030                         kinds:
6031                           additionalProperties:
6032                             type: string
6033                           description: The list of Kubernetes kinds.
6034                           type: object
6035                         namespace:
6036                           description: The namespace of this entry.
6037                           type: string
6038                       required:
6039                       - kinds
6040                       type: object
6041                     type: array
6042                 required:
6043                 - checksum
6044                 - entries
6045                 type: object
6046             type: object
6047         type: object
6048     served: true
6049     storage: false
6050     subresources:
6051       status: {}
6052   - additionalPrinterColumns:
6053     - jsonPath: .metadata.creationTimestamp
6054       name: Age
6055       type: date
6056     - jsonPath: .status.conditions[?(@.type=="Ready")].status
6057       name: Ready
6058       type: string
6059     - jsonPath: .status.conditions[?(@.type=="Ready")].message
6060       name: Status
6061       type: string
6062     deprecated: true
6063     deprecationWarning: v1beta2 Kustomization is deprecated, upgrade to v1
6064     name: v1beta2
6065     schema:
6066       openAPIV3Schema:
6067         description: Kustomization is the Schema for the kustomizations API.
6068         properties:
6069           apiVersion:
6070             description: |-
6071               APIVersion defines the versioned schema of this representation of an object.
6072               Servers should convert recognized schemas to the latest internal value, and
6073               may reject unrecognized values.
6074               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
6075             type: string
6076           kind:
6077             description: |-
6078               Kind is a string value representing the REST resource this object represents.
6079               Servers may infer this from the endpoint the client submits requests to.
6080               Cannot be updated.
6081               In CamelCase.
6082               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
6083             type: string
6084           metadata:
6085             type: object
6086           spec:
6087             description: KustomizationSpec defines the configuration to calculate
6088               the desired state from a Source using Kustomize.
6089             properties:
6090               commonMetadata:
6091                 description: |-
6092                   CommonMetadata specifies the common labels and annotations that are applied to all resources.
6093                   Any existing label or annotation will be overridden if its key matches a common one.
6094                 properties:
6095                   annotations:
6096                     additionalProperties:
6097                       type: string
6098                     description: Annotations to be added to the object's metadata.
6099                     type: object
6100                   labels:
6101                     additionalProperties:
6102                       type: string
6103                     description: Labels to be added to the object's metadata.
6104                     type: object
6105                 type: object
6106               components:
6107                 description: Components specifies relative paths to specifications
6108                   of other Components.
6109                 items:
6110                   type: string
6111                 type: array
6112               decryption:
6113                 description: Decrypt Kubernetes secrets before applying them on the
6114                   cluster.
6115                 properties:
6116                   provider:
6117                     description: Provider is the name of the decryption engine.
6118                     enum:
6119                     - sops
6120                     type: string
6121                   secretRef:
6122                     description: The secret name containing the private OpenPGP keys
6123                       used for decryption.
6124                     properties:
6125                       name:
6126                         description: Name of the referent.
6127                         type: string
6128                     required:
6129                     - name
6130                     type: object
6131                 required:
6132                 - provider
6133                 type: object
6134               dependsOn:
6135                 description: |-
6136                   DependsOn may contain a meta.NamespacedObjectReference slice
6137                   with references to Kustomization resources that must be ready before this
6138                   Kustomization can be reconciled.
6139                 items:
6140                   description: |-
6141                     NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any
6142                     namespace.
6143                   properties:
6144                     name:
6145                       description: Name of the referent.
6146                       type: string
6147                     namespace:
6148                       description: Namespace of the referent, when not specified it
6149                         acts as LocalObjectReference.
6150                       type: string
6151                   required:
6152                   - name
6153                   type: object
6154                 type: array
6155               force:
6156                 default: false
6157                 description: |-
6158                   Force instructs the controller to recreate resources
6159                   when patching fails due to an immutable field change.
6160                 type: boolean
6161               healthChecks:
6162                 description: A list of resources to be included in the health assessment.
6163                 items:
6164                   description: |-
6165                     NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object
6166                     in any namespace.
6167                   properties:
6168                     apiVersion:
6169                       description: API version of the referent, if not specified the
6170                         Kubernetes preferred version will be used.
6171                       type: string
6172                     kind:
6173                       description: Kind of the referent.
6174                       type: string
6175                     name:
6176                       description: Name of the referent.
6177                       type: string
6178                     namespace:
6179                       description: Namespace of the referent, when not specified it
6180                         acts as LocalObjectReference.
6181                       type: string
6182                   required:
6183                   - kind
6184                   - name
6185                   type: object
6186                 type: array
6187               images:
6188                 description: |-
6189                   Images is a list of (image name, new name, new tag or digest)
6190                   for changing image names, tags or digests. This can also be achieved with a
6191                   patch, but this operator is simpler to specify.
6192                 items:
6193                   description: Image contains an image name, a new name, a new tag
6194                     or digest, which will replace the original name and tag.
6195                   properties:
6196                     digest:
6197                       description: |-
6198                         Digest is the value used to replace the original image tag.
6199                         If digest is present NewTag value is ignored.
6200                       type: string
6201                     name:
6202                       description: Name is a tag-less image name.
6203                       type: string
6204                     newName:
6205                       description: NewName is the value used to replace the original
6206                         name.
6207                       type: string
6208                     newTag:
6209                       description: NewTag is the value used to replace the original
6210                         tag.
6211                       type: string
6212                   required:
6213                   - name
6214                   type: object
6215                 type: array
6216               interval:
6217                 description: The interval at which to reconcile the Kustomization.
6218                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
6219                 type: string
6220               kubeConfig:
6221                 description: |-
6222                   The KubeConfig for reconciling the Kustomization on a remote cluster.
6223                   When used in combination with KustomizationSpec.ServiceAccountName,
6224                   forces the controller to act on behalf of that Service Account at the
6225                   target cluster.
6226                   If the --default-service-account flag is set, its value will be used as
6227                   a controller level fallback for when KustomizationSpec.ServiceAccountName
6228                   is empty.
6229                 properties:
6230                   secretRef:
6231                     description: |-
6232                       SecretRef holds the name of a secret that contains a key with
6233                       the kubeconfig file as the value. If no key is set, the key will default
6234                       to 'value'.
6235                       It is recommended that the kubeconfig is self-contained, and the secret
6236                       is regularly updated if credentials such as a cloud-access-token expire.
6237                       Cloud specific `cmd-path` auth helpers will not function without adding
6238                       binaries and credentials to the Pod that is responsible for reconciling
6239                       Kubernetes resources.
6240                     properties:
6241                       key:
6242                         description: Key in the Secret, when not specified an implementation-specific
6243                           default key is used.
6244                         type: string
6245                       name:
6246                         description: Name of the Secret.
6247                         type: string
6248                     required:
6249                     - name
6250                     type: object
6251                 required:
6252                 - secretRef
6253                 type: object
6254               patches:
6255                 description: |-
6256                   Strategic merge and JSON patches, defined as inline YAML objects,
6257                   capable of targeting objects based on kind, label and annotation selectors.
6258                 items:
6259                   description: |-
6260                     Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should
6261                     be applied to.
6262                   properties:
6263                     patch:
6264                       description: |-
6265                         Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with
6266                         an array of operation objects.
6267                       type: string
6268                     target:
6269                       description: Target points to the resources that the patch document
6270                         should be applied to.
6271                       properties:
6272                         annotationSelector:
6273                           description: |-
6274                             AnnotationSelector is a string that follows the label selection expression
6275                             https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
6276                             It matches with the resource annotations.
6277                           type: string
6278                         group:
6279                           description: |-
6280                             Group is the API group to select resources from.
6281                             Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources.
6282                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
6283                           type: string
6284                         kind:
6285                           description: |-
6286                             Kind of the API Group to select resources from.
6287                             Together with Group and Version it is capable of unambiguously
6288                             identifying and/or selecting resources.
6289                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
6290                           type: string
6291                         labelSelector:
6292                           description: |-
6293                             LabelSelector is a string that follows the label selection expression
6294                             https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
6295                             It matches with the resource labels.
6296                           type: string
6297                         name:
6298                           description: Name to match resources with.
6299                           type: string
6300                         namespace:
6301                           description: Namespace to select resources from.
6302                           type: string
6303                         version:
6304                           description: |-
6305                             Version of the API Group to select resources from.
6306                             Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources.
6307                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
6308                           type: string
6309                       type: object
6310                   required:
6311                   - patch
6312                   type: object
6313                 type: array
6314               patchesJson6902:
6315                 description: |-
6316                   JSON 6902 patches, defined as inline YAML objects.
6317                   Deprecated: Use Patches instead.
6318                 items:
6319                   description: JSON6902Patch contains a JSON6902 patch and the target
6320                     the patch should be applied to.
6321                   properties:
6322                     patch:
6323                       description: Patch contains the JSON6902 patch document with
6324                         an array of operation objects.
6325                       items:
6326                         description: |-
6327                           JSON6902 is a JSON6902 operation object.
6328                           https://datatracker.ietf.org/doc/html/rfc6902#section-4
6329                         properties:
6330                           from:
6331                             description: |-
6332                               From contains a JSON-pointer value that references a location within the target document where the operation is
6333                               performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations.
6334                             type: string
6335                           op:
6336                             description: |-
6337                               Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or
6338                               "test".
6339                               https://datatracker.ietf.org/doc/html/rfc6902#section-4
6340                             enum:
6341                             - test
6342                             - remove
6343                             - add
6344                             - replace
6345                             - move
6346                             - copy
6347                             type: string
6348                           path:
6349                             description: |-
6350                               Path contains the JSON-pointer value that references a location within the target document where the operation
6351                               is performed. The meaning of the value depends on the value of Op.
6352                             type: string
6353                           value:
6354                             description: |-
6355                               Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into
6356                               account by all operations.
6357                             x-kubernetes-preserve-unknown-fields: true
6358                         required:
6359                         - op
6360                         - path
6361                         type: object
6362                       type: array
6363                     target:
6364                       description: Target points to the resources that the patch document
6365                         should be applied to.
6366                       properties:
6367                         annotationSelector:
6368                           description: |-
6369                             AnnotationSelector is a string that follows the label selection expression
6370                             https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
6371                             It matches with the resource annotations.
6372                           type: string
6373                         group:
6374                           description: |-
6375                             Group is the API group to select resources from.
6376                             Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources.
6377                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
6378                           type: string
6379                         kind:
6380                           description: |-
6381                             Kind of the API Group to select resources from.
6382                             Together with Group and Version it is capable of unambiguously
6383                             identifying and/or selecting resources.
6384                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
6385                           type: string
6386                         labelSelector:
6387                           description: |-
6388                             LabelSelector is a string that follows the label selection expression
6389                             https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
6390                             It matches with the resource labels.
6391                           type: string
6392                         name:
6393                           description: Name to match resources with.
6394                           type: string
6395                         namespace:
6396                           description: Namespace to select resources from.
6397                           type: string
6398                         version:
6399                           description: |-
6400                             Version of the API Group to select resources from.
6401                             Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources.
6402                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
6403                           type: string
6404                       type: object
6405                   required:
6406                   - patch
6407                   - target
6408                   type: object
6409                 type: array
6410               patchesStrategicMerge:
6411                 description: |-
6412                   Strategic merge patches, defined as inline YAML objects.
6413                   Deprecated: Use Patches instead.
6414                 items:
6415                   x-kubernetes-preserve-unknown-fields: true
6416                 type: array
6417               path:
6418                 description: |-
6419                   Path to the directory containing the kustomization.yaml file, or the
6420                   set of plain YAMLs a kustomization.yaml should be generated for.
6421                   Defaults to 'None', which translates to the root path of the SourceRef.
6422                 type: string
6423               postBuild:
6424                 description: |-
6425                   PostBuild describes which actions to perform on the YAML manifest
6426                   generated by building the kustomize overlay.
6427                 properties:
6428                   substitute:
6429                     additionalProperties:
6430                       type: string
6431                     description: |-
6432                       Substitute holds a map of key/value pairs.
6433                       The variables defined in your YAML manifests
6434                       that match any of the keys defined in the map
6435                       will be substituted with the set value.
6436                       Includes support for bash string replacement functions
6437                       e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}.
6438                     type: object
6439                   substituteFrom:
6440                     description: |-
6441                       SubstituteFrom holds references to ConfigMaps and Secrets containing
6442                       the variables and their values to be substituted in the YAML manifests.
6443                       The ConfigMap and the Secret data keys represent the var names and they
6444                       must match the vars declared in the manifests for the substitution to happen.
6445                     items:
6446                       description: |-
6447                         SubstituteReference contains a reference to a resource containing
6448                         the variables name and value.
6449                       properties:
6450                         kind:
6451                           description: Kind of the values referent, valid values are
6452                             ('Secret', 'ConfigMap').
6453                           enum:
6454                           - Secret
6455                           - ConfigMap
6456                           type: string
6457                         name:
6458                           description: |-
6459                             Name of the values referent. Should reside in the same namespace as the
6460                             referring resource.
6461                           maxLength: 253
6462                           minLength: 1
6463                           type: string
6464                         optional:
6465                           default: false
6466                           description: |-
6467                             Optional indicates whether the referenced resource must exist, or whether to
6468                             tolerate its absence. If true and the referenced resource is absent, proceed
6469                             as if the resource was present but empty, without any variables defined.
6470                           type: boolean
6471                       required:
6472                       - kind
6473                       - name
6474                       type: object
6475                     type: array
6476                 type: object
6477               prune:
6478                 description: Prune enables garbage collection.
6479                 type: boolean
6480               retryInterval:
6481                 description: |-
6482                   The interval at which to retry a previously failed reconciliation.
6483                   When not specified, the controller uses the KustomizationSpec.Interval
6484                   value to retry failures.
6485                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
6486                 type: string
6487               serviceAccountName:
6488                 description: |-
6489                   The name of the Kubernetes service account to impersonate
6490                   when reconciling this Kustomization.
6491                 type: string
6492               sourceRef:
6493                 description: Reference of the source where the kustomization file
6494                   is.
6495                 properties:
6496                   apiVersion:
6497                     description: API version of the referent.
6498                     type: string
6499                   kind:
6500                     description: Kind of the referent.
6501                     enum:
6502                     - OCIRepository
6503                     - GitRepository
6504                     - Bucket
6505                     type: string
6506                   name:
6507                     description: Name of the referent.
6508                     type: string
6509                   namespace:
6510                     description: Namespace of the referent, defaults to the namespace
6511                       of the Kubernetes resource object that contains the reference.
6512                     type: string
6513                 required:
6514                 - kind
6515                 - name
6516                 type: object
6517               suspend:
6518                 description: |-
6519                   This flag tells the controller to suspend subsequent kustomize executions,
6520                   it does not apply to already started executions. Defaults to false.
6521                 type: boolean
6522               targetNamespace:
6523                 description: |-
6524                   TargetNamespace sets or overrides the namespace in the
6525                   kustomization.yaml file.
6526                 maxLength: 63
6527                 minLength: 1
6528                 type: string
6529               timeout:
6530                 description: |-
6531                   Timeout for validation, apply and health checking operations.
6532                   Defaults to 'Interval' duration.
6533                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
6534                 type: string
6535               validation:
6536                 description: 'Deprecated: Not used in v1beta2.'
6537                 enum:
6538                 - none
6539                 - client
6540                 - server
6541                 type: string
6542               wait:
6543                 description: |-
6544                   Wait instructs the controller to check the health of all the reconciled resources.
6545                   When enabled, the HealthChecks are ignored. Defaults to false.
6546                 type: boolean
6547             required:
6548             - interval
6549             - prune
6550             - sourceRef
6551             type: object
6552           status:
6553             default:
6554               observedGeneration: -1
6555             description: KustomizationStatus defines the observed state of a kustomization.
6556             properties:
6557               conditions:
6558                 items:
6559                   description: Condition contains details for one aspect of the current
6560                     state of this API Resource.
6561                   properties:
6562                     lastTransitionTime:
6563                       description: |-
6564                         lastTransitionTime is the last time the condition transitioned from one status to another.
6565                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
6566                       format: date-time
6567                       type: string
6568                     message:
6569                       description: |-
6570                         message is a human readable message indicating details about the transition.
6571                         This may be an empty string.
6572                       maxLength: 32768
6573                       type: string
6574                     observedGeneration:
6575                       description: |-
6576                         observedGeneration represents the .metadata.generation that the condition was set based upon.
6577                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
6578                         with respect to the current state of the instance.
6579                       format: int64
6580                       minimum: 0
6581                       type: integer
6582                     reason:
6583                       description: |-
6584                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
6585                         Producers of specific condition types may define expected values and meanings for this field,
6586                         and whether the values are considered a guaranteed API.
6587                         The value should be a CamelCase string.
6588                         This field may not be empty.
6589                       maxLength: 1024
6590                       minLength: 1
6591                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
6592                       type: string
6593                     status:
6594                       description: status of the condition, one of True, False, Unknown.
6595                       enum:
6596                       - "True"
6597                       - "False"
6598                       - Unknown
6599                       type: string
6600                     type:
6601                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
6602                       maxLength: 316
6603                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
6604                       type: string
6605                   required:
6606                   - lastTransitionTime
6607                   - message
6608                   - reason
6609                   - status
6610                   - type
6611                   type: object
6612                 type: array
6613               inventory:
6614                 description: Inventory contains the list of Kubernetes resource object
6615                   references that have been successfully applied.
6616                 properties:
6617                   entries:
6618                     description: Entries of Kubernetes resource object references.
6619                     items:
6620                       description: ResourceRef contains the information necessary
6621                         to locate a resource within a cluster.
6622                       properties:
6623                         id:
6624                           description: |-
6625                             ID is the string representation of the Kubernetes resource object's metadata,
6626                             in the format '<namespace>_<name>_<group>_<kind>'.
6627                           type: string
6628                         v:
6629                           description: Version is the API version of the Kubernetes
6630                             resource object's kind.
6631                           type: string
6632                       required:
6633                       - id
6634                       - v
6635                       type: object
6636                     type: array
6637                 required:
6638                 - entries
6639                 type: object
6640               lastAppliedRevision:
6641                 description: |-
6642                   The last successfully applied revision.
6643                   Equals the Revision of the applied Artifact from the referenced Source.
6644                 type: string
6645               lastAttemptedRevision:
6646                 description: LastAttemptedRevision is the revision of the last reconciliation
6647                   attempt.
6648                 type: string
6649               lastHandledReconcileAt:
6650                 description: |-
6651                   LastHandledReconcileAt holds the value of the most recent
6652                   reconcile request value, so a change of the annotation value
6653                   can be detected.
6654                 type: string
6655               observedGeneration:
6656                 description: ObservedGeneration is the last reconciled generation.
6657                 format: int64
6658                 type: integer
6659             type: object
6660         type: object
6661     served: true
6662     storage: false
6663     subresources:
6664       status: {}
6665 ---
6666 apiVersion: v1
6667 kind: ServiceAccount
6668 metadata:
6669   labels:
6670     app.kubernetes.io/component: kustomize-controller
6671     app.kubernetes.io/instance: flux-system
6672     app.kubernetes.io/part-of: flux
6673     app.kubernetes.io/version: v2.4.0
6674   name: kustomize-controller
6675   namespace: flux-system
6676 ---
6677 apiVersion: apps/v1
6678 kind: Deployment
6679 metadata:
6680   labels:
6681     app.kubernetes.io/component: kustomize-controller
6682     app.kubernetes.io/instance: flux-system
6683     app.kubernetes.io/part-of: flux
6684     app.kubernetes.io/version: v2.4.0
6685     control-plane: controller
6686   name: kustomize-controller
6687   namespace: flux-system
6688 spec:
6689   replicas: 1
6690   selector:
6691     matchLabels:
6692       app: kustomize-controller
6693   template:
6694     metadata:
6695       annotations:
6696         prometheus.io/port: "8080"
6697         prometheus.io/scrape: "true"
6698       labels:
6699         app: kustomize-controller
6700     spec:
6701       containers:
6702       - args:
6703         - --events-addr=http://notification-controller.flux-system.svc.cluster.local./
6704         - --watch-all-namespaces=true
6705         - --log-level=info
6706         - --log-encoding=json
6707         - --enable-leader-election
6708         env:
6709         - name: RUNTIME_NAMESPACE
6710           valueFrom:
6711             fieldRef:
6712               fieldPath: metadata.namespace
6713         - name: GOMAXPROCS
6714           valueFrom:
6715             resourceFieldRef:
6716               containerName: manager
6717               resource: limits.cpu
6718         - name: GOMEMLIMIT
6719           valueFrom:
6720             resourceFieldRef:
6721               containerName: manager
6722               resource: limits.memory
6723         image: ghcr.io/fluxcd/kustomize-controller:v1.4.0
6724         imagePullPolicy: IfNotPresent
6725         livenessProbe:
6726           httpGet:
6727             path: /healthz
6728             port: healthz
6729         name: manager
6730         ports:
6731         - containerPort: 8080
6732           name: http-prom
6733           protocol: TCP
6734         - containerPort: 9440
6735           name: healthz
6736           protocol: TCP
6737         readinessProbe:
6738           httpGet:
6739             path: /readyz
6740             port: healthz
6741         resources:
6742           limits:
6743             cpu: 1000m
6744             memory: 1Gi
6745           requests:
6746             cpu: 100m
6747             memory: 64Mi
6748         securityContext:
6749           allowPrivilegeEscalation: false
6750           capabilities:
6751             drop:
6752             - ALL
6753           readOnlyRootFilesystem: true
6754           runAsNonRoot: true
6755           seccompProfile:
6756             type: RuntimeDefault
6757         volumeMounts:
6758         - mountPath: /tmp
6759           name: temp
6760       nodeSelector:
6761         kubernetes.io/os: linux
6762       priorityClassName: system-cluster-critical
6763       securityContext:
6764         fsGroup: 1337
6765       serviceAccountName: kustomize-controller
6766       terminationGracePeriodSeconds: 60
6767       volumes:
6768       - emptyDir: {}
6769         name: temp
6770 ---
6771 apiVersion: apiextensions.k8s.io/v1
6772 kind: CustomResourceDefinition
6773 metadata:
6774   annotations:
6775     controller-gen.kubebuilder.io/version: v0.16.1
6776   labels:
6777     app.kubernetes.io/component: helm-controller
6778     app.kubernetes.io/instance: flux-system
6779     app.kubernetes.io/part-of: flux
6780     app.kubernetes.io/version: v2.4.0
6781   name: helmreleases.helm.toolkit.fluxcd.io
6782 spec:
6783   group: helm.toolkit.fluxcd.io
6784   names:
6785     kind: HelmRelease
6786     listKind: HelmReleaseList
6787     plural: helmreleases
6788     shortNames:
6789     - hr
6790     singular: helmrelease
6791   scope: Namespaced
6792   versions:
6793   - additionalPrinterColumns:
6794     - jsonPath: .metadata.creationTimestamp
6795       name: Age
6796       type: date
6797     - jsonPath: .status.conditions[?(@.type=="Ready")].status
6798       name: Ready
6799       type: string
6800     - jsonPath: .status.conditions[?(@.type=="Ready")].message
6801       name: Status
6802       type: string
6803     name: v2
6804     schema:
6805       openAPIV3Schema:
6806         description: HelmRelease is the Schema for the helmreleases API
6807         properties:
6808           apiVersion:
6809             description: |-
6810               APIVersion defines the versioned schema of this representation of an object.
6811               Servers should convert recognized schemas to the latest internal value, and
6812               may reject unrecognized values.
6813               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
6814             type: string
6815           kind:
6816             description: |-
6817               Kind is a string value representing the REST resource this object represents.
6818               Servers may infer this from the endpoint the client submits requests to.
6819               Cannot be updated.
6820               In CamelCase.
6821               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
6822             type: string
6823           metadata:
6824             type: object
6825           spec:
6826             description: HelmReleaseSpec defines the desired state of a Helm release.
6827             properties:
6828               chart:
6829                 description: |-
6830                   Chart defines the template of the v1.HelmChart that should be created
6831                   for this HelmRelease.
6832                 properties:
6833                   metadata:
6834                     description: ObjectMeta holds the template for metadata like labels
6835                       and annotations.
6836                     properties:
6837                       annotations:
6838                         additionalProperties:
6839                           type: string
6840                         description: |-
6841                           Annotations is an unstructured key value map stored with a resource that may be
6842                           set by external tools to store and retrieve arbitrary metadata. They are not
6843                           queryable and should be preserved when modifying objects.
6844                           More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
6845                         type: object
6846                       labels:
6847                         additionalProperties:
6848                           type: string
6849                         description: |-
6850                           Map of string keys and values that can be used to organize and categorize
6851                           (scope and select) objects.
6852                           More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
6853                         type: object
6854                     type: object
6855                   spec:
6856                     description: Spec holds the template for the v1.HelmChartSpec
6857                       for this HelmRelease.
6858                     properties:
6859                       chart:
6860                         description: The name or path the Helm chart is available
6861                           at in the SourceRef.
6862                         maxLength: 2048
6863                         minLength: 1
6864                         type: string
6865                       ignoreMissingValuesFiles:
6866                         description: IgnoreMissingValuesFiles controls whether to
6867                           silently ignore missing values files rather than failing.
6868                         type: boolean
6869                       interval:
6870                         description: |-
6871                           Interval at which to check the v1.Source for updates. Defaults to
6872                           'HelmReleaseSpec.Interval'.
6873                         pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
6874                         type: string
6875                       reconcileStrategy:
6876                         default: ChartVersion
6877                         description: |-
6878                           Determines what enables the creation of a new artifact. Valid values are
6879                           ('ChartVersion', 'Revision').
6880                           See the documentation of the values for an explanation on their behavior.
6881                           Defaults to ChartVersion when omitted.
6882                         enum:
6883                         - ChartVersion
6884                         - Revision
6885                         type: string
6886                       sourceRef:
6887                         description: The name and namespace of the v1.Source the chart
6888                           is available at.
6889                         properties:
6890                           apiVersion:
6891                             description: APIVersion of the referent.
6892                             type: string
6893                           kind:
6894                             description: Kind of the referent.
6895                             enum:
6896                             - HelmRepository
6897                             - GitRepository
6898                             - Bucket
6899                             type: string
6900                           name:
6901                             description: Name of the referent.
6902                             maxLength: 253
6903                             minLength: 1
6904                             type: string
6905                           namespace:
6906                             description: Namespace of the referent.
6907                             maxLength: 63
6908                             minLength: 1
6909                             type: string
6910                         required:
6911                         - kind
6912                         - name
6913                         type: object
6914                       valuesFiles:
6915                         description: |-
6916                           Alternative list of values files to use as the chart values (values.yaml
6917                           is not included by default), expected to be a relative path in the SourceRef.
6918                           Values files are merged in the order of this list with the last file overriding
6919                           the first. Ignored when omitted.
6920                         items:
6921                           type: string
6922                         type: array
6923                       verify:
6924                         description: |-
6925                           Verify contains the secret name containing the trusted public keys
6926                           used to verify the signature and specifies which provider to use to check
6927                           whether OCI image is authentic.
6928                           This field is only supported for OCI sources.
6929                           Chart dependencies, which are not bundled in the umbrella chart artifact,
6930                           are not verified.
6931                         properties:
6932                           provider:
6933                             default: cosign
6934                             description: Provider specifies the technology used to
6935                               sign the OCI Helm chart.
6936                             enum:
6937                             - cosign
6938                             - notation
6939                             type: string
6940                           secretRef:
6941                             description: |-
6942                               SecretRef specifies the Kubernetes Secret containing the
6943                               trusted public keys.
6944                             properties:
6945                               name:
6946                                 description: Name of the referent.
6947                                 type: string
6948                             required:
6949                             - name
6950                             type: object
6951                         required:
6952                         - provider
6953                         type: object
6954                       version:
6955                         default: '*'
6956                         description: |-
6957                           Version semver expression, ignored for charts from v1.GitRepository and
6958                           v1beta2.Bucket sources. Defaults to latest when omitted.
6959                         type: string
6960                     required:
6961                     - chart
6962                     - sourceRef
6963                     type: object
6964                 required:
6965                 - spec
6966                 type: object
6967               chartRef:
6968                 description: |-
6969                   ChartRef holds a reference to a source controller resource containing the
6970                   Helm chart artifact.
6971                 properties:
6972                   apiVersion:
6973                     description: APIVersion of the referent.
6974                     type: string
6975                   kind:
6976                     description: Kind of the referent.
6977                     enum:
6978                     - OCIRepository
6979                     - HelmChart
6980                     type: string
6981                   name:
6982                     description: Name of the referent.
6983                     maxLength: 253
6984                     minLength: 1
6985                     type: string
6986                   namespace:
6987                     description: |-
6988                       Namespace of the referent, defaults to the namespace of the Kubernetes
6989                       resource object that contains the reference.
6990                     maxLength: 63
6991                     minLength: 1
6992                     type: string
6993                 required:
6994                 - kind
6995                 - name
6996                 type: object
6997               dependsOn:
6998                 description: |-
6999                   DependsOn may contain a meta.NamespacedObjectReference slice with
7000                   references to HelmRelease resources that must be ready before this HelmRelease
7001                   can be reconciled.
7002                 items:
7003                   description: |-
7004                     NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any
7005                     namespace.
7006                   properties:
7007                     name:
7008                       description: Name of the referent.
7009                       type: string
7010                     namespace:
7011                       description: Namespace of the referent, when not specified it
7012                         acts as LocalObjectReference.
7013                       type: string
7014                   required:
7015                   - name
7016                   type: object
7017                 type: array
7018               driftDetection:
7019                 description: |-
7020                   DriftDetection holds the configuration for detecting and handling
7021                   differences between the manifest in the Helm storage and the resources
7022                   currently existing in the cluster.
7023                 properties:
7024                   ignore:
7025                     description: |-
7026                       Ignore contains a list of rules for specifying which changes to ignore
7027                       during diffing.
7028                     items:
7029                       description: |-
7030                         IgnoreRule defines a rule to selectively disregard specific changes during
7031                         the drift detection process.
7032                       properties:
7033                         paths:
7034                           description: |-
7035                             Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from
7036                             consideration in a Kubernetes object.
7037                           items:
7038                             type: string
7039                           type: array
7040                         target:
7041                           description: |-
7042                             Target is a selector for specifying Kubernetes objects to which this
7043                             rule applies.
7044                             If Target is not set, the Paths will be ignored for all Kubernetes
7045                             objects within the manifest of the Helm release.
7046                           properties:
7047                             annotationSelector:
7048                               description: |-
7049                                 AnnotationSelector is a string that follows the label selection expression
7050                                 https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
7051                                 It matches with the resource annotations.
7052                               type: string
7053                             group:
7054                               description: |-
7055                                 Group is the API group to select resources from.
7056                                 Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources.
7057                                 https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
7058                               type: string
7059                             kind:
7060                               description: |-
7061                                 Kind of the API Group to select resources from.
7062                                 Together with Group and Version it is capable of unambiguously
7063                                 identifying and/or selecting resources.
7064                                 https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
7065                               type: string
7066                             labelSelector:
7067                               description: |-
7068                                 LabelSelector is a string that follows the label selection expression
7069                                 https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
7070                                 It matches with the resource labels.
7071                               type: string
7072                             name:
7073                               description: Name to match resources with.
7074                               type: string
7075                             namespace:
7076                               description: Namespace to select resources from.
7077                               type: string
7078                             version:
7079                               description: |-
7080                                 Version of the API Group to select resources from.
7081                                 Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources.
7082                                 https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
7083                               type: string
7084                           type: object
7085                       required:
7086                       - paths
7087                       type: object
7088                     type: array
7089                   mode:
7090                     description: |-
7091                       Mode defines how differences should be handled between the Helm manifest
7092                       and the manifest currently applied to the cluster.
7093                       If not explicitly set, it defaults to DiffModeDisabled.
7094                     enum:
7095                     - enabled
7096                     - warn
7097                     - disabled
7098                     type: string
7099                 type: object
7100               install:
7101                 description: Install holds the configuration for Helm install actions
7102                   for this HelmRelease.
7103                 properties:
7104                   crds:
7105                     description: |-
7106                       CRDs upgrade CRDs from the Helm Chart's crds directory according
7107                       to the CRD upgrade policy provided here. Valid values are `Skip`,
7108                       `Create` or `CreateReplace`. Default is `Create` and if omitted
7109                       CRDs are installed but not updated.
7110
7111                       Skip: do neither install nor replace (update) any CRDs.
7112
7113                       Create: new CRDs are created, existing CRDs are neither updated nor deleted.
7114
7115                       CreateReplace: new CRDs are created, existing CRDs are updated (replaced)
7116                       but not deleted.
7117
7118                       By default, CRDs are applied (installed) during Helm install action.
7119                       With this option users can opt in to CRD replace existing CRDs on Helm
7120                       install actions, which is not (yet) natively supported by Helm.
7121                       https://helm.sh/docs/chart_best_practices/custom_resource_definitions.
7122                     enum:
7123                     - Skip
7124                     - Create
7125                     - CreateReplace
7126                     type: string
7127                   createNamespace:
7128                     description: |-
7129                       CreateNamespace tells the Helm install action to create the
7130                       HelmReleaseSpec.TargetNamespace if it does not exist yet.
7131                       On uninstall, the namespace will not be garbage collected.
7132                     type: boolean
7133                   disableHooks:
7134                     description: DisableHooks prevents hooks from running during the
7135                       Helm install action.
7136                     type: boolean
7137                   disableOpenAPIValidation:
7138                     description: |-
7139                       DisableOpenAPIValidation prevents the Helm install action from validating
7140                       rendered templates against the Kubernetes OpenAPI Schema.
7141                     type: boolean
7142                   disableSchemaValidation:
7143                     description: |-
7144                       DisableSchemaValidation prevents the Helm install action from validating
7145                       the values against the JSON Schema.
7146                     type: boolean
7147                   disableWait:
7148                     description: |-
7149                       DisableWait disables the waiting for resources to be ready after a Helm
7150                       install has been performed.
7151                     type: boolean
7152                   disableWaitForJobs:
7153                     description: |-
7154                       DisableWaitForJobs disables waiting for jobs to complete after a Helm
7155                       install has been performed.
7156                     type: boolean
7157                   remediation:
7158                     description: |-
7159                       Remediation holds the remediation configuration for when the Helm install
7160                       action for the HelmRelease fails. The default is to not perform any action.
7161                     properties:
7162                       ignoreTestFailures:
7163                         description: |-
7164                           IgnoreTestFailures tells the controller to skip remediation when the Helm
7165                           tests are run after an install action but fail. Defaults to
7166                           'Test.IgnoreFailures'.
7167                         type: boolean
7168                       remediateLastFailure:
7169                         description: |-
7170                           RemediateLastFailure tells the controller to remediate the last failure, when
7171                           no retries remain. Defaults to 'false'.
7172                         type: boolean
7173                       retries:
7174                         description: |-
7175                           Retries is the number of retries that should be attempted on failures before
7176                           bailing. Remediation, using an uninstall, is performed between each attempt.
7177                           Defaults to '0', a negative integer equals to unlimited retries.
7178                         type: integer
7179                     type: object
7180                   replace:
7181                     description: |-
7182                       Replace tells the Helm install action to re-use the 'ReleaseName', but only
7183                       if that name is a deleted release which remains in the history.
7184                     type: boolean
7185                   skipCRDs:
7186                     description: |-
7187                       SkipCRDs tells the Helm install action to not install any CRDs. By default,
7188                       CRDs are installed if not already present.
7189
7190                       Deprecated use CRD policy (`crds`) attribute with value `Skip` instead.
7191                     type: boolean
7192                   timeout:
7193                     description: |-
7194                       Timeout is the time to wait for any individual Kubernetes operation (like
7195                       Jobs for hooks) during the performance of a Helm install action. Defaults to
7196                       'HelmReleaseSpec.Timeout'.
7197                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
7198                     type: string
7199                 type: object
7200               interval:
7201                 description: Interval at which to reconcile the Helm release.
7202                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
7203                 type: string
7204               kubeConfig:
7205                 description: |-
7206                   KubeConfig for reconciling the HelmRelease on a remote cluster.
7207                   When used in combination with HelmReleaseSpec.ServiceAccountName,
7208                   forces the controller to act on behalf of that Service Account at the
7209                   target cluster.
7210                   If the --default-service-account flag is set, its value will be used as
7211                   a controller level fallback for when HelmReleaseSpec.ServiceAccountName
7212                   is empty.
7213                 properties:
7214                   secretRef:
7215                     description: |-
7216                       SecretRef holds the name of a secret that contains a key with
7217                       the kubeconfig file as the value. If no key is set, the key will default
7218                       to 'value'.
7219                       It is recommended that the kubeconfig is self-contained, and the secret
7220                       is regularly updated if credentials such as a cloud-access-token expire.
7221                       Cloud specific `cmd-path` auth helpers will not function without adding
7222                       binaries and credentials to the Pod that is responsible for reconciling
7223                       Kubernetes resources.
7224                     properties:
7225                       key:
7226                         description: Key in the Secret, when not specified an implementation-specific
7227                           default key is used.
7228                         type: string
7229                       name:
7230                         description: Name of the Secret.
7231                         type: string
7232                     required:
7233                     - name
7234                     type: object
7235                 required:
7236                 - secretRef
7237                 type: object
7238               maxHistory:
7239                 description: |-
7240                   MaxHistory is the number of revisions saved by Helm for this HelmRelease.
7241                   Use '0' for an unlimited number of revisions; defaults to '5'.
7242                 type: integer
7243               persistentClient:
7244                 description: |-
7245                   PersistentClient tells the controller to use a persistent Kubernetes
7246                   client for this release. When enabled, the client will be reused for the
7247                   duration of the reconciliation, instead of being created and destroyed
7248                   for each (step of a) Helm action.
7249
7250                   This can improve performance, but may cause issues with some Helm charts
7251                   that for example do create Custom Resource Definitions during installation
7252                   outside Helm's CRD lifecycle hooks, which are then not observed to be
7253                   available by e.g. post-install hooks.
7254
7255                   If not set, it defaults to true.
7256                 type: boolean
7257               postRenderers:
7258                 description: |-
7259                   PostRenderers holds an array of Helm PostRenderers, which will be applied in order
7260                   of their definition.
7261                 items:
7262                   description: PostRenderer contains a Helm PostRenderer specification.
7263                   properties:
7264                     kustomize:
7265                       description: Kustomization to apply as PostRenderer.
7266                       properties:
7267                         images:
7268                           description: |-
7269                             Images is a list of (image name, new name, new tag or digest)
7270                             for changing image names, tags or digests. This can also be achieved with a
7271                             patch, but this operator is simpler to specify.
7272                           items:
7273                             description: Image contains an image name, a new name,
7274                               a new tag or digest, which will replace the original
7275                               name and tag.
7276                             properties:
7277                               digest:
7278                                 description: |-
7279                                   Digest is the value used to replace the original image tag.
7280                                   If digest is present NewTag value is ignored.
7281                                 type: string
7282                               name:
7283                                 description: Name is a tag-less image name.
7284                                 type: string
7285                               newName:
7286                                 description: NewName is the value used to replace
7287                                   the original name.
7288                                 type: string
7289                               newTag:
7290                                 description: NewTag is the value used to replace the
7291                                   original tag.
7292                                 type: string
7293                             required:
7294                             - name
7295                             type: object
7296                           type: array
7297                         patches:
7298                           description: |-
7299                             Strategic merge and JSON patches, defined as inline YAML objects,
7300                             capable of targeting objects based on kind, label and annotation selectors.
7301                           items:
7302                             description: |-
7303                               Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should
7304                               be applied to.
7305                             properties:
7306                               patch:
7307                                 description: |-
7308                                   Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with
7309                                   an array of operation objects.
7310                                 type: string
7311                               target:
7312                                 description: Target points to the resources that the
7313                                   patch document should be applied to.
7314                                 properties:
7315                                   annotationSelector:
7316                                     description: |-
7317                                       AnnotationSelector is a string that follows the label selection expression
7318                                       https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
7319                                       It matches with the resource annotations.
7320                                     type: string
7321                                   group:
7322                                     description: |-
7323                                       Group is the API group to select resources from.
7324                                       Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources.
7325                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
7326                                     type: string
7327                                   kind:
7328                                     description: |-
7329                                       Kind of the API Group to select resources from.
7330                                       Together with Group and Version it is capable of unambiguously
7331                                       identifying and/or selecting resources.
7332                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
7333                                     type: string
7334                                   labelSelector:
7335                                     description: |-
7336                                       LabelSelector is a string that follows the label selection expression
7337                                       https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
7338                                       It matches with the resource labels.
7339                                     type: string
7340                                   name:
7341                                     description: Name to match resources with.
7342                                     type: string
7343                                   namespace:
7344                                     description: Namespace to select resources from.
7345                                     type: string
7346                                   version:
7347                                     description: |-
7348                                       Version of the API Group to select resources from.
7349                                       Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources.
7350                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
7351                                     type: string
7352                                 type: object
7353                             required:
7354                             - patch
7355                             type: object
7356                           type: array
7357                       type: object
7358                   type: object
7359                 type: array
7360               releaseName:
7361                 description: |-
7362                   ReleaseName used for the Helm release. Defaults to a composition of
7363                   '[TargetNamespace-]Name'.
7364                 maxLength: 53
7365                 minLength: 1
7366                 type: string
7367               rollback:
7368                 description: Rollback holds the configuration for Helm rollback actions
7369                   for this HelmRelease.
7370                 properties:
7371                   cleanupOnFail:
7372                     description: |-
7373                       CleanupOnFail allows deletion of new resources created during the Helm
7374                       rollback action when it fails.
7375                     type: boolean
7376                   disableHooks:
7377                     description: DisableHooks prevents hooks from running during the
7378                       Helm rollback action.
7379                     type: boolean
7380                   disableWait:
7381                     description: |-
7382                       DisableWait disables the waiting for resources to be ready after a Helm
7383                       rollback has been performed.
7384                     type: boolean
7385                   disableWaitForJobs:
7386                     description: |-
7387                       DisableWaitForJobs disables waiting for jobs to complete after a Helm
7388                       rollback has been performed.
7389                     type: boolean
7390                   force:
7391                     description: Force forces resource updates through a replacement
7392                       strategy.
7393                     type: boolean
7394                   recreate:
7395                     description: Recreate performs pod restarts for the resource if
7396                       applicable.
7397                     type: boolean
7398                   timeout:
7399                     description: |-
7400                       Timeout is the time to wait for any individual Kubernetes operation (like
7401                       Jobs for hooks) during the performance of a Helm rollback action. Defaults to
7402                       'HelmReleaseSpec.Timeout'.
7403                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
7404                     type: string
7405                 type: object
7406               serviceAccountName:
7407                 description: |-
7408                   The name of the Kubernetes service account to impersonate
7409                   when reconciling this HelmRelease.
7410                 maxLength: 253
7411                 minLength: 1
7412                 type: string
7413               storageNamespace:
7414                 description: |-
7415                   StorageNamespace used for the Helm storage.
7416                   Defaults to the namespace of the HelmRelease.
7417                 maxLength: 63
7418                 minLength: 1
7419                 type: string
7420               suspend:
7421                 description: |-
7422                   Suspend tells the controller to suspend reconciliation for this HelmRelease,
7423                   it does not apply to already started reconciliations. Defaults to false.
7424                 type: boolean
7425               targetNamespace:
7426                 description: |-
7427                   TargetNamespace to target when performing operations for the HelmRelease.
7428                   Defaults to the namespace of the HelmRelease.
7429                 maxLength: 63
7430                 minLength: 1
7431                 type: string
7432               test:
7433                 description: Test holds the configuration for Helm test actions for
7434                   this HelmRelease.
7435                 properties:
7436                   enable:
7437                     description: |-
7438                       Enable enables Helm test actions for this HelmRelease after an Helm install
7439                       or upgrade action has been performed.
7440                     type: boolean
7441                   filters:
7442                     description: Filters is a list of tests to run or exclude from
7443                       running.
7444                     items:
7445                       description: Filter holds the configuration for individual Helm
7446                         test filters.
7447                       properties:
7448                         exclude:
7449                           description: Exclude specifies whether the named test should
7450                             be excluded.
7451                           type: boolean
7452                         name:
7453                           description: Name is the name of the test.
7454                           maxLength: 253
7455                           minLength: 1
7456                           type: string
7457                       required:
7458                       - name
7459                       type: object
7460                     type: array
7461                   ignoreFailures:
7462                     description: |-
7463                       IgnoreFailures tells the controller to skip remediation when the Helm tests
7464                       are run but fail. Can be overwritten for tests run after install or upgrade
7465                       actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'.
7466                     type: boolean
7467                   timeout:
7468                     description: |-
7469                       Timeout is the time to wait for any individual Kubernetes operation during
7470                       the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'.
7471                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
7472                     type: string
7473                 type: object
7474               timeout:
7475                 description: |-
7476                   Timeout is the time to wait for any individual Kubernetes operation (like Jobs
7477                   for hooks) during the performance of a Helm action. Defaults to '5m0s'.
7478                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
7479                 type: string
7480               uninstall:
7481                 description: Uninstall holds the configuration for Helm uninstall
7482                   actions for this HelmRelease.
7483                 properties:
7484                   deletionPropagation:
7485                     default: background
7486                     description: |-
7487                       DeletionPropagation specifies the deletion propagation policy when
7488                       a Helm uninstall is performed.
7489                     enum:
7490                     - background
7491                     - foreground
7492                     - orphan
7493                     type: string
7494                   disableHooks:
7495                     description: DisableHooks prevents hooks from running during the
7496                       Helm rollback action.
7497                     type: boolean
7498                   disableWait:
7499                     description: |-
7500                       DisableWait disables waiting for all the resources to be deleted after
7501                       a Helm uninstall is performed.
7502                     type: boolean
7503                   keepHistory:
7504                     description: |-
7505                       KeepHistory tells Helm to remove all associated resources and mark the
7506                       release as deleted, but retain the release history.
7507                     type: boolean
7508                   timeout:
7509                     description: |-
7510                       Timeout is the time to wait for any individual Kubernetes operation (like
7511                       Jobs for hooks) during the performance of a Helm uninstall action. Defaults
7512                       to 'HelmReleaseSpec.Timeout'.
7513                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
7514                     type: string
7515                 type: object
7516               upgrade:
7517                 description: Upgrade holds the configuration for Helm upgrade actions
7518                   for this HelmRelease.
7519                 properties:
7520                   cleanupOnFail:
7521                     description: |-
7522                       CleanupOnFail allows deletion of new resources created during the Helm
7523                       upgrade action when it fails.
7524                     type: boolean
7525                   crds:
7526                     description: |-
7527                       CRDs upgrade CRDs from the Helm Chart's crds directory according
7528                       to the CRD upgrade policy provided here. Valid values are `Skip`,
7529                       `Create` or `CreateReplace`. Default is `Skip` and if omitted
7530                       CRDs are neither installed nor upgraded.
7531
7532                       Skip: do neither install nor replace (update) any CRDs.
7533
7534                       Create: new CRDs are created, existing CRDs are neither updated nor deleted.
7535
7536                       CreateReplace: new CRDs are created, existing CRDs are updated (replaced)
7537                       but not deleted.
7538
7539                       By default, CRDs are not applied during Helm upgrade action. With this
7540                       option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm.
7541                       https://helm.sh/docs/chart_best_practices/custom_resource_definitions.
7542                     enum:
7543                     - Skip
7544                     - Create
7545                     - CreateReplace
7546                     type: string
7547                   disableHooks:
7548                     description: DisableHooks prevents hooks from running during the
7549                       Helm upgrade action.
7550                     type: boolean
7551                   disableOpenAPIValidation:
7552                     description: |-
7553                       DisableOpenAPIValidation prevents the Helm upgrade action from validating
7554                       rendered templates against the Kubernetes OpenAPI Schema.
7555                     type: boolean
7556                   disableSchemaValidation:
7557                     description: |-
7558                       DisableSchemaValidation prevents the Helm upgrade action from validating
7559                       the values against the JSON Schema.
7560                     type: boolean
7561                   disableWait:
7562                     description: |-
7563                       DisableWait disables the waiting for resources to be ready after a Helm
7564                       upgrade has been performed.
7565                     type: boolean
7566                   disableWaitForJobs:
7567                     description: |-
7568                       DisableWaitForJobs disables waiting for jobs to complete after a Helm
7569                       upgrade has been performed.
7570                     type: boolean
7571                   force:
7572                     description: Force forces resource updates through a replacement
7573                       strategy.
7574                     type: boolean
7575                   preserveValues:
7576                     description: |-
7577                       PreserveValues will make Helm reuse the last release's values and merge in
7578                       overrides from 'Values'. Setting this flag makes the HelmRelease
7579                       non-declarative.
7580                     type: boolean
7581                   remediation:
7582                     description: |-
7583                       Remediation holds the remediation configuration for when the Helm upgrade
7584                       action for the HelmRelease fails. The default is to not perform any action.
7585                     properties:
7586                       ignoreTestFailures:
7587                         description: |-
7588                           IgnoreTestFailures tells the controller to skip remediation when the Helm
7589                           tests are run after an upgrade action but fail.
7590                           Defaults to 'Test.IgnoreFailures'.
7591                         type: boolean
7592                       remediateLastFailure:
7593                         description: |-
7594                           RemediateLastFailure tells the controller to remediate the last failure, when
7595                           no retries remain. Defaults to 'false' unless 'Retries' is greater than 0.
7596                         type: boolean
7597                       retries:
7598                         description: |-
7599                           Retries is the number of retries that should be attempted on failures before
7600                           bailing. Remediation, using 'Strategy', is performed between each attempt.
7601                           Defaults to '0', a negative integer equals to unlimited retries.
7602                         type: integer
7603                       strategy:
7604                         description: Strategy to use for failure remediation. Defaults
7605                           to 'rollback'.
7606                         enum:
7607                         - rollback
7608                         - uninstall
7609                         type: string
7610                     type: object
7611                   timeout:
7612                     description: |-
7613                       Timeout is the time to wait for any individual Kubernetes operation (like
7614                       Jobs for hooks) during the performance of a Helm upgrade action. Defaults to
7615                       'HelmReleaseSpec.Timeout'.
7616                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
7617                     type: string
7618                 type: object
7619               values:
7620                 description: Values holds the values for this Helm release.
7621                 x-kubernetes-preserve-unknown-fields: true
7622               valuesFrom:
7623                 description: |-
7624                   ValuesFrom holds references to resources containing Helm values for this HelmRelease,
7625                   and information about how they should be merged.
7626                 items:
7627                   description: |-
7628                     ValuesReference contains a reference to a resource containing Helm values,
7629                     and optionally the key they can be found at.
7630                   properties:
7631                     kind:
7632                       description: Kind of the values referent, valid values are ('Secret',
7633                         'ConfigMap').
7634                       enum:
7635                       - Secret
7636                       - ConfigMap
7637                       type: string
7638                     name:
7639                       description: |-
7640                         Name of the values referent. Should reside in the same namespace as the
7641                         referring resource.
7642                       maxLength: 253
7643                       minLength: 1
7644                       type: string
7645                     optional:
7646                       description: |-
7647                         Optional marks this ValuesReference as optional. When set, a not found error
7648                         for the values reference is ignored, but any ValuesKey, TargetPath or
7649                         transient error will still result in a reconciliation failure.
7650                       type: boolean
7651                     targetPath:
7652                       description: |-
7653                         TargetPath is the YAML dot notation path the value should be merged at. When
7654                         set, the ValuesKey is expected to be a single flat value. Defaults to 'None',
7655                         which results in the values getting merged at the root.
7656                       maxLength: 250
7657                       pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$
7658                       type: string
7659                     valuesKey:
7660                       description: |-
7661                         ValuesKey is the data key where the values.yaml or a specific value can be
7662                         found at. Defaults to 'values.yaml'.
7663                       maxLength: 253
7664                       pattern: ^[\-._a-zA-Z0-9]+$
7665                       type: string
7666                   required:
7667                   - kind
7668                   - name
7669                   type: object
7670                 type: array
7671             required:
7672             - interval
7673             type: object
7674             x-kubernetes-validations:
7675             - message: either chart or chartRef must be set
7676               rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart)
7677                 && has(self.chartRef))
7678           status:
7679             default:
7680               observedGeneration: -1
7681             description: HelmReleaseStatus defines the observed state of a HelmRelease.
7682             properties:
7683               conditions:
7684                 description: Conditions holds the conditions for the HelmRelease.
7685                 items:
7686                   description: Condition contains details for one aspect of the current
7687                     state of this API Resource.
7688                   properties:
7689                     lastTransitionTime:
7690                       description: |-
7691                         lastTransitionTime is the last time the condition transitioned from one status to another.
7692                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
7693                       format: date-time
7694                       type: string
7695                     message:
7696                       description: |-
7697                         message is a human readable message indicating details about the transition.
7698                         This may be an empty string.
7699                       maxLength: 32768
7700                       type: string
7701                     observedGeneration:
7702                       description: |-
7703                         observedGeneration represents the .metadata.generation that the condition was set based upon.
7704                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
7705                         with respect to the current state of the instance.
7706                       format: int64
7707                       minimum: 0
7708                       type: integer
7709                     reason:
7710                       description: |-
7711                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
7712                         Producers of specific condition types may define expected values and meanings for this field,
7713                         and whether the values are considered a guaranteed API.
7714                         The value should be a CamelCase string.
7715                         This field may not be empty.
7716                       maxLength: 1024
7717                       minLength: 1
7718                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
7719                       type: string
7720                     status:
7721                       description: status of the condition, one of True, False, Unknown.
7722                       enum:
7723                       - "True"
7724                       - "False"
7725                       - Unknown
7726                       type: string
7727                     type:
7728                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
7729                       maxLength: 316
7730                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
7731                       type: string
7732                   required:
7733                   - lastTransitionTime
7734                   - message
7735                   - reason
7736                   - status
7737                   - type
7738                   type: object
7739                 type: array
7740               failures:
7741                 description: |-
7742                   Failures is the reconciliation failure count against the latest desired
7743                   state. It is reset after a successful reconciliation.
7744                 format: int64
7745                 type: integer
7746               helmChart:
7747                 description: |-
7748                   HelmChart is the namespaced name of the HelmChart resource created by
7749                   the controller for the HelmRelease.
7750                 type: string
7751               history:
7752                 description: |-
7753                   History holds the history of Helm releases performed for this HelmRelease
7754                   up to the last successfully completed release.
7755                 items:
7756                   description: |-
7757                     Snapshot captures a point-in-time copy of the status information for a Helm release,
7758                     as managed by the controller.
7759                   properties:
7760                     apiVersion:
7761                       description: |-
7762                         APIVersion is the API version of the Snapshot.
7763                         Provisional: when the calculation method of the Digest field is changed,
7764                         this field will be used to distinguish between the old and new methods.
7765                       type: string
7766                     appVersion:
7767                       description: AppVersion is the chart app version of the release
7768                         object in storage.
7769                       type: string
7770                     chartName:
7771                       description: ChartName is the chart name of the release object
7772                         in storage.
7773                       type: string
7774                     chartVersion:
7775                       description: |-
7776                         ChartVersion is the chart version of the release object in
7777                         storage.
7778                       type: string
7779                     configDigest:
7780                       description: |-
7781                         ConfigDigest is the checksum of the config (better known as
7782                         "values") of the release object in storage.
7783                         It has the format of `<algo>:<checksum>`.
7784                       type: string
7785                     deleted:
7786                       description: Deleted is when the release was deleted.
7787                       format: date-time
7788                       type: string
7789                     digest:
7790                       description: |-
7791                         Digest is the checksum of the release object in storage.
7792                         It has the format of `<algo>:<checksum>`.
7793                       type: string
7794                     firstDeployed:
7795                       description: FirstDeployed is when the release was first deployed.
7796                       format: date-time
7797                       type: string
7798                     lastDeployed:
7799                       description: LastDeployed is when the release was last deployed.
7800                       format: date-time
7801                       type: string
7802                     name:
7803                       description: Name is the name of the release.
7804                       type: string
7805                     namespace:
7806                       description: Namespace is the namespace the release is deployed
7807                         to.
7808                       type: string
7809                     ociDigest:
7810                       description: OCIDigest is the digest of the OCI artifact associated
7811                         with the release.
7812                       type: string
7813                     status:
7814                       description: Status is the current state of the release.
7815                       type: string
7816                     testHooks:
7817                       additionalProperties:
7818                         description: |-
7819                           TestHookStatus holds the status information for a test hook as observed
7820                           to be run by the controller.
7821                         properties:
7822                           lastCompleted:
7823                             description: LastCompleted is the time the test hook last
7824                               completed.
7825                             format: date-time
7826                             type: string
7827                           lastStarted:
7828                             description: LastStarted is the time the test hook was
7829                               last started.
7830                             format: date-time
7831                             type: string
7832                           phase:
7833                             description: Phase the test hook was observed to be in.
7834                             type: string
7835                         type: object
7836                       description: |-
7837                         TestHooks is the list of test hooks for the release as observed to be
7838                         run by the controller.
7839                       type: object
7840                     version:
7841                       description: Version is the version of the release object in
7842                         storage.
7843                       type: integer
7844                   required:
7845                   - chartName
7846                   - chartVersion
7847                   - configDigest
7848                   - digest
7849                   - firstDeployed
7850                   - lastDeployed
7851                   - name
7852                   - namespace
7853                   - status
7854                   - version
7855                   type: object
7856                 type: array
7857               installFailures:
7858                 description: |-
7859                   InstallFailures is the install failure count against the latest desired
7860                   state. It is reset after a successful reconciliation.
7861                 format: int64
7862                 type: integer
7863               lastAttemptedConfigDigest:
7864                 description: |-
7865                   LastAttemptedConfigDigest is the digest for the config (better known as
7866                   "values") of the last reconciliation attempt.
7867                 type: string
7868               lastAttemptedGeneration:
7869                 description: |-
7870                   LastAttemptedGeneration is the last generation the controller attempted
7871                   to reconcile.
7872                 format: int64
7873                 type: integer
7874               lastAttemptedReleaseAction:
7875                 description: |-
7876                   LastAttemptedReleaseAction is the last release action performed for this
7877                   HelmRelease. It is used to determine the active remediation strategy.
7878                 enum:
7879                 - install
7880                 - upgrade
7881                 type: string
7882               lastAttemptedRevision:
7883                 description: |-
7884                   LastAttemptedRevision is the Source revision of the last reconciliation
7885                   attempt. For OCIRepository  sources, the 12 first characters of the digest are
7886                   appended to the chart version e.g. "1.2.3+1234567890ab".
7887                 type: string
7888               lastAttemptedRevisionDigest:
7889                 description: |-
7890                   LastAttemptedRevisionDigest is the digest of the last reconciliation attempt.
7891                   This is only set for OCIRepository sources.
7892                 type: string
7893               lastAttemptedValuesChecksum:
7894                 description: |-
7895                   LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last
7896                   reconciliation attempt.
7897                   Deprecated: Use LastAttemptedConfigDigest instead.
7898                 type: string
7899               lastHandledForceAt:
7900                 description: |-
7901                   LastHandledForceAt holds the value of the most recent force request
7902                   value, so a change of the annotation value can be detected.
7903                 type: string
7904               lastHandledReconcileAt:
7905                 description: |-
7906                   LastHandledReconcileAt holds the value of the most recent
7907                   reconcile request value, so a change of the annotation value
7908                   can be detected.
7909                 type: string
7910               lastHandledResetAt:
7911                 description: |-
7912                   LastHandledResetAt holds the value of the most recent reset request
7913                   value, so a change of the annotation value can be detected.
7914                 type: string
7915               lastReleaseRevision:
7916                 description: |-
7917                   LastReleaseRevision is the revision of the last successful Helm release.
7918                   Deprecated: Use History instead.
7919                 type: integer
7920               observedGeneration:
7921                 description: ObservedGeneration is the last observed generation.
7922                 format: int64
7923                 type: integer
7924               observedPostRenderersDigest:
7925                 description: |-
7926                   ObservedPostRenderersDigest is the digest for the post-renderers of
7927                   the last successful reconciliation attempt.
7928                 type: string
7929               storageNamespace:
7930                 description: |-
7931                   StorageNamespace is the namespace of the Helm release storage for the
7932                   current release.
7933                 maxLength: 63
7934                 minLength: 1
7935                 type: string
7936               upgradeFailures:
7937                 description: |-
7938                   UpgradeFailures is the upgrade failure count against the latest desired
7939                   state. It is reset after a successful reconciliation.
7940                 format: int64
7941                 type: integer
7942             type: object
7943         type: object
7944     served: true
7945     storage: true
7946     subresources:
7947       status: {}
7948   - additionalPrinterColumns:
7949     - jsonPath: .metadata.creationTimestamp
7950       name: Age
7951       type: date
7952     - jsonPath: .status.conditions[?(@.type=="Ready")].status
7953       name: Ready
7954       type: string
7955     - jsonPath: .status.conditions[?(@.type=="Ready")].message
7956       name: Status
7957       type: string
7958     deprecated: true
7959     deprecationWarning: v2beta1 HelmRelease is deprecated, upgrade to v2
7960     name: v2beta1
7961     schema:
7962       openAPIV3Schema:
7963         description: HelmRelease is the Schema for the helmreleases API
7964         properties:
7965           apiVersion:
7966             description: |-
7967               APIVersion defines the versioned schema of this representation of an object.
7968               Servers should convert recognized schemas to the latest internal value, and
7969               may reject unrecognized values.
7970               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
7971             type: string
7972           kind:
7973             description: |-
7974               Kind is a string value representing the REST resource this object represents.
7975               Servers may infer this from the endpoint the client submits requests to.
7976               Cannot be updated.
7977               In CamelCase.
7978               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
7979             type: string
7980           metadata:
7981             type: object
7982           spec:
7983             description: HelmReleaseSpec defines the desired state of a Helm release.
7984             properties:
7985               chart:
7986                 description: |-
7987                   Chart defines the template of the v1beta2.HelmChart that should be created
7988                   for this HelmRelease.
7989                 properties:
7990                   metadata:
7991                     description: ObjectMeta holds the template for metadata like labels
7992                       and annotations.
7993                     properties:
7994                       annotations:
7995                         additionalProperties:
7996                           type: string
7997                         description: |-
7998                           Annotations is an unstructured key value map stored with a resource that may be
7999                           set by external tools to store and retrieve arbitrary metadata. They are not
8000                           queryable and should be preserved when modifying objects.
8001                           More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
8002                         type: object
8003                       labels:
8004                         additionalProperties:
8005                           type: string
8006                         description: |-
8007                           Map of string keys and values that can be used to organize and categorize
8008                           (scope and select) objects.
8009                           More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
8010                         type: object
8011                     type: object
8012                   spec:
8013                     description: Spec holds the template for the v1beta2.HelmChartSpec
8014                       for this HelmRelease.
8015                     properties:
8016                       chart:
8017                         description: The name or path the Helm chart is available
8018                           at in the SourceRef.
8019                         type: string
8020                       interval:
8021                         description: |-
8022                           Interval at which to check the v1beta2.Source for updates. Defaults to
8023                           'HelmReleaseSpec.Interval'.
8024                         pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
8025                         type: string
8026                       reconcileStrategy:
8027                         default: ChartVersion
8028                         description: |-
8029                           Determines what enables the creation of a new artifact. Valid values are
8030                           ('ChartVersion', 'Revision').
8031                           See the documentation of the values for an explanation on their behavior.
8032                           Defaults to ChartVersion when omitted.
8033                         enum:
8034                         - ChartVersion
8035                         - Revision
8036                         type: string
8037                       sourceRef:
8038                         description: The name and namespace of the v1beta2.Source
8039                           the chart is available at.
8040                         properties:
8041                           apiVersion:
8042                             description: APIVersion of the referent.
8043                             type: string
8044                           kind:
8045                             description: Kind of the referent.
8046                             enum:
8047                             - HelmRepository
8048                             - GitRepository
8049                             - Bucket
8050                             type: string
8051                           name:
8052                             description: Name of the referent.
8053                             maxLength: 253
8054                             minLength: 1
8055                             type: string
8056                           namespace:
8057                             description: Namespace of the referent.
8058                             maxLength: 63
8059                             minLength: 1
8060                             type: string
8061                         required:
8062                         - kind
8063                         - name
8064                         type: object
8065                       valuesFile:
8066                         description: |-
8067                           Alternative values file to use as the default chart values, expected to
8068                           be a relative path in the SourceRef. Deprecated in favor of ValuesFiles,
8069                           for backwards compatibility the file defined here is merged before the
8070                           ValuesFiles items. Ignored when omitted.
8071                         type: string
8072                       valuesFiles:
8073                         description: |-
8074                           Alternative list of values files to use as the chart values (values.yaml
8075                           is not included by default), expected to be a relative path in the SourceRef.
8076                           Values files are merged in the order of this list with the last file overriding
8077                           the first. Ignored when omitted.
8078                         items:
8079                           type: string
8080                         type: array
8081                       verify:
8082                         description: |-
8083                           Verify contains the secret name containing the trusted public keys
8084                           used to verify the signature and specifies which provider to use to check
8085                           whether OCI image is authentic.
8086                           This field is only supported for OCI sources.
8087                           Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified.
8088                         properties:
8089                           provider:
8090                             default: cosign
8091                             description: Provider specifies the technology used to
8092                               sign the OCI Helm chart.
8093                             enum:
8094                             - cosign
8095                             type: string
8096                           secretRef:
8097                             description: |-
8098                               SecretRef specifies the Kubernetes Secret containing the
8099                               trusted public keys.
8100                             properties:
8101                               name:
8102                                 description: Name of the referent.
8103                                 type: string
8104                             required:
8105                             - name
8106                             type: object
8107                         required:
8108                         - provider
8109                         type: object
8110                       version:
8111                         default: '*'
8112                         description: |-
8113                           Version semver expression, ignored for charts from v1beta2.GitRepository and
8114                           v1beta2.Bucket sources. Defaults to latest when omitted.
8115                         type: string
8116                     required:
8117                     - chart
8118                     - sourceRef
8119                     type: object
8120                 required:
8121                 - spec
8122                 type: object
8123               chartRef:
8124                 description: |-
8125                   ChartRef holds a reference to a source controller resource containing the
8126                   Helm chart artifact.
8127
8128                   Note: this field is provisional to the v2 API, and not actively used
8129                   by v2beta1 HelmReleases.
8130                 properties:
8131                   apiVersion:
8132                     description: APIVersion of the referent.
8133                     type: string
8134                   kind:
8135                     description: Kind of the referent.
8136                     enum:
8137                     - OCIRepository
8138                     - HelmChart
8139                     type: string
8140                   name:
8141                     description: Name of the referent.
8142                     maxLength: 253
8143                     minLength: 1
8144                     type: string
8145                   namespace:
8146                     description: |-
8147                       Namespace of the referent, defaults to the namespace of the Kubernetes
8148                       resource object that contains the reference.
8149                     maxLength: 63
8150                     minLength: 1
8151                     type: string
8152                 required:
8153                 - kind
8154                 - name
8155                 type: object
8156               dependsOn:
8157                 description: |-
8158                   DependsOn may contain a meta.NamespacedObjectReference slice with
8159                   references to HelmRelease resources that must be ready before this HelmRelease
8160                   can be reconciled.
8161                 items:
8162                   description: |-
8163                     NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any
8164                     namespace.
8165                   properties:
8166                     name:
8167                       description: Name of the referent.
8168                       type: string
8169                     namespace:
8170                       description: Namespace of the referent, when not specified it
8171                         acts as LocalObjectReference.
8172                       type: string
8173                   required:
8174                   - name
8175                   type: object
8176                 type: array
8177               driftDetection:
8178                 description: |-
8179                   DriftDetection holds the configuration for detecting and handling
8180                   differences between the manifest in the Helm storage and the resources
8181                   currently existing in the cluster.
8182
8183                   Note: this field is provisional to the v2beta2 API, and not actively used
8184                   by v2beta1 HelmReleases.
8185                 properties:
8186                   ignore:
8187                     description: |-
8188                       Ignore contains a list of rules for specifying which changes to ignore
8189                       during diffing.
8190                     items:
8191                       description: |-
8192                         IgnoreRule defines a rule to selectively disregard specific changes during
8193                         the drift detection process.
8194                       properties:
8195                         paths:
8196                           description: |-
8197                             Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from
8198                             consideration in a Kubernetes object.
8199                           items:
8200                             type: string
8201                           type: array
8202                         target:
8203                           description: |-
8204                             Target is a selector for specifying Kubernetes objects to which this
8205                             rule applies.
8206                             If Target is not set, the Paths will be ignored for all Kubernetes
8207                             objects within the manifest of the Helm release.
8208                           properties:
8209                             annotationSelector:
8210                               description: |-
8211                                 AnnotationSelector is a string that follows the label selection expression
8212                                 https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
8213                                 It matches with the resource annotations.
8214                               type: string
8215                             group:
8216                               description: |-
8217                                 Group is the API group to select resources from.
8218                                 Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources.
8219                                 https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
8220                               type: string
8221                             kind:
8222                               description: |-
8223                                 Kind of the API Group to select resources from.
8224                                 Together with Group and Version it is capable of unambiguously
8225                                 identifying and/or selecting resources.
8226                                 https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
8227                               type: string
8228                             labelSelector:
8229                               description: |-
8230                                 LabelSelector is a string that follows the label selection expression
8231                                 https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
8232                                 It matches with the resource labels.
8233                               type: string
8234                             name:
8235                               description: Name to match resources with.
8236                               type: string
8237                             namespace:
8238                               description: Namespace to select resources from.
8239                               type: string
8240                             version:
8241                               description: |-
8242                                 Version of the API Group to select resources from.
8243                                 Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources.
8244                                 https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
8245                               type: string
8246                           type: object
8247                       required:
8248                       - paths
8249                       type: object
8250                     type: array
8251                   mode:
8252                     description: |-
8253                       Mode defines how differences should be handled between the Helm manifest
8254                       and the manifest currently applied to the cluster.
8255                       If not explicitly set, it defaults to DiffModeDisabled.
8256                     enum:
8257                     - enabled
8258                     - warn
8259                     - disabled
8260                     type: string
8261                 type: object
8262               install:
8263                 description: Install holds the configuration for Helm install actions
8264                   for this HelmRelease.
8265                 properties:
8266                   crds:
8267                     description: |-
8268                       CRDs upgrade CRDs from the Helm Chart's crds directory according
8269                       to the CRD upgrade policy provided here. Valid values are `Skip`,
8270                       `Create` or `CreateReplace`. Default is `Create` and if omitted
8271                       CRDs are installed but not updated.
8272
8273                       Skip: do neither install nor replace (update) any CRDs.
8274
8275                       Create: new CRDs are created, existing CRDs are neither updated nor deleted.
8276
8277                       CreateReplace: new CRDs are created, existing CRDs are updated (replaced)
8278                       but not deleted.
8279
8280                       By default, CRDs are applied (installed) during Helm install action.
8281                       With this option users can opt-in to CRD replace existing CRDs on Helm
8282                       install actions, which is not (yet) natively supported by Helm.
8283                       https://helm.sh/docs/chart_best_practices/custom_resource_definitions.
8284                     enum:
8285                     - Skip
8286                     - Create
8287                     - CreateReplace
8288                     type: string
8289                   createNamespace:
8290                     description: |-
8291                       CreateNamespace tells the Helm install action to create the
8292                       HelmReleaseSpec.TargetNamespace if it does not exist yet.
8293                       On uninstall, the namespace will not be garbage collected.
8294                     type: boolean
8295                   disableHooks:
8296                     description: DisableHooks prevents hooks from running during the
8297                       Helm install action.
8298                     type: boolean
8299                   disableOpenAPIValidation:
8300                     description: |-
8301                       DisableOpenAPIValidation prevents the Helm install action from validating
8302                       rendered templates against the Kubernetes OpenAPI Schema.
8303                     type: boolean
8304                   disableWait:
8305                     description: |-
8306                       DisableWait disables the waiting for resources to be ready after a Helm
8307                       install has been performed.
8308                     type: boolean
8309                   disableWaitForJobs:
8310                     description: |-
8311                       DisableWaitForJobs disables waiting for jobs to complete after a Helm
8312                       install has been performed.
8313                     type: boolean
8314                   remediation:
8315                     description: |-
8316                       Remediation holds the remediation configuration for when the Helm install
8317                       action for the HelmRelease fails. The default is to not perform any action.
8318                     properties:
8319                       ignoreTestFailures:
8320                         description: |-
8321                           IgnoreTestFailures tells the controller to skip remediation when the Helm
8322                           tests are run after an install action but fail. Defaults to
8323                           'Test.IgnoreFailures'.
8324                         type: boolean
8325                       remediateLastFailure:
8326                         description: |-
8327                           RemediateLastFailure tells the controller to remediate the last failure, when
8328                           no retries remain. Defaults to 'false'.
8329                         type: boolean
8330                       retries:
8331                         description: |-
8332                           Retries is the number of retries that should be attempted on failures before
8333                           bailing. Remediation, using an uninstall, is performed between each attempt.
8334                           Defaults to '0', a negative integer equals to unlimited retries.
8335                         type: integer
8336                     type: object
8337                   replace:
8338                     description: |-
8339                       Replace tells the Helm install action to re-use the 'ReleaseName', but only
8340                       if that name is a deleted release which remains in the history.
8341                     type: boolean
8342                   skipCRDs:
8343                     description: |-
8344                       SkipCRDs tells the Helm install action to not install any CRDs. By default,
8345                       CRDs are installed if not already present.
8346
8347                       Deprecated use CRD policy (`crds`) attribute with value `Skip` instead.
8348                     type: boolean
8349                   timeout:
8350                     description: |-
8351                       Timeout is the time to wait for any individual Kubernetes operation (like
8352                       Jobs for hooks) during the performance of a Helm install action. Defaults to
8353                       'HelmReleaseSpec.Timeout'.
8354                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
8355                     type: string
8356                 type: object
8357               interval:
8358                 description: |-
8359                   Interval at which to reconcile the Helm release.
8360                   This interval is approximate and may be subject to jitter to ensure
8361                   efficient use of resources.
8362                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
8363                 type: string
8364               kubeConfig:
8365                 description: |-
8366                   KubeConfig for reconciling the HelmRelease on a remote cluster.
8367                   When used in combination with HelmReleaseSpec.ServiceAccountName,
8368                   forces the controller to act on behalf of that Service Account at the
8369                   target cluster.
8370                   If the --default-service-account flag is set, its value will be used as
8371                   a controller level fallback for when HelmReleaseSpec.ServiceAccountName
8372                   is empty.
8373                 properties:
8374                   secretRef:
8375                     description: |-
8376                       SecretRef holds the name of a secret that contains a key with
8377                       the kubeconfig file as the value. If no key is set, the key will default
8378                       to 'value'.
8379                       It is recommended that the kubeconfig is self-contained, and the secret
8380                       is regularly updated if credentials such as a cloud-access-token expire.
8381                       Cloud specific `cmd-path` auth helpers will not function without adding
8382                       binaries and credentials to the Pod that is responsible for reconciling
8383                       Kubernetes resources.
8384                     properties:
8385                       key:
8386                         description: Key in the Secret, when not specified an implementation-specific
8387                           default key is used.
8388                         type: string
8389                       name:
8390                         description: Name of the Secret.
8391                         type: string
8392                     required:
8393                     - name
8394                     type: object
8395                 required:
8396                 - secretRef
8397                 type: object
8398               maxHistory:
8399                 description: |-
8400                   MaxHistory is the number of revisions saved by Helm for this HelmRelease.
8401                   Use '0' for an unlimited number of revisions; defaults to '10'.
8402                 type: integer
8403               persistentClient:
8404                 description: |-
8405                   PersistentClient tells the controller to use a persistent Kubernetes
8406                   client for this release. When enabled, the client will be reused for the
8407                   duration of the reconciliation, instead of being created and destroyed
8408                   for each (step of a) Helm action.
8409
8410                   This can improve performance, but may cause issues with some Helm charts
8411                   that for example do create Custom Resource Definitions during installation
8412                   outside Helm's CRD lifecycle hooks, which are then not observed to be
8413                   available by e.g. post-install hooks.
8414
8415                   If not set, it defaults to true.
8416                 type: boolean
8417               postRenderers:
8418                 description: |-
8419                   PostRenderers holds an array of Helm PostRenderers, which will be applied in order
8420                   of their definition.
8421                 items:
8422                   description: PostRenderer contains a Helm PostRenderer specification.
8423                   properties:
8424                     kustomize:
8425                       description: Kustomization to apply as PostRenderer.
8426                       properties:
8427                         images:
8428                           description: |-
8429                             Images is a list of (image name, new name, new tag or digest)
8430                             for changing image names, tags or digests. This can also be achieved with a
8431                             patch, but this operator is simpler to specify.
8432                           items:
8433                             description: Image contains an image name, a new name,
8434                               a new tag or digest, which will replace the original
8435                               name and tag.
8436                             properties:
8437                               digest:
8438                                 description: |-
8439                                   Digest is the value used to replace the original image tag.
8440                                   If digest is present NewTag value is ignored.
8441                                 type: string
8442                               name:
8443                                 description: Name is a tag-less image name.
8444                                 type: string
8445                               newName:
8446                                 description: NewName is the value used to replace
8447                                   the original name.
8448                                 type: string
8449                               newTag:
8450                                 description: NewTag is the value used to replace the
8451                                   original tag.
8452                                 type: string
8453                             required:
8454                             - name
8455                             type: object
8456                           type: array
8457                         patches:
8458                           description: |-
8459                             Strategic merge and JSON patches, defined as inline YAML objects,
8460                             capable of targeting objects based on kind, label and annotation selectors.
8461                           items:
8462                             description: |-
8463                               Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should
8464                               be applied to.
8465                             properties:
8466                               patch:
8467                                 description: |-
8468                                   Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with
8469                                   an array of operation objects.
8470                                 type: string
8471                               target:
8472                                 description: Target points to the resources that the
8473                                   patch document should be applied to.
8474                                 properties:
8475                                   annotationSelector:
8476                                     description: |-
8477                                       AnnotationSelector is a string that follows the label selection expression
8478                                       https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
8479                                       It matches with the resource annotations.
8480                                     type: string
8481                                   group:
8482                                     description: |-
8483                                       Group is the API group to select resources from.
8484                                       Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources.
8485                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
8486                                     type: string
8487                                   kind:
8488                                     description: |-
8489                                       Kind of the API Group to select resources from.
8490                                       Together with Group and Version it is capable of unambiguously
8491                                       identifying and/or selecting resources.
8492                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
8493                                     type: string
8494                                   labelSelector:
8495                                     description: |-
8496                                       LabelSelector is a string that follows the label selection expression
8497                                       https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
8498                                       It matches with the resource labels.
8499                                     type: string
8500                                   name:
8501                                     description: Name to match resources with.
8502                                     type: string
8503                                   namespace:
8504                                     description: Namespace to select resources from.
8505                                     type: string
8506                                   version:
8507                                     description: |-
8508                                       Version of the API Group to select resources from.
8509                                       Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources.
8510                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
8511                                     type: string
8512                                 type: object
8513                             required:
8514                             - patch
8515                             type: object
8516                           type: array
8517                         patchesJson6902:
8518                           description: JSON 6902 patches, defined as inline YAML objects.
8519                           items:
8520                             description: JSON6902Patch contains a JSON6902 patch and
8521                               the target the patch should be applied to.
8522                             properties:
8523                               patch:
8524                                 description: Patch contains the JSON6902 patch document
8525                                   with an array of operation objects.
8526                                 items:
8527                                   description: |-
8528                                     JSON6902 is a JSON6902 operation object.
8529                                     https://datatracker.ietf.org/doc/html/rfc6902#section-4
8530                                   properties:
8531                                     from:
8532                                       description: |-
8533                                         From contains a JSON-pointer value that references a location within the target document where the operation is
8534                                         performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations.
8535                                       type: string
8536                                     op:
8537                                       description: |-
8538                                         Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or
8539                                         "test".
8540                                         https://datatracker.ietf.org/doc/html/rfc6902#section-4
8541                                       enum:
8542                                       - test
8543                                       - remove
8544                                       - add
8545                                       - replace
8546                                       - move
8547                                       - copy
8548                                       type: string
8549                                     path:
8550                                       description: |-
8551                                         Path contains the JSON-pointer value that references a location within the target document where the operation
8552                                         is performed. The meaning of the value depends on the value of Op.
8553                                       type: string
8554                                     value:
8555                                       description: |-
8556                                         Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into
8557                                         account by all operations.
8558                                       x-kubernetes-preserve-unknown-fields: true
8559                                   required:
8560                                   - op
8561                                   - path
8562                                   type: object
8563                                 type: array
8564                               target:
8565                                 description: Target points to the resources that the
8566                                   patch document should be applied to.
8567                                 properties:
8568                                   annotationSelector:
8569                                     description: |-
8570                                       AnnotationSelector is a string that follows the label selection expression
8571                                       https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
8572                                       It matches with the resource annotations.
8573                                     type: string
8574                                   group:
8575                                     description: |-
8576                                       Group is the API group to select resources from.
8577                                       Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources.
8578                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
8579                                     type: string
8580                                   kind:
8581                                     description: |-
8582                                       Kind of the API Group to select resources from.
8583                                       Together with Group and Version it is capable of unambiguously
8584                                       identifying and/or selecting resources.
8585                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
8586                                     type: string
8587                                   labelSelector:
8588                                     description: |-
8589                                       LabelSelector is a string that follows the label selection expression
8590                                       https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
8591                                       It matches with the resource labels.
8592                                     type: string
8593                                   name:
8594                                     description: Name to match resources with.
8595                                     type: string
8596                                   namespace:
8597                                     description: Namespace to select resources from.
8598                                     type: string
8599                                   version:
8600                                     description: |-
8601                                       Version of the API Group to select resources from.
8602                                       Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources.
8603                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
8604                                     type: string
8605                                 type: object
8606                             required:
8607                             - patch
8608                             - target
8609                             type: object
8610                           type: array
8611                         patchesStrategicMerge:
8612                           description: Strategic merge patches, defined as inline
8613                             YAML objects.
8614                           items:
8615                             x-kubernetes-preserve-unknown-fields: true
8616                           type: array
8617                       type: object
8618                   type: object
8619                 type: array
8620               releaseName:
8621                 description: |-
8622                   ReleaseName used for the Helm release. Defaults to a composition of
8623                   '[TargetNamespace-]Name'.
8624                 maxLength: 53
8625                 minLength: 1
8626                 type: string
8627               rollback:
8628                 description: Rollback holds the configuration for Helm rollback actions
8629                   for this HelmRelease.
8630                 properties:
8631                   cleanupOnFail:
8632                     description: |-
8633                       CleanupOnFail allows deletion of new resources created during the Helm
8634                       rollback action when it fails.
8635                     type: boolean
8636                   disableHooks:
8637                     description: DisableHooks prevents hooks from running during the
8638                       Helm rollback action.
8639                     type: boolean
8640                   disableWait:
8641                     description: |-
8642                       DisableWait disables the waiting for resources to be ready after a Helm
8643                       rollback has been performed.
8644                     type: boolean
8645                   disableWaitForJobs:
8646                     description: |-
8647                       DisableWaitForJobs disables waiting for jobs to complete after a Helm
8648                       rollback has been performed.
8649                     type: boolean
8650                   force:
8651                     description: Force forces resource updates through a replacement
8652                       strategy.
8653                     type: boolean
8654                   recreate:
8655                     description: Recreate performs pod restarts for the resource if
8656                       applicable.
8657                     type: boolean
8658                   timeout:
8659                     description: |-
8660                       Timeout is the time to wait for any individual Kubernetes operation (like
8661                       Jobs for hooks) during the performance of a Helm rollback action. Defaults to
8662                       'HelmReleaseSpec.Timeout'.
8663                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
8664                     type: string
8665                 type: object
8666               serviceAccountName:
8667                 description: |-
8668                   The name of the Kubernetes service account to impersonate
8669                   when reconciling this HelmRelease.
8670                 type: string
8671               storageNamespace:
8672                 description: |-
8673                   StorageNamespace used for the Helm storage.
8674                   Defaults to the namespace of the HelmRelease.
8675                 maxLength: 63
8676                 minLength: 1
8677                 type: string
8678               suspend:
8679                 description: |-
8680                   Suspend tells the controller to suspend reconciliation for this HelmRelease,
8681                   it does not apply to already started reconciliations. Defaults to false.
8682                 type: boolean
8683               targetNamespace:
8684                 description: |-
8685                   TargetNamespace to target when performing operations for the HelmRelease.
8686                   Defaults to the namespace of the HelmRelease.
8687                 maxLength: 63
8688                 minLength: 1
8689                 type: string
8690               test:
8691                 description: Test holds the configuration for Helm test actions for
8692                   this HelmRelease.
8693                 properties:
8694                   enable:
8695                     description: |-
8696                       Enable enables Helm test actions for this HelmRelease after an Helm install
8697                       or upgrade action has been performed.
8698                     type: boolean
8699                   ignoreFailures:
8700                     description: |-
8701                       IgnoreFailures tells the controller to skip remediation when the Helm tests
8702                       are run but fail. Can be overwritten for tests run after install or upgrade
8703                       actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'.
8704                     type: boolean
8705                   timeout:
8706                     description: |-
8707                       Timeout is the time to wait for any individual Kubernetes operation during
8708                       the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'.
8709                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
8710                     type: string
8711                 type: object
8712               timeout:
8713                 description: |-
8714                   Timeout is the time to wait for any individual Kubernetes operation (like Jobs
8715                   for hooks) during the performance of a Helm action. Defaults to '5m0s'.
8716                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
8717                 type: string
8718               uninstall:
8719                 description: Uninstall holds the configuration for Helm uninstall
8720                   actions for this HelmRelease.
8721                 properties:
8722                   deletionPropagation:
8723                     default: background
8724                     description: |-
8725                       DeletionPropagation specifies the deletion propagation policy when
8726                       a Helm uninstall is performed.
8727                     enum:
8728                     - background
8729                     - foreground
8730                     - orphan
8731                     type: string
8732                   disableHooks:
8733                     description: DisableHooks prevents hooks from running during the
8734                       Helm rollback action.
8735                     type: boolean
8736                   disableWait:
8737                     description: |-
8738                       DisableWait disables waiting for all the resources to be deleted after
8739                       a Helm uninstall is performed.
8740                     type: boolean
8741                   keepHistory:
8742                     description: |-
8743                       KeepHistory tells Helm to remove all associated resources and mark the
8744                       release as deleted, but retain the release history.
8745                     type: boolean
8746                   timeout:
8747                     description: |-
8748                       Timeout is the time to wait for any individual Kubernetes operation (like
8749                       Jobs for hooks) during the performance of a Helm uninstall action. Defaults
8750                       to 'HelmReleaseSpec.Timeout'.
8751                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
8752                     type: string
8753                 type: object
8754               upgrade:
8755                 description: Upgrade holds the configuration for Helm upgrade actions
8756                   for this HelmRelease.
8757                 properties:
8758                   cleanupOnFail:
8759                     description: |-
8760                       CleanupOnFail allows deletion of new resources created during the Helm
8761                       upgrade action when it fails.
8762                     type: boolean
8763                   crds:
8764                     description: |-
8765                       CRDs upgrade CRDs from the Helm Chart's crds directory according
8766                       to the CRD upgrade policy provided here. Valid values are `Skip`,
8767                       `Create` or `CreateReplace`. Default is `Skip` and if omitted
8768                       CRDs are neither installed nor upgraded.
8769
8770                       Skip: do neither install nor replace (update) any CRDs.
8771
8772                       Create: new CRDs are created, existing CRDs are neither updated nor deleted.
8773
8774                       CreateReplace: new CRDs are created, existing CRDs are updated (replaced)
8775                       but not deleted.
8776
8777                       By default, CRDs are not applied during Helm upgrade action. With this
8778                       option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm.
8779                       https://helm.sh/docs/chart_best_practices/custom_resource_definitions.
8780                     enum:
8781                     - Skip
8782                     - Create
8783                     - CreateReplace
8784                     type: string
8785                   disableHooks:
8786                     description: DisableHooks prevents hooks from running during the
8787                       Helm upgrade action.
8788                     type: boolean
8789                   disableOpenAPIValidation:
8790                     description: |-
8791                       DisableOpenAPIValidation prevents the Helm upgrade action from validating
8792                       rendered templates against the Kubernetes OpenAPI Schema.
8793                     type: boolean
8794                   disableWait:
8795                     description: |-
8796                       DisableWait disables the waiting for resources to be ready after a Helm
8797                       upgrade has been performed.
8798                     type: boolean
8799                   disableWaitForJobs:
8800                     description: |-
8801                       DisableWaitForJobs disables waiting for jobs to complete after a Helm
8802                       upgrade has been performed.
8803                     type: boolean
8804                   force:
8805                     description: Force forces resource updates through a replacement
8806                       strategy.
8807                     type: boolean
8808                   preserveValues:
8809                     description: |-
8810                       PreserveValues will make Helm reuse the last release's values and merge in
8811                       overrides from 'Values'. Setting this flag makes the HelmRelease
8812                       non-declarative.
8813                     type: boolean
8814                   remediation:
8815                     description: |-
8816                       Remediation holds the remediation configuration for when the Helm upgrade
8817                       action for the HelmRelease fails. The default is to not perform any action.
8818                     properties:
8819                       ignoreTestFailures:
8820                         description: |-
8821                           IgnoreTestFailures tells the controller to skip remediation when the Helm
8822                           tests are run after an upgrade action but fail.
8823                           Defaults to 'Test.IgnoreFailures'.
8824                         type: boolean
8825                       remediateLastFailure:
8826                         description: |-
8827                           RemediateLastFailure tells the controller to remediate the last failure, when
8828                           no retries remain. Defaults to 'false' unless 'Retries' is greater than 0.
8829                         type: boolean
8830                       retries:
8831                         description: |-
8832                           Retries is the number of retries that should be attempted on failures before
8833                           bailing. Remediation, using 'Strategy', is performed between each attempt.
8834                           Defaults to '0', a negative integer equals to unlimited retries.
8835                         type: integer
8836                       strategy:
8837                         description: Strategy to use for failure remediation. Defaults
8838                           to 'rollback'.
8839                         enum:
8840                         - rollback
8841                         - uninstall
8842                         type: string
8843                     type: object
8844                   timeout:
8845                     description: |-
8846                       Timeout is the time to wait for any individual Kubernetes operation (like
8847                       Jobs for hooks) during the performance of a Helm upgrade action. Defaults to
8848                       'HelmReleaseSpec.Timeout'.
8849                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
8850                     type: string
8851                 type: object
8852               values:
8853                 description: Values holds the values for this Helm release.
8854                 x-kubernetes-preserve-unknown-fields: true
8855               valuesFrom:
8856                 description: |-
8857                   ValuesFrom holds references to resources containing Helm values for this HelmRelease,
8858                   and information about how they should be merged.
8859                 items:
8860                   description: |-
8861                     ValuesReference contains a reference to a resource containing Helm values,
8862                     and optionally the key they can be found at.
8863                   properties:
8864                     kind:
8865                       description: Kind of the values referent, valid values are ('Secret',
8866                         'ConfigMap').
8867                       enum:
8868                       - Secret
8869                       - ConfigMap
8870                       type: string
8871                     name:
8872                       description: |-
8873                         Name of the values referent. Should reside in the same namespace as the
8874                         referring resource.
8875                       maxLength: 253
8876                       minLength: 1
8877                       type: string
8878                     optional:
8879                       description: |-
8880                         Optional marks this ValuesReference as optional. When set, a not found error
8881                         for the values reference is ignored, but any ValuesKey, TargetPath or
8882                         transient error will still result in a reconciliation failure.
8883                       type: boolean
8884                     targetPath:
8885                       description: |-
8886                         TargetPath is the YAML dot notation path the value should be merged at. When
8887                         set, the ValuesKey is expected to be a single flat value. Defaults to 'None',
8888                         which results in the values getting merged at the root.
8889                       maxLength: 250
8890                       pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$
8891                       type: string
8892                     valuesKey:
8893                       description: |-
8894                         ValuesKey is the data key where the values.yaml or a specific value can be
8895                         found at. Defaults to 'values.yaml'.
8896                         When set, must be a valid Data Key, consisting of alphanumeric characters,
8897                         '-', '_' or '.'.
8898                       maxLength: 253
8899                       pattern: ^[\-._a-zA-Z0-9]+$
8900                       type: string
8901                   required:
8902                   - kind
8903                   - name
8904                   type: object
8905                 type: array
8906             required:
8907             - chart
8908             - interval
8909             type: object
8910           status:
8911             default:
8912               observedGeneration: -1
8913             description: HelmReleaseStatus defines the observed state of a HelmRelease.
8914             properties:
8915               conditions:
8916                 description: Conditions holds the conditions for the HelmRelease.
8917                 items:
8918                   description: Condition contains details for one aspect of the current
8919                     state of this API Resource.
8920                   properties:
8921                     lastTransitionTime:
8922                       description: |-
8923                         lastTransitionTime is the last time the condition transitioned from one status to another.
8924                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
8925                       format: date-time
8926                       type: string
8927                     message:
8928                       description: |-
8929                         message is a human readable message indicating details about the transition.
8930                         This may be an empty string.
8931                       maxLength: 32768
8932                       type: string
8933                     observedGeneration:
8934                       description: |-
8935                         observedGeneration represents the .metadata.generation that the condition was set based upon.
8936                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
8937                         with respect to the current state of the instance.
8938                       format: int64
8939                       minimum: 0
8940                       type: integer
8941                     reason:
8942                       description: |-
8943                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
8944                         Producers of specific condition types may define expected values and meanings for this field,
8945                         and whether the values are considered a guaranteed API.
8946                         The value should be a CamelCase string.
8947                         This field may not be empty.
8948                       maxLength: 1024
8949                       minLength: 1
8950                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
8951                       type: string
8952                     status:
8953                       description: status of the condition, one of True, False, Unknown.
8954                       enum:
8955                       - "True"
8956                       - "False"
8957                       - Unknown
8958                       type: string
8959                     type:
8960                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
8961                       maxLength: 316
8962                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
8963                       type: string
8964                   required:
8965                   - lastTransitionTime
8966                   - message
8967                   - reason
8968                   - status
8969                   - type
8970                   type: object
8971                 type: array
8972               failures:
8973                 description: |-
8974                   Failures is the reconciliation failure count against the latest desired
8975                   state. It is reset after a successful reconciliation.
8976                 format: int64
8977                 type: integer
8978               helmChart:
8979                 description: |-
8980                   HelmChart is the namespaced name of the HelmChart resource created by
8981                   the controller for the HelmRelease.
8982                 type: string
8983               history:
8984                 description: |-
8985                   History holds the history of Helm releases performed for this HelmRelease
8986                   up to the last successfully completed release.
8987
8988                   Note: this field is provisional to the v2beta2 API, and not actively used
8989                   by v2beta1 HelmReleases.
8990                 items:
8991                   description: |-
8992                     Snapshot captures a point-in-time copy of the status information for a Helm release,
8993                     as managed by the controller.
8994                   properties:
8995                     apiVersion:
8996                       description: |-
8997                         APIVersion is the API version of the Snapshot.
8998                         Provisional: when the calculation method of the Digest field is changed,
8999                         this field will be used to distinguish between the old and new methods.
9000                       type: string
9001                     appVersion:
9002                       description: AppVersion is the chart app version of the release
9003                         object in storage.
9004                       type: string
9005                     chartName:
9006                       description: ChartName is the chart name of the release object
9007                         in storage.
9008                       type: string
9009                     chartVersion:
9010                       description: |-
9011                         ChartVersion is the chart version of the release object in
9012                         storage.
9013                       type: string
9014                     configDigest:
9015                       description: |-
9016                         ConfigDigest is the checksum of the config (better known as
9017                         "values") of the release object in storage.
9018                         It has the format of `<algo>:<checksum>`.
9019                       type: string
9020                     deleted:
9021                       description: Deleted is when the release was deleted.
9022                       format: date-time
9023                       type: string
9024                     digest:
9025                       description: |-
9026                         Digest is the checksum of the release object in storage.
9027                         It has the format of `<algo>:<checksum>`.
9028                       type: string
9029                     firstDeployed:
9030                       description: FirstDeployed is when the release was first deployed.
9031                       format: date-time
9032                       type: string
9033                     lastDeployed:
9034                       description: LastDeployed is when the release was last deployed.
9035                       format: date-time
9036                       type: string
9037                     name:
9038                       description: Name is the name of the release.
9039                       type: string
9040                     namespace:
9041                       description: Namespace is the namespace the release is deployed
9042                         to.
9043                       type: string
9044                     ociDigest:
9045                       description: OCIDigest is the digest of the OCI artifact associated
9046                         with the release.
9047                       type: string
9048                     status:
9049                       description: Status is the current state of the release.
9050                       type: string
9051                     testHooks:
9052                       additionalProperties:
9053                         description: |-
9054                           TestHookStatus holds the status information for a test hook as observed
9055                           to be run by the controller.
9056                         properties:
9057                           lastCompleted:
9058                             description: LastCompleted is the time the test hook last
9059                               completed.
9060                             format: date-time
9061                             type: string
9062                           lastStarted:
9063                             description: LastStarted is the time the test hook was
9064                               last started.
9065                             format: date-time
9066                             type: string
9067                           phase:
9068                             description: Phase the test hook was observed to be in.
9069                             type: string
9070                         type: object
9071                       description: |-
9072                         TestHooks is the list of test hooks for the release as observed to be
9073                         run by the controller.
9074                       type: object
9075                     version:
9076                       description: Version is the version of the release object in
9077                         storage.
9078                       type: integer
9079                   required:
9080                   - chartName
9081                   - chartVersion
9082                   - configDigest
9083                   - digest
9084                   - firstDeployed
9085                   - lastDeployed
9086                   - name
9087                   - namespace
9088                   - status
9089                   - version
9090                   type: object
9091                 type: array
9092               installFailures:
9093                 description: |-
9094                   InstallFailures is the install failure count against the latest desired
9095                   state. It is reset after a successful reconciliation.
9096                 format: int64
9097                 type: integer
9098               lastAppliedRevision:
9099                 description: LastAppliedRevision is the revision of the last successfully
9100                   applied source.
9101                 type: string
9102               lastAttemptedConfigDigest:
9103                 description: |-
9104                   LastAttemptedConfigDigest is the digest for the config (better known as
9105                   "values") of the last reconciliation attempt.
9106
9107                   Note: this field is provisional to the v2beta2 API, and not actively used
9108                   by v2beta1 HelmReleases.
9109                 type: string
9110               lastAttemptedGeneration:
9111                 description: |-
9112                   LastAttemptedGeneration is the last generation the controller attempted
9113                   to reconcile.
9114
9115                   Note: this field is provisional to the v2beta2 API, and not actively used
9116                   by v2beta1 HelmReleases.
9117                 format: int64
9118                 type: integer
9119               lastAttemptedReleaseAction:
9120                 description: |-
9121                   LastAttemptedReleaseAction is the last release action performed for this
9122                   HelmRelease. It is used to determine the active remediation strategy.
9123
9124                   Note: this field is provisional to the v2beta2 API, and not actively used
9125                   by v2beta1 HelmReleases.
9126                 type: string
9127               lastAttemptedRevision:
9128                 description: LastAttemptedRevision is the revision of the last reconciliation
9129                   attempt.
9130                 type: string
9131               lastAttemptedValuesChecksum:
9132                 description: |-
9133                   LastAttemptedValuesChecksum is the SHA1 checksum of the values of the last
9134                   reconciliation attempt.
9135                 type: string
9136               lastHandledForceAt:
9137                 description: |-
9138                   LastHandledForceAt holds the value of the most recent force request
9139                   value, so a change of the annotation value can be detected.
9140
9141                   Note: this field is provisional to the v2beta2 API, and not actively used
9142                   by v2beta1 HelmReleases.
9143                 type: string
9144               lastHandledReconcileAt:
9145                 description: |-
9146                   LastHandledReconcileAt holds the value of the most recent
9147                   reconcile request value, so a change of the annotation value
9148                   can be detected.
9149                 type: string
9150               lastHandledResetAt:
9151                 description: |-
9152                   LastHandledResetAt holds the value of the most recent reset request
9153                   value, so a change of the annotation value can be detected.
9154
9155                   Note: this field is provisional to the v2beta2 API, and not actively used
9156                   by v2beta1 HelmReleases.
9157                 type: string
9158               lastReleaseRevision:
9159                 description: LastReleaseRevision is the revision of the last successful
9160                   Helm release.
9161                 type: integer
9162               observedGeneration:
9163                 description: ObservedGeneration is the last observed generation.
9164                 format: int64
9165                 type: integer
9166               observedPostRenderersDigest:
9167                 description: |-
9168                   ObservedPostRenderersDigest is the digest for the post-renderers of
9169                   the last successful reconciliation attempt.
9170                 type: string
9171               storageNamespace:
9172                 description: |-
9173                   StorageNamespace is the namespace of the Helm release storage for the
9174                   current release.
9175
9176                   Note: this field is provisional to the v2beta2 API, and not actively used
9177                   by v2beta1 HelmReleases.
9178                 type: string
9179               upgradeFailures:
9180                 description: |-
9181                   UpgradeFailures is the upgrade failure count against the latest desired
9182                   state. It is reset after a successful reconciliation.
9183                 format: int64
9184                 type: integer
9185             type: object
9186         type: object
9187     served: true
9188     storage: false
9189     subresources:
9190       status: {}
9191   - additionalPrinterColumns:
9192     - jsonPath: .metadata.creationTimestamp
9193       name: Age
9194       type: date
9195     - jsonPath: .status.conditions[?(@.type=="Ready")].status
9196       name: Ready
9197       type: string
9198     - jsonPath: .status.conditions[?(@.type=="Ready")].message
9199       name: Status
9200       type: string
9201     deprecated: true
9202     deprecationWarning: v2beta2 HelmRelease is deprecated, upgrade to v2
9203     name: v2beta2
9204     schema:
9205       openAPIV3Schema:
9206         description: HelmRelease is the Schema for the helmreleases API
9207         properties:
9208           apiVersion:
9209             description: |-
9210               APIVersion defines the versioned schema of this representation of an object.
9211               Servers should convert recognized schemas to the latest internal value, and
9212               may reject unrecognized values.
9213               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
9214             type: string
9215           kind:
9216             description: |-
9217               Kind is a string value representing the REST resource this object represents.
9218               Servers may infer this from the endpoint the client submits requests to.
9219               Cannot be updated.
9220               In CamelCase.
9221               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
9222             type: string
9223           metadata:
9224             type: object
9225           spec:
9226             description: HelmReleaseSpec defines the desired state of a Helm release.
9227             properties:
9228               chart:
9229                 description: |-
9230                   Chart defines the template of the v1beta2.HelmChart that should be created
9231                   for this HelmRelease.
9232                 properties:
9233                   metadata:
9234                     description: ObjectMeta holds the template for metadata like labels
9235                       and annotations.
9236                     properties:
9237                       annotations:
9238                         additionalProperties:
9239                           type: string
9240                         description: |-
9241                           Annotations is an unstructured key value map stored with a resource that may be
9242                           set by external tools to store and retrieve arbitrary metadata. They are not
9243                           queryable and should be preserved when modifying objects.
9244                           More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
9245                         type: object
9246                       labels:
9247                         additionalProperties:
9248                           type: string
9249                         description: |-
9250                           Map of string keys and values that can be used to organize and categorize
9251                           (scope and select) objects.
9252                           More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
9253                         type: object
9254                     type: object
9255                   spec:
9256                     description: Spec holds the template for the v1beta2.HelmChartSpec
9257                       for this HelmRelease.
9258                     properties:
9259                       chart:
9260                         description: The name or path the Helm chart is available
9261                           at in the SourceRef.
9262                         maxLength: 2048
9263                         minLength: 1
9264                         type: string
9265                       ignoreMissingValuesFiles:
9266                         description: IgnoreMissingValuesFiles controls whether to
9267                           silently ignore missing values files rather than failing.
9268                         type: boolean
9269                       interval:
9270                         description: |-
9271                           Interval at which to check the v1.Source for updates. Defaults to
9272                           'HelmReleaseSpec.Interval'.
9273                         pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
9274                         type: string
9275                       reconcileStrategy:
9276                         default: ChartVersion
9277                         description: |-
9278                           Determines what enables the creation of a new artifact. Valid values are
9279                           ('ChartVersion', 'Revision').
9280                           See the documentation of the values for an explanation on their behavior.
9281                           Defaults to ChartVersion when omitted.
9282                         enum:
9283                         - ChartVersion
9284                         - Revision
9285                         type: string
9286                       sourceRef:
9287                         description: The name and namespace of the v1.Source the chart
9288                           is available at.
9289                         properties:
9290                           apiVersion:
9291                             description: APIVersion of the referent.
9292                             type: string
9293                           kind:
9294                             description: Kind of the referent.
9295                             enum:
9296                             - HelmRepository
9297                             - GitRepository
9298                             - Bucket
9299                             type: string
9300                           name:
9301                             description: Name of the referent.
9302                             maxLength: 253
9303                             minLength: 1
9304                             type: string
9305                           namespace:
9306                             description: Namespace of the referent.
9307                             maxLength: 63
9308                             minLength: 1
9309                             type: string
9310                         required:
9311                         - kind
9312                         - name
9313                         type: object
9314                       valuesFile:
9315                         description: |-
9316                           Alternative values file to use as the default chart values, expected to
9317                           be a relative path in the SourceRef. Deprecated in favor of ValuesFiles,
9318                           for backwards compatibility the file defined here is merged before the
9319                           ValuesFiles items. Ignored when omitted.
9320                         type: string
9321                       valuesFiles:
9322                         description: |-
9323                           Alternative list of values files to use as the chart values (values.yaml
9324                           is not included by default), expected to be a relative path in the SourceRef.
9325                           Values files are merged in the order of this list with the last file overriding
9326                           the first. Ignored when omitted.
9327                         items:
9328                           type: string
9329                         type: array
9330                       verify:
9331                         description: |-
9332                           Verify contains the secret name containing the trusted public keys
9333                           used to verify the signature and specifies which provider to use to check
9334                           whether OCI image is authentic.
9335                           This field is only supported for OCI sources.
9336                           Chart dependencies, which are not bundled in the umbrella chart artifact,
9337                           are not verified.
9338                         properties:
9339                           provider:
9340                             default: cosign
9341                             description: Provider specifies the technology used to
9342                               sign the OCI Helm chart.
9343                             enum:
9344                             - cosign
9345                             - notation
9346                             type: string
9347                           secretRef:
9348                             description: |-
9349                               SecretRef specifies the Kubernetes Secret containing the
9350                               trusted public keys.
9351                             properties:
9352                               name:
9353                                 description: Name of the referent.
9354                                 type: string
9355                             required:
9356                             - name
9357                             type: object
9358                         required:
9359                         - provider
9360                         type: object
9361                       version:
9362                         default: '*'
9363                         description: |-
9364                           Version semver expression, ignored for charts from v1beta2.GitRepository and
9365                           v1beta2.Bucket sources. Defaults to latest when omitted.
9366                         type: string
9367                     required:
9368                     - chart
9369                     - sourceRef
9370                     type: object
9371                 required:
9372                 - spec
9373                 type: object
9374               chartRef:
9375                 description: |-
9376                   ChartRef holds a reference to a source controller resource containing the
9377                   Helm chart artifact.
9378
9379                   Note: this field is provisional to the v2 API, and not actively used
9380                   by v2beta2 HelmReleases.
9381                 properties:
9382                   apiVersion:
9383                     description: APIVersion of the referent.
9384                     type: string
9385                   kind:
9386                     description: Kind of the referent.
9387                     enum:
9388                     - OCIRepository
9389                     - HelmChart
9390                     type: string
9391                   name:
9392                     description: Name of the referent.
9393                     maxLength: 253
9394                     minLength: 1
9395                     type: string
9396                   namespace:
9397                     description: |-
9398                       Namespace of the referent, defaults to the namespace of the Kubernetes
9399                       resource object that contains the reference.
9400                     maxLength: 63
9401                     minLength: 1
9402                     type: string
9403                 required:
9404                 - kind
9405                 - name
9406                 type: object
9407               dependsOn:
9408                 description: |-
9409                   DependsOn may contain a meta.NamespacedObjectReference slice with
9410                   references to HelmRelease resources that must be ready before this HelmRelease
9411                   can be reconciled.
9412                 items:
9413                   description: |-
9414                     NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any
9415                     namespace.
9416                   properties:
9417                     name:
9418                       description: Name of the referent.
9419                       type: string
9420                     namespace:
9421                       description: Namespace of the referent, when not specified it
9422                         acts as LocalObjectReference.
9423                       type: string
9424                   required:
9425                   - name
9426                   type: object
9427                 type: array
9428               driftDetection:
9429                 description: |-
9430                   DriftDetection holds the configuration for detecting and handling
9431                   differences between the manifest in the Helm storage and the resources
9432                   currently existing in the cluster.
9433                 properties:
9434                   ignore:
9435                     description: |-
9436                       Ignore contains a list of rules for specifying which changes to ignore
9437                       during diffing.
9438                     items:
9439                       description: |-
9440                         IgnoreRule defines a rule to selectively disregard specific changes during
9441                         the drift detection process.
9442                       properties:
9443                         paths:
9444                           description: |-
9445                             Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from
9446                             consideration in a Kubernetes object.
9447                           items:
9448                             type: string
9449                           type: array
9450                         target:
9451                           description: |-
9452                             Target is a selector for specifying Kubernetes objects to which this
9453                             rule applies.
9454                             If Target is not set, the Paths will be ignored for all Kubernetes
9455                             objects within the manifest of the Helm release.
9456                           properties:
9457                             annotationSelector:
9458                               description: |-
9459                                 AnnotationSelector is a string that follows the label selection expression
9460                                 https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
9461                                 It matches with the resource annotations.
9462                               type: string
9463                             group:
9464                               description: |-
9465                                 Group is the API group to select resources from.
9466                                 Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources.
9467                                 https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
9468                               type: string
9469                             kind:
9470                               description: |-
9471                                 Kind of the API Group to select resources from.
9472                                 Together with Group and Version it is capable of unambiguously
9473                                 identifying and/or selecting resources.
9474                                 https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
9475                               type: string
9476                             labelSelector:
9477                               description: |-
9478                                 LabelSelector is a string that follows the label selection expression
9479                                 https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
9480                                 It matches with the resource labels.
9481                               type: string
9482                             name:
9483                               description: Name to match resources with.
9484                               type: string
9485                             namespace:
9486                               description: Namespace to select resources from.
9487                               type: string
9488                             version:
9489                               description: |-
9490                                 Version of the API Group to select resources from.
9491                                 Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources.
9492                                 https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
9493                               type: string
9494                           type: object
9495                       required:
9496                       - paths
9497                       type: object
9498                     type: array
9499                   mode:
9500                     description: |-
9501                       Mode defines how differences should be handled between the Helm manifest
9502                       and the manifest currently applied to the cluster.
9503                       If not explicitly set, it defaults to DiffModeDisabled.
9504                     enum:
9505                     - enabled
9506                     - warn
9507                     - disabled
9508                     type: string
9509                 type: object
9510               install:
9511                 description: Install holds the configuration for Helm install actions
9512                   for this HelmRelease.
9513                 properties:
9514                   crds:
9515                     description: |-
9516                       CRDs upgrade CRDs from the Helm Chart's crds directory according
9517                       to the CRD upgrade policy provided here. Valid values are `Skip`,
9518                       `Create` or `CreateReplace`. Default is `Create` and if omitted
9519                       CRDs are installed but not updated.
9520
9521                       Skip: do neither install nor replace (update) any CRDs.
9522
9523                       Create: new CRDs are created, existing CRDs are neither updated nor deleted.
9524
9525                       CreateReplace: new CRDs are created, existing CRDs are updated (replaced)
9526                       but not deleted.
9527
9528                       By default, CRDs are applied (installed) during Helm install action.
9529                       With this option users can opt in to CRD replace existing CRDs on Helm
9530                       install actions, which is not (yet) natively supported by Helm.
9531                       https://helm.sh/docs/chart_best_practices/custom_resource_definitions.
9532                     enum:
9533                     - Skip
9534                     - Create
9535                     - CreateReplace
9536                     type: string
9537                   createNamespace:
9538                     description: |-
9539                       CreateNamespace tells the Helm install action to create the
9540                       HelmReleaseSpec.TargetNamespace if it does not exist yet.
9541                       On uninstall, the namespace will not be garbage collected.
9542                     type: boolean
9543                   disableHooks:
9544                     description: DisableHooks prevents hooks from running during the
9545                       Helm install action.
9546                     type: boolean
9547                   disableOpenAPIValidation:
9548                     description: |-
9549                       DisableOpenAPIValidation prevents the Helm install action from validating
9550                       rendered templates against the Kubernetes OpenAPI Schema.
9551                     type: boolean
9552                   disableWait:
9553                     description: |-
9554                       DisableWait disables the waiting for resources to be ready after a Helm
9555                       install has been performed.
9556                     type: boolean
9557                   disableWaitForJobs:
9558                     description: |-
9559                       DisableWaitForJobs disables waiting for jobs to complete after a Helm
9560                       install has been performed.
9561                     type: boolean
9562                   remediation:
9563                     description: |-
9564                       Remediation holds the remediation configuration for when the Helm install
9565                       action for the HelmRelease fails. The default is to not perform any action.
9566                     properties:
9567                       ignoreTestFailures:
9568                         description: |-
9569                           IgnoreTestFailures tells the controller to skip remediation when the Helm
9570                           tests are run after an install action but fail. Defaults to
9571                           'Test.IgnoreFailures'.
9572                         type: boolean
9573                       remediateLastFailure:
9574                         description: |-
9575                           RemediateLastFailure tells the controller to remediate the last failure, when
9576                           no retries remain. Defaults to 'false'.
9577                         type: boolean
9578                       retries:
9579                         description: |-
9580                           Retries is the number of retries that should be attempted on failures before
9581                           bailing. Remediation, using an uninstall, is performed between each attempt.
9582                           Defaults to '0', a negative integer equals to unlimited retries.
9583                         type: integer
9584                     type: object
9585                   replace:
9586                     description: |-
9587                       Replace tells the Helm install action to re-use the 'ReleaseName', but only
9588                       if that name is a deleted release which remains in the history.
9589                     type: boolean
9590                   skipCRDs:
9591                     description: |-
9592                       SkipCRDs tells the Helm install action to not install any CRDs. By default,
9593                       CRDs are installed if not already present.
9594
9595                       Deprecated use CRD policy (`crds`) attribute with value `Skip` instead.
9596                     type: boolean
9597                   timeout:
9598                     description: |-
9599                       Timeout is the time to wait for any individual Kubernetes operation (like
9600                       Jobs for hooks) during the performance of a Helm install action. Defaults to
9601                       'HelmReleaseSpec.Timeout'.
9602                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
9603                     type: string
9604                 type: object
9605               interval:
9606                 description: Interval at which to reconcile the Helm release.
9607                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
9608                 type: string
9609               kubeConfig:
9610                 description: |-
9611                   KubeConfig for reconciling the HelmRelease on a remote cluster.
9612                   When used in combination with HelmReleaseSpec.ServiceAccountName,
9613                   forces the controller to act on behalf of that Service Account at the
9614                   target cluster.
9615                   If the --default-service-account flag is set, its value will be used as
9616                   a controller level fallback for when HelmReleaseSpec.ServiceAccountName
9617                   is empty.
9618                 properties:
9619                   secretRef:
9620                     description: |-
9621                       SecretRef holds the name of a secret that contains a key with
9622                       the kubeconfig file as the value. If no key is set, the key will default
9623                       to 'value'.
9624                       It is recommended that the kubeconfig is self-contained, and the secret
9625                       is regularly updated if credentials such as a cloud-access-token expire.
9626                       Cloud specific `cmd-path` auth helpers will not function without adding
9627                       binaries and credentials to the Pod that is responsible for reconciling
9628                       Kubernetes resources.
9629                     properties:
9630                       key:
9631                         description: Key in the Secret, when not specified an implementation-specific
9632                           default key is used.
9633                         type: string
9634                       name:
9635                         description: Name of the Secret.
9636                         type: string
9637                     required:
9638                     - name
9639                     type: object
9640                 required:
9641                 - secretRef
9642                 type: object
9643               maxHistory:
9644                 description: |-
9645                   MaxHistory is the number of revisions saved by Helm for this HelmRelease.
9646                   Use '0' for an unlimited number of revisions; defaults to '5'.
9647                 type: integer
9648               persistentClient:
9649                 description: |-
9650                   PersistentClient tells the controller to use a persistent Kubernetes
9651                   client for this release. When enabled, the client will be reused for the
9652                   duration of the reconciliation, instead of being created and destroyed
9653                   for each (step of a) Helm action.
9654
9655                   This can improve performance, but may cause issues with some Helm charts
9656                   that for example do create Custom Resource Definitions during installation
9657                   outside Helm's CRD lifecycle hooks, which are then not observed to be
9658                   available by e.g. post-install hooks.
9659
9660                   If not set, it defaults to true.
9661                 type: boolean
9662               postRenderers:
9663                 description: |-
9664                   PostRenderers holds an array of Helm PostRenderers, which will be applied in order
9665                   of their definition.
9666                 items:
9667                   description: PostRenderer contains a Helm PostRenderer specification.
9668                   properties:
9669                     kustomize:
9670                       description: Kustomization to apply as PostRenderer.
9671                       properties:
9672                         images:
9673                           description: |-
9674                             Images is a list of (image name, new name, new tag or digest)
9675                             for changing image names, tags or digests. This can also be achieved with a
9676                             patch, but this operator is simpler to specify.
9677                           items:
9678                             description: Image contains an image name, a new name,
9679                               a new tag or digest, which will replace the original
9680                               name and tag.
9681                             properties:
9682                               digest:
9683                                 description: |-
9684                                   Digest is the value used to replace the original image tag.
9685                                   If digest is present NewTag value is ignored.
9686                                 type: string
9687                               name:
9688                                 description: Name is a tag-less image name.
9689                                 type: string
9690                               newName:
9691                                 description: NewName is the value used to replace
9692                                   the original name.
9693                                 type: string
9694                               newTag:
9695                                 description: NewTag is the value used to replace the
9696                                   original tag.
9697                                 type: string
9698                             required:
9699                             - name
9700                             type: object
9701                           type: array
9702                         patches:
9703                           description: |-
9704                             Strategic merge and JSON patches, defined as inline YAML objects,
9705                             capable of targeting objects based on kind, label and annotation selectors.
9706                           items:
9707                             description: |-
9708                               Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should
9709                               be applied to.
9710                             properties:
9711                               patch:
9712                                 description: |-
9713                                   Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with
9714                                   an array of operation objects.
9715                                 type: string
9716                               target:
9717                                 description: Target points to the resources that the
9718                                   patch document should be applied to.
9719                                 properties:
9720                                   annotationSelector:
9721                                     description: |-
9722                                       AnnotationSelector is a string that follows the label selection expression
9723                                       https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
9724                                       It matches with the resource annotations.
9725                                     type: string
9726                                   group:
9727                                     description: |-
9728                                       Group is the API group to select resources from.
9729                                       Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources.
9730                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
9731                                     type: string
9732                                   kind:
9733                                     description: |-
9734                                       Kind of the API Group to select resources from.
9735                                       Together with Group and Version it is capable of unambiguously
9736                                       identifying and/or selecting resources.
9737                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
9738                                     type: string
9739                                   labelSelector:
9740                                     description: |-
9741                                       LabelSelector is a string that follows the label selection expression
9742                                       https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
9743                                       It matches with the resource labels.
9744                                     type: string
9745                                   name:
9746                                     description: Name to match resources with.
9747                                     type: string
9748                                   namespace:
9749                                     description: Namespace to select resources from.
9750                                     type: string
9751                                   version:
9752                                     description: |-
9753                                       Version of the API Group to select resources from.
9754                                       Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources.
9755                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
9756                                     type: string
9757                                 type: object
9758                             required:
9759                             - patch
9760                             type: object
9761                           type: array
9762                         patchesJson6902:
9763                           description: |-
9764                             JSON 6902 patches, defined as inline YAML objects.
9765                             Deprecated: use Patches instead.
9766                           items:
9767                             description: JSON6902Patch contains a JSON6902 patch and
9768                               the target the patch should be applied to.
9769                             properties:
9770                               patch:
9771                                 description: Patch contains the JSON6902 patch document
9772                                   with an array of operation objects.
9773                                 items:
9774                                   description: |-
9775                                     JSON6902 is a JSON6902 operation object.
9776                                     https://datatracker.ietf.org/doc/html/rfc6902#section-4
9777                                   properties:
9778                                     from:
9779                                       description: |-
9780                                         From contains a JSON-pointer value that references a location within the target document where the operation is
9781                                         performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations.
9782                                       type: string
9783                                     op:
9784                                       description: |-
9785                                         Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or
9786                                         "test".
9787                                         https://datatracker.ietf.org/doc/html/rfc6902#section-4
9788                                       enum:
9789                                       - test
9790                                       - remove
9791                                       - add
9792                                       - replace
9793                                       - move
9794                                       - copy
9795                                       type: string
9796                                     path:
9797                                       description: |-
9798                                         Path contains the JSON-pointer value that references a location within the target document where the operation
9799                                         is performed. The meaning of the value depends on the value of Op.
9800                                       type: string
9801                                     value:
9802                                       description: |-
9803                                         Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into
9804                                         account by all operations.
9805                                       x-kubernetes-preserve-unknown-fields: true
9806                                   required:
9807                                   - op
9808                                   - path
9809                                   type: object
9810                                 type: array
9811                               target:
9812                                 description: Target points to the resources that the
9813                                   patch document should be applied to.
9814                                 properties:
9815                                   annotationSelector:
9816                                     description: |-
9817                                       AnnotationSelector is a string that follows the label selection expression
9818                                       https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
9819                                       It matches with the resource annotations.
9820                                     type: string
9821                                   group:
9822                                     description: |-
9823                                       Group is the API group to select resources from.
9824                                       Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources.
9825                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
9826                                     type: string
9827                                   kind:
9828                                     description: |-
9829                                       Kind of the API Group to select resources from.
9830                                       Together with Group and Version it is capable of unambiguously
9831                                       identifying and/or selecting resources.
9832                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
9833                                     type: string
9834                                   labelSelector:
9835                                     description: |-
9836                                       LabelSelector is a string that follows the label selection expression
9837                                       https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
9838                                       It matches with the resource labels.
9839                                     type: string
9840                                   name:
9841                                     description: Name to match resources with.
9842                                     type: string
9843                                   namespace:
9844                                     description: Namespace to select resources from.
9845                                     type: string
9846                                   version:
9847                                     description: |-
9848                                       Version of the API Group to select resources from.
9849                                       Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources.
9850                                       https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
9851                                     type: string
9852                                 type: object
9853                             required:
9854                             - patch
9855                             - target
9856                             type: object
9857                           type: array
9858                         patchesStrategicMerge:
9859                           description: |-
9860                             Strategic merge patches, defined as inline YAML objects.
9861                             Deprecated: use Patches instead.
9862                           items:
9863                             x-kubernetes-preserve-unknown-fields: true
9864                           type: array
9865                       type: object
9866                   type: object
9867                 type: array
9868               releaseName:
9869                 description: |-
9870                   ReleaseName used for the Helm release. Defaults to a composition of
9871                   '[TargetNamespace-]Name'.
9872                 maxLength: 53
9873                 minLength: 1
9874                 type: string
9875               rollback:
9876                 description: Rollback holds the configuration for Helm rollback actions
9877                   for this HelmRelease.
9878                 properties:
9879                   cleanupOnFail:
9880                     description: |-
9881                       CleanupOnFail allows deletion of new resources created during the Helm
9882                       rollback action when it fails.
9883                     type: boolean
9884                   disableHooks:
9885                     description: DisableHooks prevents hooks from running during the
9886                       Helm rollback action.
9887                     type: boolean
9888                   disableWait:
9889                     description: |-
9890                       DisableWait disables the waiting for resources to be ready after a Helm
9891                       rollback has been performed.
9892                     type: boolean
9893                   disableWaitForJobs:
9894                     description: |-
9895                       DisableWaitForJobs disables waiting for jobs to complete after a Helm
9896                       rollback has been performed.
9897                     type: boolean
9898                   force:
9899                     description: Force forces resource updates through a replacement
9900                       strategy.
9901                     type: boolean
9902                   recreate:
9903                     description: Recreate performs pod restarts for the resource if
9904                       applicable.
9905                     type: boolean
9906                   timeout:
9907                     description: |-
9908                       Timeout is the time to wait for any individual Kubernetes operation (like
9909                       Jobs for hooks) during the performance of a Helm rollback action. Defaults to
9910                       'HelmReleaseSpec.Timeout'.
9911                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
9912                     type: string
9913                 type: object
9914               serviceAccountName:
9915                 description: |-
9916                   The name of the Kubernetes service account to impersonate
9917                   when reconciling this HelmRelease.
9918                 maxLength: 253
9919                 minLength: 1
9920                 type: string
9921               storageNamespace:
9922                 description: |-
9923                   StorageNamespace used for the Helm storage.
9924                   Defaults to the namespace of the HelmRelease.
9925                 maxLength: 63
9926                 minLength: 1
9927                 type: string
9928               suspend:
9929                 description: |-
9930                   Suspend tells the controller to suspend reconciliation for this HelmRelease,
9931                   it does not apply to already started reconciliations. Defaults to false.
9932                 type: boolean
9933               targetNamespace:
9934                 description: |-
9935                   TargetNamespace to target when performing operations for the HelmRelease.
9936                   Defaults to the namespace of the HelmRelease.
9937                 maxLength: 63
9938                 minLength: 1
9939                 type: string
9940               test:
9941                 description: Test holds the configuration for Helm test actions for
9942                   this HelmRelease.
9943                 properties:
9944                   enable:
9945                     description: |-
9946                       Enable enables Helm test actions for this HelmRelease after an Helm install
9947                       or upgrade action has been performed.
9948                     type: boolean
9949                   filters:
9950                     description: Filters is a list of tests to run or exclude from
9951                       running.
9952                     items:
9953                       description: Filter holds the configuration for individual Helm
9954                         test filters.
9955                       properties:
9956                         exclude:
9957                           description: Exclude specifies whether the named test should
9958                             be excluded.
9959                           type: boolean
9960                         name:
9961                           description: Name is the name of the test.
9962                           maxLength: 253
9963                           minLength: 1
9964                           type: string
9965                       required:
9966                       - name
9967                       type: object
9968                     type: array
9969                   ignoreFailures:
9970                     description: |-
9971                       IgnoreFailures tells the controller to skip remediation when the Helm tests
9972                       are run but fail. Can be overwritten for tests run after install or upgrade
9973                       actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'.
9974                     type: boolean
9975                   timeout:
9976                     description: |-
9977                       Timeout is the time to wait for any individual Kubernetes operation during
9978                       the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'.
9979                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
9980                     type: string
9981                 type: object
9982               timeout:
9983                 description: |-
9984                   Timeout is the time to wait for any individual Kubernetes operation (like Jobs
9985                   for hooks) during the performance of a Helm action. Defaults to '5m0s'.
9986                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
9987                 type: string
9988               uninstall:
9989                 description: Uninstall holds the configuration for Helm uninstall
9990                   actions for this HelmRelease.
9991                 properties:
9992                   deletionPropagation:
9993                     default: background
9994                     description: |-
9995                       DeletionPropagation specifies the deletion propagation policy when
9996                       a Helm uninstall is performed.
9997                     enum:
9998                     - background
9999                     - foreground
10000                     - orphan
10001                     type: string
10002                   disableHooks:
10003                     description: DisableHooks prevents hooks from running during the
10004                       Helm rollback action.
10005                     type: boolean
10006                   disableWait:
10007                     description: |-
10008                       DisableWait disables waiting for all the resources to be deleted after
10009                       a Helm uninstall is performed.
10010                     type: boolean
10011                   keepHistory:
10012                     description: |-
10013                       KeepHistory tells Helm to remove all associated resources and mark the
10014                       release as deleted, but retain the release history.
10015                     type: boolean
10016                   timeout:
10017                     description: |-
10018                       Timeout is the time to wait for any individual Kubernetes operation (like
10019                       Jobs for hooks) during the performance of a Helm uninstall action. Defaults
10020                       to 'HelmReleaseSpec.Timeout'.
10021                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
10022                     type: string
10023                 type: object
10024               upgrade:
10025                 description: Upgrade holds the configuration for Helm upgrade actions
10026                   for this HelmRelease.
10027                 properties:
10028                   cleanupOnFail:
10029                     description: |-
10030                       CleanupOnFail allows deletion of new resources created during the Helm
10031                       upgrade action when it fails.
10032                     type: boolean
10033                   crds:
10034                     description: |-
10035                       CRDs upgrade CRDs from the Helm Chart's crds directory according
10036                       to the CRD upgrade policy provided here. Valid values are `Skip`,
10037                       `Create` or `CreateReplace`. Default is `Skip` and if omitted
10038                       CRDs are neither installed nor upgraded.
10039
10040                       Skip: do neither install nor replace (update) any CRDs.
10041
10042                       Create: new CRDs are created, existing CRDs are neither updated nor deleted.
10043
10044                       CreateReplace: new CRDs are created, existing CRDs are updated (replaced)
10045                       but not deleted.
10046
10047                       By default, CRDs are not applied during Helm upgrade action. With this
10048                       option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm.
10049                       https://helm.sh/docs/chart_best_practices/custom_resource_definitions.
10050                     enum:
10051                     - Skip
10052                     - Create
10053                     - CreateReplace
10054                     type: string
10055                   disableHooks:
10056                     description: DisableHooks prevents hooks from running during the
10057                       Helm upgrade action.
10058                     type: boolean
10059                   disableOpenAPIValidation:
10060                     description: |-
10061                       DisableOpenAPIValidation prevents the Helm upgrade action from validating
10062                       rendered templates against the Kubernetes OpenAPI Schema.
10063                     type: boolean
10064                   disableWait:
10065                     description: |-
10066                       DisableWait disables the waiting for resources to be ready after a Helm
10067                       upgrade has been performed.
10068                     type: boolean
10069                   disableWaitForJobs:
10070                     description: |-
10071                       DisableWaitForJobs disables waiting for jobs to complete after a Helm
10072                       upgrade has been performed.
10073                     type: boolean
10074                   force:
10075                     description: Force forces resource updates through a replacement
10076                       strategy.
10077                     type: boolean
10078                   preserveValues:
10079                     description: |-
10080                       PreserveValues will make Helm reuse the last release's values and merge in
10081                       overrides from 'Values'. Setting this flag makes the HelmRelease
10082                       non-declarative.
10083                     type: boolean
10084                   remediation:
10085                     description: |-
10086                       Remediation holds the remediation configuration for when the Helm upgrade
10087                       action for the HelmRelease fails. The default is to not perform any action.
10088                     properties:
10089                       ignoreTestFailures:
10090                         description: |-
10091                           IgnoreTestFailures tells the controller to skip remediation when the Helm
10092                           tests are run after an upgrade action but fail.
10093                           Defaults to 'Test.IgnoreFailures'.
10094                         type: boolean
10095                       remediateLastFailure:
10096                         description: |-
10097                           RemediateLastFailure tells the controller to remediate the last failure, when
10098                           no retries remain. Defaults to 'false' unless 'Retries' is greater than 0.
10099                         type: boolean
10100                       retries:
10101                         description: |-
10102                           Retries is the number of retries that should be attempted on failures before
10103                           bailing. Remediation, using 'Strategy', is performed between each attempt.
10104                           Defaults to '0', a negative integer equals to unlimited retries.
10105                         type: integer
10106                       strategy:
10107                         description: Strategy to use for failure remediation. Defaults
10108                           to 'rollback'.
10109                         enum:
10110                         - rollback
10111                         - uninstall
10112                         type: string
10113                     type: object
10114                   timeout:
10115                     description: |-
10116                       Timeout is the time to wait for any individual Kubernetes operation (like
10117                       Jobs for hooks) during the performance of a Helm upgrade action. Defaults to
10118                       'HelmReleaseSpec.Timeout'.
10119                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
10120                     type: string
10121                 type: object
10122               values:
10123                 description: Values holds the values for this Helm release.
10124                 x-kubernetes-preserve-unknown-fields: true
10125               valuesFrom:
10126                 description: |-
10127                   ValuesFrom holds references to resources containing Helm values for this HelmRelease,
10128                   and information about how they should be merged.
10129                 items:
10130                   description: |-
10131                     ValuesReference contains a reference to a resource containing Helm values,
10132                     and optionally the key they can be found at.
10133                   properties:
10134                     kind:
10135                       description: Kind of the values referent, valid values are ('Secret',
10136                         'ConfigMap').
10137                       enum:
10138                       - Secret
10139                       - ConfigMap
10140                       type: string
10141                     name:
10142                       description: |-
10143                         Name of the values referent. Should reside in the same namespace as the
10144                         referring resource.
10145                       maxLength: 253
10146                       minLength: 1
10147                       type: string
10148                     optional:
10149                       description: |-
10150                         Optional marks this ValuesReference as optional. When set, a not found error
10151                         for the values reference is ignored, but any ValuesKey, TargetPath or
10152                         transient error will still result in a reconciliation failure.
10153                       type: boolean
10154                     targetPath:
10155                       description: |-
10156                         TargetPath is the YAML dot notation path the value should be merged at. When
10157                         set, the ValuesKey is expected to be a single flat value. Defaults to 'None',
10158                         which results in the values getting merged at the root.
10159                       maxLength: 250
10160                       pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$
10161                       type: string
10162                     valuesKey:
10163                       description: |-
10164                         ValuesKey is the data key where the values.yaml or a specific value can be
10165                         found at. Defaults to 'values.yaml'.
10166                       maxLength: 253
10167                       pattern: ^[\-._a-zA-Z0-9]+$
10168                       type: string
10169                   required:
10170                   - kind
10171                   - name
10172                   type: object
10173                 type: array
10174             required:
10175             - interval
10176             type: object
10177             x-kubernetes-validations:
10178             - message: either chart or chartRef must be set
10179               rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart)
10180                 && has(self.chartRef))
10181           status:
10182             default:
10183               observedGeneration: -1
10184             description: HelmReleaseStatus defines the observed state of a HelmRelease.
10185             properties:
10186               conditions:
10187                 description: Conditions holds the conditions for the HelmRelease.
10188                 items:
10189                   description: Condition contains details for one aspect of the current
10190                     state of this API Resource.
10191                   properties:
10192                     lastTransitionTime:
10193                       description: |-
10194                         lastTransitionTime is the last time the condition transitioned from one status to another.
10195                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
10196                       format: date-time
10197                       type: string
10198                     message:
10199                       description: |-
10200                         message is a human readable message indicating details about the transition.
10201                         This may be an empty string.
10202                       maxLength: 32768
10203                       type: string
10204                     observedGeneration:
10205                       description: |-
10206                         observedGeneration represents the .metadata.generation that the condition was set based upon.
10207                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
10208                         with respect to the current state of the instance.
10209                       format: int64
10210                       minimum: 0
10211                       type: integer
10212                     reason:
10213                       description: |-
10214                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
10215                         Producers of specific condition types may define expected values and meanings for this field,
10216                         and whether the values are considered a guaranteed API.
10217                         The value should be a CamelCase string.
10218                         This field may not be empty.
10219                       maxLength: 1024
10220                       minLength: 1
10221                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
10222                       type: string
10223                     status:
10224                       description: status of the condition, one of True, False, Unknown.
10225                       enum:
10226                       - "True"
10227                       - "False"
10228                       - Unknown
10229                       type: string
10230                     type:
10231                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
10232                       maxLength: 316
10233                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
10234                       type: string
10235                   required:
10236                   - lastTransitionTime
10237                   - message
10238                   - reason
10239                   - status
10240                   - type
10241                   type: object
10242                 type: array
10243               failures:
10244                 description: |-
10245                   Failures is the reconciliation failure count against the latest desired
10246                   state. It is reset after a successful reconciliation.
10247                 format: int64
10248                 type: integer
10249               helmChart:
10250                 description: |-
10251                   HelmChart is the namespaced name of the HelmChart resource created by
10252                   the controller for the HelmRelease.
10253                 type: string
10254               history:
10255                 description: |-
10256                   History holds the history of Helm releases performed for this HelmRelease
10257                   up to the last successfully completed release.
10258                 items:
10259                   description: |-
10260                     Snapshot captures a point-in-time copy of the status information for a Helm release,
10261                     as managed by the controller.
10262                   properties:
10263                     apiVersion:
10264                       description: |-
10265                         APIVersion is the API version of the Snapshot.
10266                         Provisional: when the calculation method of the Digest field is changed,
10267                         this field will be used to distinguish between the old and new methods.
10268                       type: string
10269                     appVersion:
10270                       description: AppVersion is the chart app version of the release
10271                         object in storage.
10272                       type: string
10273                     chartName:
10274                       description: ChartName is the chart name of the release object
10275                         in storage.
10276                       type: string
10277                     chartVersion:
10278                       description: |-
10279                         ChartVersion is the chart version of the release object in
10280                         storage.
10281                       type: string
10282                     configDigest:
10283                       description: |-
10284                         ConfigDigest is the checksum of the config (better known as
10285                         "values") of the release object in storage.
10286                         It has the format of `<algo>:<checksum>`.
10287                       type: string
10288                     deleted:
10289                       description: Deleted is when the release was deleted.
10290                       format: date-time
10291                       type: string
10292                     digest:
10293                       description: |-
10294                         Digest is the checksum of the release object in storage.
10295                         It has the format of `<algo>:<checksum>`.
10296                       type: string
10297                     firstDeployed:
10298                       description: FirstDeployed is when the release was first deployed.
10299                       format: date-time
10300                       type: string
10301                     lastDeployed:
10302                       description: LastDeployed is when the release was last deployed.
10303                       format: date-time
10304                       type: string
10305                     name:
10306                       description: Name is the name of the release.
10307                       type: string
10308                     namespace:
10309                       description: Namespace is the namespace the release is deployed
10310                         to.
10311                       type: string
10312                     ociDigest:
10313                       description: OCIDigest is the digest of the OCI artifact associated
10314                         with the release.
10315                       type: string
10316                     status:
10317                       description: Status is the current state of the release.
10318                       type: string
10319                     testHooks:
10320                       additionalProperties:
10321                         description: |-
10322                           TestHookStatus holds the status information for a test hook as observed
10323                           to be run by the controller.
10324                         properties:
10325                           lastCompleted:
10326                             description: LastCompleted is the time the test hook last
10327                               completed.
10328                             format: date-time
10329                             type: string
10330                           lastStarted:
10331                             description: LastStarted is the time the test hook was
10332                               last started.
10333                             format: date-time
10334                             type: string
10335                           phase:
10336                             description: Phase the test hook was observed to be in.
10337                             type: string
10338                         type: object
10339                       description: |-
10340                         TestHooks is the list of test hooks for the release as observed to be
10341                         run by the controller.
10342                       type: object
10343                     version:
10344                       description: Version is the version of the release object in
10345                         storage.
10346                       type: integer
10347                   required:
10348                   - chartName
10349                   - chartVersion
10350                   - configDigest
10351                   - digest
10352                   - firstDeployed
10353                   - lastDeployed
10354                   - name
10355                   - namespace
10356                   - status
10357                   - version
10358                   type: object
10359                 type: array
10360               installFailures:
10361                 description: |-
10362                   InstallFailures is the install failure count against the latest desired
10363                   state. It is reset after a successful reconciliation.
10364                 format: int64
10365                 type: integer
10366               lastAppliedRevision:
10367                 description: |-
10368                   LastAppliedRevision is the revision of the last successfully applied
10369                   source.
10370                   Deprecated: the revision can now be found in the History.
10371                 type: string
10372               lastAttemptedConfigDigest:
10373                 description: |-
10374                   LastAttemptedConfigDigest is the digest for the config (better known as
10375                   "values") of the last reconciliation attempt.
10376                 type: string
10377               lastAttemptedGeneration:
10378                 description: |-
10379                   LastAttemptedGeneration is the last generation the controller attempted
10380                   to reconcile.
10381                 format: int64
10382                 type: integer
10383               lastAttemptedReleaseAction:
10384                 description: |-
10385                   LastAttemptedReleaseAction is the last release action performed for this
10386                   HelmRelease. It is used to determine the active remediation strategy.
10387                 enum:
10388                 - install
10389                 - upgrade
10390                 type: string
10391               lastAttemptedRevision:
10392                 description: |-
10393                   LastAttemptedRevision is the Source revision of the last reconciliation
10394                   attempt. For OCIRepository  sources, the 12 first characters of the digest are
10395                   appended to the chart version e.g. "1.2.3+1234567890ab".
10396                 type: string
10397               lastAttemptedRevisionDigest:
10398                 description: |-
10399                   LastAttemptedRevisionDigest is the digest of the last reconciliation attempt.
10400                   This is only set for OCIRepository sources.
10401                 type: string
10402               lastAttemptedValuesChecksum:
10403                 description: |-
10404                   LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last
10405                   reconciliation attempt.
10406                   Deprecated: Use LastAttemptedConfigDigest instead.
10407                 type: string
10408               lastHandledForceAt:
10409                 description: |-
10410                   LastHandledForceAt holds the value of the most recent force request
10411                   value, so a change of the annotation value can be detected.
10412                 type: string
10413               lastHandledReconcileAt:
10414                 description: |-
10415                   LastHandledReconcileAt holds the value of the most recent
10416                   reconcile request value, so a change of the annotation value
10417                   can be detected.
10418                 type: string
10419               lastHandledResetAt:
10420                 description: |-
10421                   LastHandledResetAt holds the value of the most recent reset request
10422                   value, so a change of the annotation value can be detected.
10423                 type: string
10424               lastReleaseRevision:
10425                 description: |-
10426                   LastReleaseRevision is the revision of the last successful Helm release.
10427                   Deprecated: Use History instead.
10428                 type: integer
10429               observedGeneration:
10430                 description: ObservedGeneration is the last observed generation.
10431                 format: int64
10432                 type: integer
10433               observedPostRenderersDigest:
10434                 description: |-
10435                   ObservedPostRenderersDigest is the digest for the post-renderers of
10436                   the last successful reconciliation attempt.
10437                 type: string
10438               storageNamespace:
10439                 description: |-
10440                   StorageNamespace is the namespace of the Helm release storage for the
10441                   current release.
10442                 maxLength: 63
10443                 minLength: 1
10444                 type: string
10445               upgradeFailures:
10446                 description: |-
10447                   UpgradeFailures is the upgrade failure count against the latest desired
10448                   state. It is reset after a successful reconciliation.
10449                 format: int64
10450                 type: integer
10451             type: object
10452         type: object
10453     served: true
10454     storage: false
10455     subresources:
10456       status: {}
10457 ---
10458 apiVersion: v1
10459 kind: ServiceAccount
10460 metadata:
10461   labels:
10462     app.kubernetes.io/component: helm-controller
10463     app.kubernetes.io/instance: flux-system
10464     app.kubernetes.io/part-of: flux
10465     app.kubernetes.io/version: v2.4.0
10466   name: helm-controller
10467   namespace: flux-system
10468 ---
10469 apiVersion: apps/v1
10470 kind: Deployment
10471 metadata:
10472   labels:
10473     app.kubernetes.io/component: helm-controller
10474     app.kubernetes.io/instance: flux-system
10475     app.kubernetes.io/part-of: flux
10476     app.kubernetes.io/version: v2.4.0
10477     control-plane: controller
10478   name: helm-controller
10479   namespace: flux-system
10480 spec:
10481   replicas: 1
10482   selector:
10483     matchLabels:
10484       app: helm-controller
10485   template:
10486     metadata:
10487       annotations:
10488         prometheus.io/port: "8080"
10489         prometheus.io/scrape: "true"
10490       labels:
10491         app: helm-controller
10492     spec:
10493       containers:
10494       - args:
10495         - --events-addr=http://notification-controller.flux-system.svc.cluster.local./
10496         - --watch-all-namespaces=true
10497         - --log-level=info
10498         - --log-encoding=json
10499         - --enable-leader-election
10500         env:
10501         - name: RUNTIME_NAMESPACE
10502           valueFrom:
10503             fieldRef:
10504               fieldPath: metadata.namespace
10505         - name: GOMAXPROCS
10506           valueFrom:
10507             resourceFieldRef:
10508               containerName: manager
10509               resource: limits.cpu
10510         - name: GOMEMLIMIT
10511           valueFrom:
10512             resourceFieldRef:
10513               containerName: manager
10514               resource: limits.memory
10515         image: ghcr.io/fluxcd/helm-controller:v1.1.0
10516         imagePullPolicy: IfNotPresent
10517         livenessProbe:
10518           httpGet:
10519             path: /healthz
10520             port: healthz
10521         name: manager
10522         ports:
10523         - containerPort: 8080
10524           name: http-prom
10525           protocol: TCP
10526         - containerPort: 9440
10527           name: healthz
10528           protocol: TCP
10529         readinessProbe:
10530           httpGet:
10531             path: /readyz
10532             port: healthz
10533         resources:
10534           limits:
10535             cpu: 1000m
10536             memory: 1Gi
10537           requests:
10538             cpu: 100m
10539             memory: 64Mi
10540         securityContext:
10541           allowPrivilegeEscalation: false
10542           capabilities:
10543             drop:
10544             - ALL
10545           readOnlyRootFilesystem: true
10546           runAsNonRoot: true
10547           seccompProfile:
10548             type: RuntimeDefault
10549         volumeMounts:
10550         - mountPath: /tmp
10551           name: temp
10552       nodeSelector:
10553         kubernetes.io/os: linux
10554       priorityClassName: system-cluster-critical
10555       securityContext:
10556         fsGroup: 1337
10557       serviceAccountName: helm-controller
10558       terminationGracePeriodSeconds: 600
10559       volumes:
10560       - emptyDir: {}
10561         name: temp
10562 ---
10563 apiVersion: apiextensions.k8s.io/v1
10564 kind: CustomResourceDefinition
10565 metadata:
10566   annotations:
10567     controller-gen.kubebuilder.io/version: v0.16.1
10568   labels:
10569     app.kubernetes.io/component: notification-controller
10570     app.kubernetes.io/instance: flux-system
10571     app.kubernetes.io/part-of: flux
10572     app.kubernetes.io/version: v2.4.0
10573   name: alerts.notification.toolkit.fluxcd.io
10574 spec:
10575   group: notification.toolkit.fluxcd.io
10576   names:
10577     kind: Alert
10578     listKind: AlertList
10579     plural: alerts
10580     singular: alert
10581   scope: Namespaced
10582   versions:
10583   - additionalPrinterColumns:
10584     - jsonPath: .metadata.creationTimestamp
10585       name: Age
10586       type: date
10587     - jsonPath: .status.conditions[?(@.type=="Ready")].status
10588       name: Ready
10589       type: string
10590     - jsonPath: .status.conditions[?(@.type=="Ready")].message
10591       name: Status
10592       type: string
10593     deprecated: true
10594     deprecationWarning: v1beta1 Alert is deprecated, upgrade to v1beta3
10595     name: v1beta1
10596     schema:
10597       openAPIV3Schema:
10598         description: Alert is the Schema for the alerts API
10599         properties:
10600           apiVersion:
10601             description: |-
10602               APIVersion defines the versioned schema of this representation of an object.
10603               Servers should convert recognized schemas to the latest internal value, and
10604               may reject unrecognized values.
10605               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
10606             type: string
10607           kind:
10608             description: |-
10609               Kind is a string value representing the REST resource this object represents.
10610               Servers may infer this from the endpoint the client submits requests to.
10611               Cannot be updated.
10612               In CamelCase.
10613               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
10614             type: string
10615           metadata:
10616             type: object
10617           spec:
10618             description: AlertSpec defines an alerting rule for events involving a
10619               list of objects
10620             properties:
10621               eventSeverity:
10622                 default: info
10623                 description: |-
10624                   Filter events based on severity, defaults to ('info').
10625                   If set to 'info' no events will be filtered.
10626                 enum:
10627                 - info
10628                 - error
10629                 type: string
10630               eventSources:
10631                 description: Filter events based on the involved objects.
10632                 items:
10633                   description: |-
10634                     CrossNamespaceObjectReference contains enough information to let you locate the
10635                     typed referenced object at cluster level
10636                   properties:
10637                     apiVersion:
10638                       description: API version of the referent
10639                       type: string
10640                     kind:
10641                       description: Kind of the referent
10642                       enum:
10643                       - Bucket
10644                       - GitRepository
10645                       - Kustomization
10646                       - HelmRelease
10647                       - HelmChart
10648                       - HelmRepository
10649                       - ImageRepository
10650                       - ImagePolicy
10651                       - ImageUpdateAutomation
10652                       - OCIRepository
10653                       type: string
10654                     matchLabels:
10655                       additionalProperties:
10656                         type: string
10657                       description: |-
10658                         MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
10659                         map is equivalent to an element of matchExpressions, whose key field is "key", the
10660                         operator is "In", and the values array contains only "value". The requirements are ANDed.
10661                       type: object
10662                     name:
10663                       description: Name of the referent
10664                       maxLength: 53
10665                       minLength: 1
10666                       type: string
10667                     namespace:
10668                       description: Namespace of the referent
10669                       maxLength: 53
10670                       minLength: 1
10671                       type: string
10672                   required:
10673                   - kind
10674                   - name
10675                   type: object
10676                 type: array
10677               exclusionList:
10678                 description: A list of Golang regular expressions to be used for excluding
10679                   messages.
10680                 items:
10681                   type: string
10682                 type: array
10683               providerRef:
10684                 description: Send events using this provider.
10685                 properties:
10686                   name:
10687                     description: Name of the referent.
10688                     type: string
10689                 required:
10690                 - name
10691                 type: object
10692               summary:
10693                 description: Short description of the impact and affected cluster.
10694                 type: string
10695               suspend:
10696                 description: |-
10697                   This flag tells the controller to suspend subsequent events dispatching.
10698                   Defaults to false.
10699                 type: boolean
10700             required:
10701             - eventSources
10702             - providerRef
10703             type: object
10704           status:
10705             default:
10706               observedGeneration: -1
10707             description: AlertStatus defines the observed state of Alert
10708             properties:
10709               conditions:
10710                 items:
10711                   description: Condition contains details for one aspect of the current
10712                     state of this API Resource.
10713                   properties:
10714                     lastTransitionTime:
10715                       description: |-
10716                         lastTransitionTime is the last time the condition transitioned from one status to another.
10717                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
10718                       format: date-time
10719                       type: string
10720                     message:
10721                       description: |-
10722                         message is a human readable message indicating details about the transition.
10723                         This may be an empty string.
10724                       maxLength: 32768
10725                       type: string
10726                     observedGeneration:
10727                       description: |-
10728                         observedGeneration represents the .metadata.generation that the condition was set based upon.
10729                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
10730                         with respect to the current state of the instance.
10731                       format: int64
10732                       minimum: 0
10733                       type: integer
10734                     reason:
10735                       description: |-
10736                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
10737                         Producers of specific condition types may define expected values and meanings for this field,
10738                         and whether the values are considered a guaranteed API.
10739                         The value should be a CamelCase string.
10740                         This field may not be empty.
10741                       maxLength: 1024
10742                       minLength: 1
10743                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
10744                       type: string
10745                     status:
10746                       description: status of the condition, one of True, False, Unknown.
10747                       enum:
10748                       - "True"
10749                       - "False"
10750                       - Unknown
10751                       type: string
10752                     type:
10753                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
10754                       maxLength: 316
10755                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
10756                       type: string
10757                   required:
10758                   - lastTransitionTime
10759                   - message
10760                   - reason
10761                   - status
10762                   - type
10763                   type: object
10764                 type: array
10765               observedGeneration:
10766                 description: ObservedGeneration is the last observed generation.
10767                 format: int64
10768                 type: integer
10769             type: object
10770         type: object
10771     served: true
10772     storage: false
10773     subresources:
10774       status: {}
10775   - additionalPrinterColumns:
10776     - jsonPath: .metadata.creationTimestamp
10777       name: Age
10778       type: date
10779     - jsonPath: .status.conditions[?(@.type=="Ready")].status
10780       name: Ready
10781       type: string
10782     - jsonPath: .status.conditions[?(@.type=="Ready")].message
10783       name: Status
10784       type: string
10785     deprecated: true
10786     deprecationWarning: v1beta2 Alert is deprecated, upgrade to v1beta3
10787     name: v1beta2
10788     schema:
10789       openAPIV3Schema:
10790         description: Alert is the Schema for the alerts API
10791         properties:
10792           apiVersion:
10793             description: |-
10794               APIVersion defines the versioned schema of this representation of an object.
10795               Servers should convert recognized schemas to the latest internal value, and
10796               may reject unrecognized values.
10797               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
10798             type: string
10799           kind:
10800             description: |-
10801               Kind is a string value representing the REST resource this object represents.
10802               Servers may infer this from the endpoint the client submits requests to.
10803               Cannot be updated.
10804               In CamelCase.
10805               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
10806             type: string
10807           metadata:
10808             type: object
10809           spec:
10810             description: AlertSpec defines an alerting rule for events involving a
10811               list of objects.
10812             properties:
10813               eventMetadata:
10814                 additionalProperties:
10815                   type: string
10816                 description: |-
10817                   EventMetadata is an optional field for adding metadata to events dispatched by the
10818                   controller. This can be used for enhancing the context of the event. If a field
10819                   would override one already present on the original event as generated by the emitter,
10820                   then the override doesn't happen, i.e. the original value is preserved, and an info
10821                   log is printed.
10822                 type: object
10823               eventSeverity:
10824                 default: info
10825                 description: |-
10826                   EventSeverity specifies how to filter events based on severity.
10827                   If set to 'info' no events will be filtered.
10828                 enum:
10829                 - info
10830                 - error
10831                 type: string
10832               eventSources:
10833                 description: |-
10834                   EventSources specifies how to filter events based
10835                   on the involved object kind, name and namespace.
10836                 items:
10837                   description: |-
10838                     CrossNamespaceObjectReference contains enough information to let you locate the
10839                     typed referenced object at cluster level
10840                   properties:
10841                     apiVersion:
10842                       description: API version of the referent
10843                       type: string
10844                     kind:
10845                       description: Kind of the referent
10846                       enum:
10847                       - Bucket
10848                       - GitRepository
10849                       - Kustomization
10850                       - HelmRelease
10851                       - HelmChart
10852                       - HelmRepository
10853                       - ImageRepository
10854                       - ImagePolicy
10855                       - ImageUpdateAutomation
10856                       - OCIRepository
10857                       type: string
10858                     matchLabels:
10859                       additionalProperties:
10860                         type: string
10861                       description: |-
10862                         MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
10863                         map is equivalent to an element of matchExpressions, whose key field is "key", the
10864                         operator is "In", and the values array contains only "value". The requirements are ANDed.
10865                         MatchLabels requires the name to be set to `*`.
10866                       type: object
10867                     name:
10868                       description: |-
10869                         Name of the referent
10870                         If multiple resources are targeted `*` may be set.
10871                       maxLength: 53
10872                       minLength: 1
10873                       type: string
10874                     namespace:
10875                       description: Namespace of the referent
10876                       maxLength: 53
10877                       minLength: 1
10878                       type: string
10879                   required:
10880                   - kind
10881                   - name
10882                   type: object
10883                 type: array
10884               exclusionList:
10885                 description: |-
10886                   ExclusionList specifies a list of Golang regular expressions
10887                   to be used for excluding messages.
10888                 items:
10889                   type: string
10890                 type: array
10891               inclusionList:
10892                 description: |-
10893                   InclusionList specifies a list of Golang regular expressions
10894                   to be used for including messages.
10895                 items:
10896                   type: string
10897                 type: array
10898               providerRef:
10899                 description: ProviderRef specifies which Provider this Alert should
10900                   use.
10901                 properties:
10902                   name:
10903                     description: Name of the referent.
10904                     type: string
10905                 required:
10906                 - name
10907                 type: object
10908               summary:
10909                 description: Summary holds a short description of the impact and affected
10910                   cluster.
10911                 maxLength: 255
10912                 type: string
10913               suspend:
10914                 description: |-
10915                   Suspend tells the controller to suspend subsequent
10916                   events handling for this Alert.
10917                 type: boolean
10918             required:
10919             - eventSources
10920             - providerRef
10921             type: object
10922           status:
10923             default:
10924               observedGeneration: -1
10925             description: AlertStatus defines the observed state of the Alert.
10926             properties:
10927               conditions:
10928                 description: Conditions holds the conditions for the Alert.
10929                 items:
10930                   description: Condition contains details for one aspect of the current
10931                     state of this API Resource.
10932                   properties:
10933                     lastTransitionTime:
10934                       description: |-
10935                         lastTransitionTime is the last time the condition transitioned from one status to another.
10936                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
10937                       format: date-time
10938                       type: string
10939                     message:
10940                       description: |-
10941                         message is a human readable message indicating details about the transition.
10942                         This may be an empty string.
10943                       maxLength: 32768
10944                       type: string
10945                     observedGeneration:
10946                       description: |-
10947                         observedGeneration represents the .metadata.generation that the condition was set based upon.
10948                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
10949                         with respect to the current state of the instance.
10950                       format: int64
10951                       minimum: 0
10952                       type: integer
10953                     reason:
10954                       description: |-
10955                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
10956                         Producers of specific condition types may define expected values and meanings for this field,
10957                         and whether the values are considered a guaranteed API.
10958                         The value should be a CamelCase string.
10959                         This field may not be empty.
10960                       maxLength: 1024
10961                       minLength: 1
10962                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
10963                       type: string
10964                     status:
10965                       description: status of the condition, one of True, False, Unknown.
10966                       enum:
10967                       - "True"
10968                       - "False"
10969                       - Unknown
10970                       type: string
10971                     type:
10972                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
10973                       maxLength: 316
10974                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
10975                       type: string
10976                   required:
10977                   - lastTransitionTime
10978                   - message
10979                   - reason
10980                   - status
10981                   - type
10982                   type: object
10983                 type: array
10984               lastHandledReconcileAt:
10985                 description: |-
10986                   LastHandledReconcileAt holds the value of the most recent
10987                   reconcile request value, so a change of the annotation value
10988                   can be detected.
10989                 type: string
10990               observedGeneration:
10991                 description: ObservedGeneration is the last observed generation.
10992                 format: int64
10993                 type: integer
10994             type: object
10995         type: object
10996     served: true
10997     storage: false
10998     subresources:
10999       status: {}
11000   - additionalPrinterColumns:
11001     - jsonPath: .metadata.creationTimestamp
11002       name: Age
11003       type: date
11004     name: v1beta3
11005     schema:
11006       openAPIV3Schema:
11007         description: Alert is the Schema for the alerts API
11008         properties:
11009           apiVersion:
11010             description: |-
11011               APIVersion defines the versioned schema of this representation of an object.
11012               Servers should convert recognized schemas to the latest internal value, and
11013               may reject unrecognized values.
11014               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
11015             type: string
11016           kind:
11017             description: |-
11018               Kind is a string value representing the REST resource this object represents.
11019               Servers may infer this from the endpoint the client submits requests to.
11020               Cannot be updated.
11021               In CamelCase.
11022               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
11023             type: string
11024           metadata:
11025             type: object
11026           spec:
11027             description: AlertSpec defines an alerting rule for events involving a
11028               list of objects.
11029             properties:
11030               eventMetadata:
11031                 additionalProperties:
11032                   type: string
11033                 description: |-
11034                   EventMetadata is an optional field for adding metadata to events dispatched by the
11035                   controller. This can be used for enhancing the context of the event. If a field
11036                   would override one already present on the original event as generated by the emitter,
11037                   then the override doesn't happen, i.e. the original value is preserved, and an info
11038                   log is printed.
11039                 type: object
11040               eventSeverity:
11041                 default: info
11042                 description: |-
11043                   EventSeverity specifies how to filter events based on severity.
11044                   If set to 'info' no events will be filtered.
11045                 enum:
11046                 - info
11047                 - error
11048                 type: string
11049               eventSources:
11050                 description: |-
11051                   EventSources specifies how to filter events based
11052                   on the involved object kind, name and namespace.
11053                 items:
11054                   description: |-
11055                     CrossNamespaceObjectReference contains enough information to let you locate the
11056                     typed referenced object at cluster level
11057                   properties:
11058                     apiVersion:
11059                       description: API version of the referent
11060                       type: string
11061                     kind:
11062                       description: Kind of the referent
11063                       enum:
11064                       - Bucket
11065                       - GitRepository
11066                       - Kustomization
11067                       - HelmRelease
11068                       - HelmChart
11069                       - HelmRepository
11070                       - ImageRepository
11071                       - ImagePolicy
11072                       - ImageUpdateAutomation
11073                       - OCIRepository
11074                       type: string
11075                     matchLabels:
11076                       additionalProperties:
11077                         type: string
11078                       description: |-
11079                         MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
11080                         map is equivalent to an element of matchExpressions, whose key field is "key", the
11081                         operator is "In", and the values array contains only "value". The requirements are ANDed.
11082                         MatchLabels requires the name to be set to `*`.
11083                       type: object
11084                     name:
11085                       description: |-
11086                         Name of the referent
11087                         If multiple resources are targeted `*` may be set.
11088                       maxLength: 53
11089                       minLength: 1
11090                       type: string
11091                     namespace:
11092                       description: Namespace of the referent
11093                       maxLength: 53
11094                       minLength: 1
11095                       type: string
11096                   required:
11097                   - kind
11098                   - name
11099                   type: object
11100                 type: array
11101               exclusionList:
11102                 description: |-
11103                   ExclusionList specifies a list of Golang regular expressions
11104                   to be used for excluding messages.
11105                 items:
11106                   type: string
11107                 type: array
11108               inclusionList:
11109                 description: |-
11110                   InclusionList specifies a list of Golang regular expressions
11111                   to be used for including messages.
11112                 items:
11113                   type: string
11114                 type: array
11115               providerRef:
11116                 description: ProviderRef specifies which Provider this Alert should
11117                   use.
11118                 properties:
11119                   name:
11120                     description: Name of the referent.
11121                     type: string
11122                 required:
11123                 - name
11124                 type: object
11125               summary:
11126                 description: Summary holds a short description of the impact and affected
11127                   cluster.
11128                 maxLength: 255
11129                 type: string
11130               suspend:
11131                 description: |-
11132                   Suspend tells the controller to suspend subsequent
11133                   events handling for this Alert.
11134                 type: boolean
11135             required:
11136             - eventSources
11137             - providerRef
11138             type: object
11139         type: object
11140     served: true
11141     storage: true
11142     subresources: {}
11143 ---
11144 apiVersion: apiextensions.k8s.io/v1
11145 kind: CustomResourceDefinition
11146 metadata:
11147   annotations:
11148     controller-gen.kubebuilder.io/version: v0.16.1
11149   labels:
11150     app.kubernetes.io/component: notification-controller
11151     app.kubernetes.io/instance: flux-system
11152     app.kubernetes.io/part-of: flux
11153     app.kubernetes.io/version: v2.4.0
11154   name: providers.notification.toolkit.fluxcd.io
11155 spec:
11156   group: notification.toolkit.fluxcd.io
11157   names:
11158     kind: Provider
11159     listKind: ProviderList
11160     plural: providers
11161     singular: provider
11162   scope: Namespaced
11163   versions:
11164   - additionalPrinterColumns:
11165     - jsonPath: .metadata.creationTimestamp
11166       name: Age
11167       type: date
11168     - jsonPath: .status.conditions[?(@.type=="Ready")].status
11169       name: Ready
11170       type: string
11171     - jsonPath: .status.conditions[?(@.type=="Ready")].message
11172       name: Status
11173       type: string
11174     deprecated: true
11175     deprecationWarning: v1beta1 Provider is deprecated, upgrade to v1beta3
11176     name: v1beta1
11177     schema:
11178       openAPIV3Schema:
11179         description: Provider is the Schema for the providers API
11180         properties:
11181           apiVersion:
11182             description: |-
11183               APIVersion defines the versioned schema of this representation of an object.
11184               Servers should convert recognized schemas to the latest internal value, and
11185               may reject unrecognized values.
11186               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
11187             type: string
11188           kind:
11189             description: |-
11190               Kind is a string value representing the REST resource this object represents.
11191               Servers may infer this from the endpoint the client submits requests to.
11192               Cannot be updated.
11193               In CamelCase.
11194               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
11195             type: string
11196           metadata:
11197             type: object
11198           spec:
11199             description: ProviderSpec defines the desired state of Provider
11200             properties:
11201               address:
11202                 description: HTTP/S webhook address of this provider
11203                 pattern: ^(http|https)://
11204                 type: string
11205               certSecretRef:
11206                 description: |-
11207                   CertSecretRef can be given the name of a secret containing
11208                   a PEM-encoded CA certificate (`caFile`)
11209                 properties:
11210                   name:
11211                     description: Name of the referent.
11212                     type: string
11213                 required:
11214                 - name
11215                 type: object
11216               channel:
11217                 description: Alert channel for this provider
11218                 type: string
11219               proxy:
11220                 description: HTTP/S address of the proxy
11221                 pattern: ^(http|https)://
11222                 type: string
11223               secretRef:
11224                 description: |-
11225                   Secret reference containing the provider webhook URL
11226                   using "address" as data key
11227                 properties:
11228                   name:
11229                     description: Name of the referent.
11230                     type: string
11231                 required:
11232                 - name
11233                 type: object
11234               suspend:
11235                 description: |-
11236                   This flag tells the controller to suspend subsequent events handling.
11237                   Defaults to false.
11238                 type: boolean
11239               timeout:
11240                 description: Timeout for sending alerts to the provider.
11241                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
11242                 type: string
11243               type:
11244                 description: Type of provider
11245                 enum:
11246                 - slack
11247                 - discord
11248                 - msteams
11249                 - rocket
11250                 - generic
11251                 - generic-hmac
11252                 - github
11253                 - gitlab
11254                 - bitbucket
11255                 - azuredevops
11256                 - googlechat
11257                 - webex
11258                 - sentry
11259                 - azureeventhub
11260                 - telegram
11261                 - lark
11262                 - matrix
11263                 - opsgenie
11264                 - alertmanager
11265                 - grafana
11266                 - githubdispatch
11267                 type: string
11268               username:
11269                 description: Bot username for this provider
11270                 type: string
11271             required:
11272             - type
11273             type: object
11274           status:
11275             default:
11276               observedGeneration: -1
11277             description: ProviderStatus defines the observed state of Provider
11278             properties:
11279               conditions:
11280                 items:
11281                   description: Condition contains details for one aspect of the current
11282                     state of this API Resource.
11283                   properties:
11284                     lastTransitionTime:
11285                       description: |-
11286                         lastTransitionTime is the last time the condition transitioned from one status to another.
11287                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
11288                       format: date-time
11289                       type: string
11290                     message:
11291                       description: |-
11292                         message is a human readable message indicating details about the transition.
11293                         This may be an empty string.
11294                       maxLength: 32768
11295                       type: string
11296                     observedGeneration:
11297                       description: |-
11298                         observedGeneration represents the .metadata.generation that the condition was set based upon.
11299                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
11300                         with respect to the current state of the instance.
11301                       format: int64
11302                       minimum: 0
11303                       type: integer
11304                     reason:
11305                       description: |-
11306                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
11307                         Producers of specific condition types may define expected values and meanings for this field,
11308                         and whether the values are considered a guaranteed API.
11309                         The value should be a CamelCase string.
11310                         This field may not be empty.
11311                       maxLength: 1024
11312                       minLength: 1
11313                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
11314                       type: string
11315                     status:
11316                       description: status of the condition, one of True, False, Unknown.
11317                       enum:
11318                       - "True"
11319                       - "False"
11320                       - Unknown
11321                       type: string
11322                     type:
11323                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
11324                       maxLength: 316
11325                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
11326                       type: string
11327                   required:
11328                   - lastTransitionTime
11329                   - message
11330                   - reason
11331                   - status
11332                   - type
11333                   type: object
11334                 type: array
11335               observedGeneration:
11336                 description: ObservedGeneration is the last reconciled generation.
11337                 format: int64
11338                 type: integer
11339             type: object
11340         type: object
11341     served: true
11342     storage: false
11343     subresources:
11344       status: {}
11345   - additionalPrinterColumns:
11346     - jsonPath: .metadata.creationTimestamp
11347       name: Age
11348       type: date
11349     - jsonPath: .status.conditions[?(@.type=="Ready")].status
11350       name: Ready
11351       type: string
11352     - jsonPath: .status.conditions[?(@.type=="Ready")].message
11353       name: Status
11354       type: string
11355     deprecated: true
11356     deprecationWarning: v1beta2 Provider is deprecated, upgrade to v1beta3
11357     name: v1beta2
11358     schema:
11359       openAPIV3Schema:
11360         description: Provider is the Schema for the providers API.
11361         properties:
11362           apiVersion:
11363             description: |-
11364               APIVersion defines the versioned schema of this representation of an object.
11365               Servers should convert recognized schemas to the latest internal value, and
11366               may reject unrecognized values.
11367               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
11368             type: string
11369           kind:
11370             description: |-
11371               Kind is a string value representing the REST resource this object represents.
11372               Servers may infer this from the endpoint the client submits requests to.
11373               Cannot be updated.
11374               In CamelCase.
11375               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
11376             type: string
11377           metadata:
11378             type: object
11379           spec:
11380             description: ProviderSpec defines the desired state of the Provider.
11381             properties:
11382               address:
11383                 description: |-
11384                   Address specifies the endpoint, in a generic sense, to where alerts are sent.
11385                   What kind of endpoint depends on the specific Provider type being used.
11386                   For the generic Provider, for example, this is an HTTP/S address.
11387                   For other Provider types this could be a project ID or a namespace.
11388                 maxLength: 2048
11389                 type: string
11390               certSecretRef:
11391                 description: |-
11392                   CertSecretRef specifies the Secret containing
11393                   a PEM-encoded CA certificate (in the `ca.crt` key).
11394
11395                   Note: Support for the `caFile` key has
11396                   been deprecated.
11397                 properties:
11398                   name:
11399                     description: Name of the referent.
11400                     type: string
11401                 required:
11402                 - name
11403                 type: object
11404               channel:
11405                 description: Channel specifies the destination channel where events
11406                   should be posted.
11407                 maxLength: 2048
11408                 type: string
11409               interval:
11410                 description: Interval at which to reconcile the Provider with its
11411                   Secret references.
11412                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
11413                 type: string
11414               proxy:
11415                 description: Proxy the HTTP/S address of the proxy server.
11416                 maxLength: 2048
11417                 pattern: ^(http|https)://.*$
11418                 type: string
11419               secretRef:
11420                 description: |-
11421                   SecretRef specifies the Secret containing the authentication
11422                   credentials for this Provider.
11423                 properties:
11424                   name:
11425                     description: Name of the referent.
11426                     type: string
11427                 required:
11428                 - name
11429                 type: object
11430               suspend:
11431                 description: |-
11432                   Suspend tells the controller to suspend subsequent
11433                   events handling for this Provider.
11434                 type: boolean
11435               timeout:
11436                 description: Timeout for sending alerts to the Provider.
11437                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
11438                 type: string
11439               type:
11440                 description: Type specifies which Provider implementation to use.
11441                 enum:
11442                 - slack
11443                 - discord
11444                 - msteams
11445                 - rocket
11446                 - generic
11447                 - generic-hmac
11448                 - github
11449                 - gitlab
11450                 - gitea
11451                 - bitbucketserver
11452                 - bitbucket
11453                 - azuredevops
11454                 - googlechat
11455                 - googlepubsub
11456                 - webex
11457                 - sentry
11458                 - azureeventhub
11459                 - telegram
11460                 - lark
11461                 - matrix
11462                 - opsgenie
11463                 - alertmanager
11464                 - grafana
11465                 - githubdispatch
11466                 - pagerduty
11467                 - datadog
11468                 type: string
11469               username:
11470                 description: Username specifies the name under which events are posted.
11471                 maxLength: 2048
11472                 type: string
11473             required:
11474             - type
11475             type: object
11476           status:
11477             default:
11478               observedGeneration: -1
11479             description: ProviderStatus defines the observed state of the Provider.
11480             properties:
11481               conditions:
11482                 description: Conditions holds the conditions for the Provider.
11483                 items:
11484                   description: Condition contains details for one aspect of the current
11485                     state of this API Resource.
11486                   properties:
11487                     lastTransitionTime:
11488                       description: |-
11489                         lastTransitionTime is the last time the condition transitioned from one status to another.
11490                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
11491                       format: date-time
11492                       type: string
11493                     message:
11494                       description: |-
11495                         message is a human readable message indicating details about the transition.
11496                         This may be an empty string.
11497                       maxLength: 32768
11498                       type: string
11499                     observedGeneration:
11500                       description: |-
11501                         observedGeneration represents the .metadata.generation that the condition was set based upon.
11502                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
11503                         with respect to the current state of the instance.
11504                       format: int64
11505                       minimum: 0
11506                       type: integer
11507                     reason:
11508                       description: |-
11509                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
11510                         Producers of specific condition types may define expected values and meanings for this field,
11511                         and whether the values are considered a guaranteed API.
11512                         The value should be a CamelCase string.
11513                         This field may not be empty.
11514                       maxLength: 1024
11515                       minLength: 1
11516                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
11517                       type: string
11518                     status:
11519                       description: status of the condition, one of True, False, Unknown.
11520                       enum:
11521                       - "True"
11522                       - "False"
11523                       - Unknown
11524                       type: string
11525                     type:
11526                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
11527                       maxLength: 316
11528                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
11529                       type: string
11530                   required:
11531                   - lastTransitionTime
11532                   - message
11533                   - reason
11534                   - status
11535                   - type
11536                   type: object
11537                 type: array
11538               lastHandledReconcileAt:
11539                 description: |-
11540                   LastHandledReconcileAt holds the value of the most recent
11541                   reconcile request value, so a change of the annotation value
11542                   can be detected.
11543                 type: string
11544               observedGeneration:
11545                 description: ObservedGeneration is the last reconciled generation.
11546                 format: int64
11547                 type: integer
11548             type: object
11549         type: object
11550     served: true
11551     storage: false
11552     subresources:
11553       status: {}
11554   - additionalPrinterColumns:
11555     - jsonPath: .metadata.creationTimestamp
11556       name: Age
11557       type: date
11558     name: v1beta3
11559     schema:
11560       openAPIV3Schema:
11561         description: Provider is the Schema for the providers API
11562         properties:
11563           apiVersion:
11564             description: |-
11565               APIVersion defines the versioned schema of this representation of an object.
11566               Servers should convert recognized schemas to the latest internal value, and
11567               may reject unrecognized values.
11568               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
11569             type: string
11570           kind:
11571             description: |-
11572               Kind is a string value representing the REST resource this object represents.
11573               Servers may infer this from the endpoint the client submits requests to.
11574               Cannot be updated.
11575               In CamelCase.
11576               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
11577             type: string
11578           metadata:
11579             type: object
11580           spec:
11581             description: ProviderSpec defines the desired state of the Provider.
11582             properties:
11583               address:
11584                 description: |-
11585                   Address specifies the endpoint, in a generic sense, to where alerts are sent.
11586                   What kind of endpoint depends on the specific Provider type being used.
11587                   For the generic Provider, for example, this is an HTTP/S address.
11588                   For other Provider types this could be a project ID or a namespace.
11589                 maxLength: 2048
11590                 type: string
11591               certSecretRef:
11592                 description: |-
11593                   CertSecretRef specifies the Secret containing
11594                   a PEM-encoded CA certificate (in the `ca.crt` key).
11595
11596                   Note: Support for the `caFile` key has
11597                   been deprecated.
11598                 properties:
11599                   name:
11600                     description: Name of the referent.
11601                     type: string
11602                 required:
11603                 - name
11604                 type: object
11605               channel:
11606                 description: Channel specifies the destination channel where events
11607                   should be posted.
11608                 maxLength: 2048
11609                 type: string
11610               interval:
11611                 description: |-
11612                   Interval at which to reconcile the Provider with its Secret references.
11613                   Deprecated and not used in v1beta3.
11614                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
11615                 type: string
11616               proxy:
11617                 description: Proxy the HTTP/S address of the proxy server.
11618                 maxLength: 2048
11619                 pattern: ^(http|https)://.*$
11620                 type: string
11621               secretRef:
11622                 description: |-
11623                   SecretRef specifies the Secret containing the authentication
11624                   credentials for this Provider.
11625                 properties:
11626                   name:
11627                     description: Name of the referent.
11628                     type: string
11629                 required:
11630                 - name
11631                 type: object
11632               suspend:
11633                 description: |-
11634                   Suspend tells the controller to suspend subsequent
11635                   events handling for this Provider.
11636                 type: boolean
11637               timeout:
11638                 description: Timeout for sending alerts to the Provider.
11639                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
11640                 type: string
11641               type:
11642                 description: Type specifies which Provider implementation to use.
11643                 enum:
11644                 - slack
11645                 - discord
11646                 - msteams
11647                 - rocket
11648                 - generic
11649                 - generic-hmac
11650                 - github
11651                 - gitlab
11652                 - gitea
11653                 - bitbucketserver
11654                 - bitbucket
11655                 - azuredevops
11656                 - googlechat
11657                 - googlepubsub
11658                 - webex
11659                 - sentry
11660                 - azureeventhub
11661                 - telegram
11662                 - lark
11663                 - matrix
11664                 - opsgenie
11665                 - alertmanager
11666                 - grafana
11667                 - githubdispatch
11668                 - pagerduty
11669                 - datadog
11670                 - nats
11671                 type: string
11672               username:
11673                 description: Username specifies the name under which events are posted.
11674                 maxLength: 2048
11675                 type: string
11676             required:
11677             - type
11678             type: object
11679         type: object
11680     served: true
11681     storage: true
11682     subresources: {}
11683 ---
11684 apiVersion: apiextensions.k8s.io/v1
11685 kind: CustomResourceDefinition
11686 metadata:
11687   annotations:
11688     controller-gen.kubebuilder.io/version: v0.16.1
11689   labels:
11690     app.kubernetes.io/component: notification-controller
11691     app.kubernetes.io/instance: flux-system
11692     app.kubernetes.io/part-of: flux
11693     app.kubernetes.io/version: v2.4.0
11694   name: receivers.notification.toolkit.fluxcd.io
11695 spec:
11696   group: notification.toolkit.fluxcd.io
11697   names:
11698     kind: Receiver
11699     listKind: ReceiverList
11700     plural: receivers
11701     singular: receiver
11702   scope: Namespaced
11703   versions:
11704   - additionalPrinterColumns:
11705     - jsonPath: .metadata.creationTimestamp
11706       name: Age
11707       type: date
11708     - jsonPath: .status.conditions[?(@.type=="Ready")].status
11709       name: Ready
11710       type: string
11711     - jsonPath: .status.conditions[?(@.type=="Ready")].message
11712       name: Status
11713       type: string
11714     name: v1
11715     schema:
11716       openAPIV3Schema:
11717         description: Receiver is the Schema for the receivers API.
11718         properties:
11719           apiVersion:
11720             description: |-
11721               APIVersion defines the versioned schema of this representation of an object.
11722               Servers should convert recognized schemas to the latest internal value, and
11723               may reject unrecognized values.
11724               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
11725             type: string
11726           kind:
11727             description: |-
11728               Kind is a string value representing the REST resource this object represents.
11729               Servers may infer this from the endpoint the client submits requests to.
11730               Cannot be updated.
11731               In CamelCase.
11732               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
11733             type: string
11734           metadata:
11735             type: object
11736           spec:
11737             description: ReceiverSpec defines the desired state of the Receiver.
11738             properties:
11739               events:
11740                 description: |-
11741                   Events specifies the list of event types to handle,
11742                   e.g. 'push' for GitHub or 'Push Hook' for GitLab.
11743                 items:
11744                   type: string
11745                 type: array
11746               interval:
11747                 default: 10m
11748                 description: Interval at which to reconcile the Receiver with its
11749                   Secret references.
11750                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
11751                 type: string
11752               resources:
11753                 description: A list of resources to be notified about changes.
11754                 items:
11755                   description: |-
11756                     CrossNamespaceObjectReference contains enough information to let you locate the
11757                     typed referenced object at cluster level
11758                   properties:
11759                     apiVersion:
11760                       description: API version of the referent
11761                       type: string
11762                     kind:
11763                       description: Kind of the referent
11764                       enum:
11765                       - Bucket
11766                       - GitRepository
11767                       - Kustomization
11768                       - HelmRelease
11769                       - HelmChart
11770                       - HelmRepository
11771                       - ImageRepository
11772                       - ImagePolicy
11773                       - ImageUpdateAutomation
11774                       - OCIRepository
11775                       type: string
11776                     matchLabels:
11777                       additionalProperties:
11778                         type: string
11779                       description: |-
11780                         MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
11781                         map is equivalent to an element of matchExpressions, whose key field is "key", the
11782                         operator is "In", and the values array contains only "value". The requirements are ANDed.
11783                         MatchLabels requires the name to be set to `*`.
11784                       type: object
11785                     name:
11786                       description: |-
11787                         Name of the referent
11788                         If multiple resources are targeted `*` may be set.
11789                       maxLength: 53
11790                       minLength: 1
11791                       type: string
11792                     namespace:
11793                       description: Namespace of the referent
11794                       maxLength: 53
11795                       minLength: 1
11796                       type: string
11797                   required:
11798                   - kind
11799                   - name
11800                   type: object
11801                 type: array
11802               secretRef:
11803                 description: |-
11804                   SecretRef specifies the Secret containing the token used
11805                   to validate the payload authenticity.
11806                 properties:
11807                   name:
11808                     description: Name of the referent.
11809                     type: string
11810                 required:
11811                 - name
11812                 type: object
11813               suspend:
11814                 description: |-
11815                   Suspend tells the controller to suspend subsequent
11816                   events handling for this receiver.
11817                 type: boolean
11818               type:
11819                 description: |-
11820                   Type of webhook sender, used to determine
11821                   the validation procedure and payload deserialization.
11822                 enum:
11823                 - generic
11824                 - generic-hmac
11825                 - github
11826                 - gitlab
11827                 - bitbucket
11828                 - harbor
11829                 - dockerhub
11830                 - quay
11831                 - gcr
11832                 - nexus
11833                 - acr
11834                 - cdevents
11835                 type: string
11836             required:
11837             - resources
11838             - secretRef
11839             - type
11840             type: object
11841           status:
11842             default:
11843               observedGeneration: -1
11844             description: ReceiverStatus defines the observed state of the Receiver.
11845             properties:
11846               conditions:
11847                 description: Conditions holds the conditions for the Receiver.
11848                 items:
11849                   description: Condition contains details for one aspect of the current
11850                     state of this API Resource.
11851                   properties:
11852                     lastTransitionTime:
11853                       description: |-
11854                         lastTransitionTime is the last time the condition transitioned from one status to another.
11855                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
11856                       format: date-time
11857                       type: string
11858                     message:
11859                       description: |-
11860                         message is a human readable message indicating details about the transition.
11861                         This may be an empty string.
11862                       maxLength: 32768
11863                       type: string
11864                     observedGeneration:
11865                       description: |-
11866                         observedGeneration represents the .metadata.generation that the condition was set based upon.
11867                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
11868                         with respect to the current state of the instance.
11869                       format: int64
11870                       minimum: 0
11871                       type: integer
11872                     reason:
11873                       description: |-
11874                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
11875                         Producers of specific condition types may define expected values and meanings for this field,
11876                         and whether the values are considered a guaranteed API.
11877                         The value should be a CamelCase string.
11878                         This field may not be empty.
11879                       maxLength: 1024
11880                       minLength: 1
11881                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
11882                       type: string
11883                     status:
11884                       description: status of the condition, one of True, False, Unknown.
11885                       enum:
11886                       - "True"
11887                       - "False"
11888                       - Unknown
11889                       type: string
11890                     type:
11891                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
11892                       maxLength: 316
11893                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
11894                       type: string
11895                   required:
11896                   - lastTransitionTime
11897                   - message
11898                   - reason
11899                   - status
11900                   - type
11901                   type: object
11902                 type: array
11903               lastHandledReconcileAt:
11904                 description: |-
11905                   LastHandledReconcileAt holds the value of the most recent
11906                   reconcile request value, so a change of the annotation value
11907                   can be detected.
11908                 type: string
11909               observedGeneration:
11910                 description: ObservedGeneration is the last observed generation of
11911                   the Receiver object.
11912                 format: int64
11913                 type: integer
11914               webhookPath:
11915                 description: |-
11916                   WebhookPath is the generated incoming webhook address in the format
11917                   of '/hook/sha256sum(token+name+namespace)'.
11918                 type: string
11919             type: object
11920         type: object
11921     served: true
11922     storage: true
11923     subresources:
11924       status: {}
11925   - additionalPrinterColumns:
11926     - jsonPath: .metadata.creationTimestamp
11927       name: Age
11928       type: date
11929     - jsonPath: .status.conditions[?(@.type=="Ready")].status
11930       name: Ready
11931       type: string
11932     - jsonPath: .status.conditions[?(@.type=="Ready")].message
11933       name: Status
11934       type: string
11935     deprecated: true
11936     deprecationWarning: v1beta1 Receiver is deprecated, upgrade to v1
11937     name: v1beta1
11938     schema:
11939       openAPIV3Schema:
11940         description: Receiver is the Schema for the receivers API
11941         properties:
11942           apiVersion:
11943             description: |-
11944               APIVersion defines the versioned schema of this representation of an object.
11945               Servers should convert recognized schemas to the latest internal value, and
11946               may reject unrecognized values.
11947               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
11948             type: string
11949           kind:
11950             description: |-
11951               Kind is a string value representing the REST resource this object represents.
11952               Servers may infer this from the endpoint the client submits requests to.
11953               Cannot be updated.
11954               In CamelCase.
11955               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
11956             type: string
11957           metadata:
11958             type: object
11959           spec:
11960             description: ReceiverSpec defines the desired state of Receiver
11961             properties:
11962               events:
11963                 description: |-
11964                   A list of events to handle,
11965                   e.g. 'push' for GitHub or 'Push Hook' for GitLab.
11966                 items:
11967                   type: string
11968                 type: array
11969               resources:
11970                 description: A list of resources to be notified about changes.
11971                 items:
11972                   description: |-
11973                     CrossNamespaceObjectReference contains enough information to let you locate the
11974                     typed referenced object at cluster level
11975                   properties:
11976                     apiVersion:
11977                       description: API version of the referent
11978                       type: string
11979                     kind:
11980                       description: Kind of the referent
11981                       enum:
11982                       - Bucket
11983                       - GitRepository
11984                       - Kustomization
11985                       - HelmRelease
11986                       - HelmChart
11987                       - HelmRepository
11988                       - ImageRepository
11989                       - ImagePolicy
11990                       - ImageUpdateAutomation
11991                       - OCIRepository
11992                       type: string
11993                     matchLabels:
11994                       additionalProperties:
11995                         type: string
11996                       description: |-
11997                         MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
11998                         map is equivalent to an element of matchExpressions, whose key field is "key", the
11999                         operator is "In", and the values array contains only "value". The requirements are ANDed.
12000                       type: object
12001                     name:
12002                       description: Name of the referent
12003                       maxLength: 53
12004                       minLength: 1
12005                       type: string
12006                     namespace:
12007                       description: Namespace of the referent
12008                       maxLength: 53
12009                       minLength: 1
12010                       type: string
12011                   required:
12012                   - kind
12013                   - name
12014                   type: object
12015                 type: array
12016               secretRef:
12017                 description: |-
12018                   Secret reference containing the token used
12019                   to validate the payload authenticity
12020                 properties:
12021                   name:
12022                     description: Name of the referent.
12023                     type: string
12024                 required:
12025                 - name
12026                 type: object
12027               suspend:
12028                 description: |-
12029                   This flag tells the controller to suspend subsequent events handling.
12030                   Defaults to false.
12031                 type: boolean
12032               type:
12033                 description: |-
12034                   Type of webhook sender, used to determine
12035                   the validation procedure and payload deserialization.
12036                 enum:
12037                 - generic
12038                 - generic-hmac
12039                 - github
12040                 - gitlab
12041                 - bitbucket
12042                 - harbor
12043                 - dockerhub
12044                 - quay
12045                 - gcr
12046                 - nexus
12047                 - acr
12048                 type: string
12049             required:
12050             - resources
12051             - secretRef
12052             - type
12053             type: object
12054           status:
12055             default:
12056               observedGeneration: -1
12057             description: ReceiverStatus defines the observed state of Receiver
12058             properties:
12059               conditions:
12060                 items:
12061                   description: Condition contains details for one aspect of the current
12062                     state of this API Resource.
12063                   properties:
12064                     lastTransitionTime:
12065                       description: |-
12066                         lastTransitionTime is the last time the condition transitioned from one status to another.
12067                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
12068                       format: date-time
12069                       type: string
12070                     message:
12071                       description: |-
12072                         message is a human readable message indicating details about the transition.
12073                         This may be an empty string.
12074                       maxLength: 32768
12075                       type: string
12076                     observedGeneration:
12077                       description: |-
12078                         observedGeneration represents the .metadata.generation that the condition was set based upon.
12079                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
12080                         with respect to the current state of the instance.
12081                       format: int64
12082                       minimum: 0
12083                       type: integer
12084                     reason:
12085                       description: |-
12086                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
12087                         Producers of specific condition types may define expected values and meanings for this field,
12088                         and whether the values are considered a guaranteed API.
12089                         The value should be a CamelCase string.
12090                         This field may not be empty.
12091                       maxLength: 1024
12092                       minLength: 1
12093                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
12094                       type: string
12095                     status:
12096                       description: status of the condition, one of True, False, Unknown.
12097                       enum:
12098                       - "True"
12099                       - "False"
12100                       - Unknown
12101                       type: string
12102                     type:
12103                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
12104                       maxLength: 316
12105                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
12106                       type: string
12107                   required:
12108                   - lastTransitionTime
12109                   - message
12110                   - reason
12111                   - status
12112                   - type
12113                   type: object
12114                 type: array
12115               observedGeneration:
12116                 description: ObservedGeneration is the last observed generation.
12117                 format: int64
12118                 type: integer
12119               url:
12120                 description: |-
12121                   Generated webhook URL in the format
12122                   of '/hook/sha256sum(token+name+namespace)'.
12123                 type: string
12124             type: object
12125         type: object
12126     served: true
12127     storage: false
12128     subresources:
12129       status: {}
12130   - additionalPrinterColumns:
12131     - jsonPath: .metadata.creationTimestamp
12132       name: Age
12133       type: date
12134     - jsonPath: .status.conditions[?(@.type=="Ready")].status
12135       name: Ready
12136       type: string
12137     - jsonPath: .status.conditions[?(@.type=="Ready")].message
12138       name: Status
12139       type: string
12140     deprecated: true
12141     deprecationWarning: v1beta2 Receiver is deprecated, upgrade to v1
12142     name: v1beta2
12143     schema:
12144       openAPIV3Schema:
12145         description: Receiver is the Schema for the receivers API.
12146         properties:
12147           apiVersion:
12148             description: |-
12149               APIVersion defines the versioned schema of this representation of an object.
12150               Servers should convert recognized schemas to the latest internal value, and
12151               may reject unrecognized values.
12152               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
12153             type: string
12154           kind:
12155             description: |-
12156               Kind is a string value representing the REST resource this object represents.
12157               Servers may infer this from the endpoint the client submits requests to.
12158               Cannot be updated.
12159               In CamelCase.
12160               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
12161             type: string
12162           metadata:
12163             type: object
12164           spec:
12165             description: ReceiverSpec defines the desired state of the Receiver.
12166             properties:
12167               events:
12168                 description: |-
12169                   Events specifies the list of event types to handle,
12170                   e.g. 'push' for GitHub or 'Push Hook' for GitLab.
12171                 items:
12172                   type: string
12173                 type: array
12174               interval:
12175                 description: Interval at which to reconcile the Receiver with its
12176                   Secret references.
12177                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
12178                 type: string
12179               resources:
12180                 description: A list of resources to be notified about changes.
12181                 items:
12182                   description: |-
12183                     CrossNamespaceObjectReference contains enough information to let you locate the
12184                     typed referenced object at cluster level
12185                   properties:
12186                     apiVersion:
12187                       description: API version of the referent
12188                       type: string
12189                     kind:
12190                       description: Kind of the referent
12191                       enum:
12192                       - Bucket
12193                       - GitRepository
12194                       - Kustomization
12195                       - HelmRelease
12196                       - HelmChart
12197                       - HelmRepository
12198                       - ImageRepository
12199                       - ImagePolicy
12200                       - ImageUpdateAutomation
12201                       - OCIRepository
12202                       type: string
12203                     matchLabels:
12204                       additionalProperties:
12205                         type: string
12206                       description: |-
12207                         MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
12208                         map is equivalent to an element of matchExpressions, whose key field is "key", the
12209                         operator is "In", and the values array contains only "value". The requirements are ANDed.
12210                         MatchLabels requires the name to be set to `*`.
12211                       type: object
12212                     name:
12213                       description: |-
12214                         Name of the referent
12215                         If multiple resources are targeted `*` may be set.
12216                       maxLength: 53
12217                       minLength: 1
12218                       type: string
12219                     namespace:
12220                       description: Namespace of the referent
12221                       maxLength: 53
12222                       minLength: 1
12223                       type: string
12224                   required:
12225                   - kind
12226                   - name
12227                   type: object
12228                 type: array
12229               secretRef:
12230                 description: |-
12231                   SecretRef specifies the Secret containing the token used
12232                   to validate the payload authenticity.
12233                 properties:
12234                   name:
12235                     description: Name of the referent.
12236                     type: string
12237                 required:
12238                 - name
12239                 type: object
12240               suspend:
12241                 description: |-
12242                   Suspend tells the controller to suspend subsequent
12243                   events handling for this receiver.
12244                 type: boolean
12245               type:
12246                 description: |-
12247                   Type of webhook sender, used to determine
12248                   the validation procedure and payload deserialization.
12249                 enum:
12250                 - generic
12251                 - generic-hmac
12252                 - github
12253                 - gitlab
12254                 - bitbucket
12255                 - harbor
12256                 - dockerhub
12257                 - quay
12258                 - gcr
12259                 - nexus
12260                 - acr
12261                 type: string
12262             required:
12263             - resources
12264             - secretRef
12265             - type
12266             type: object
12267           status:
12268             default:
12269               observedGeneration: -1
12270             description: ReceiverStatus defines the observed state of the Receiver.
12271             properties:
12272               conditions:
12273                 description: Conditions holds the conditions for the Receiver.
12274                 items:
12275                   description: Condition contains details for one aspect of the current
12276                     state of this API Resource.
12277                   properties:
12278                     lastTransitionTime:
12279                       description: |-
12280                         lastTransitionTime is the last time the condition transitioned from one status to another.
12281                         This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
12282                       format: date-time
12283                       type: string
12284                     message:
12285                       description: |-
12286                         message is a human readable message indicating details about the transition.
12287                         This may be an empty string.
12288                       maxLength: 32768
12289                       type: string
12290                     observedGeneration:
12291                       description: |-
12292                         observedGeneration represents the .metadata.generation that the condition was set based upon.
12293                         For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
12294                         with respect to the current state of the instance.
12295                       format: int64
12296                       minimum: 0
12297                       type: integer
12298                     reason:
12299                       description: |-
12300                         reason contains a programmatic identifier indicating the reason for the condition's last transition.
12301                         Producers of specific condition types may define expected values and meanings for this field,
12302                         and whether the values are considered a guaranteed API.
12303                         The value should be a CamelCase string.
12304                         This field may not be empty.
12305                       maxLength: 1024
12306                       minLength: 1
12307                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
12308                       type: string
12309                     status:
12310                       description: status of the condition, one of True, False, Unknown.
12311                       enum:
12312                       - "True"
12313                       - "False"
12314                       - Unknown
12315                       type: string
12316                     type:
12317                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
12318                       maxLength: 316
12319                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
12320                       type: string
12321                   required:
12322                   - lastTransitionTime
12323                   - message
12324                   - reason
12325                   - status
12326                   - type
12327                   type: object
12328                 type: array
12329               lastHandledReconcileAt:
12330                 description: |-
12331                   LastHandledReconcileAt holds the value of the most recent
12332                   reconcile request value, so a change of the annotation value
12333                   can be detected.
12334                 type: string
12335               observedGeneration:
12336                 description: ObservedGeneration is the last observed generation of
12337                   the Receiver object.
12338                 format: int64
12339                 type: integer
12340               url:
12341                 description: |-
12342                   URL is the generated incoming webhook address in the format
12343                   of '/hook/sha256sum(token+name+namespace)'.
12344                   Deprecated: Replaced by WebhookPath.
12345                 type: string
12346               webhookPath:
12347                 description: |-
12348                   WebhookPath is the generated incoming webhook address in the format
12349                   of '/hook/sha256sum(token+name+namespace)'.
12350                 type: string
12351             type: object
12352         type: object
12353     served: true
12354     storage: false
12355     subresources:
12356       status: {}
12357 ---
12358 apiVersion: v1
12359 kind: ServiceAccount
12360 metadata:
12361   labels:
12362     app.kubernetes.io/component: notification-controller
12363     app.kubernetes.io/instance: flux-system
12364     app.kubernetes.io/part-of: flux
12365     app.kubernetes.io/version: v2.4.0
12366   name: notification-controller
12367   namespace: flux-system
12368 ---
12369 apiVersion: v1
12370 kind: Service
12371 metadata:
12372   labels:
12373     app.kubernetes.io/component: notification-controller
12374     app.kubernetes.io/instance: flux-system
12375     app.kubernetes.io/part-of: flux
12376     app.kubernetes.io/version: v2.4.0
12377     control-plane: controller
12378   name: notification-controller
12379   namespace: flux-system
12380 spec:
12381   ports:
12382   - name: http
12383     port: 80
12384     protocol: TCP
12385     targetPort: http
12386   selector:
12387     app: notification-controller
12388   type: ClusterIP
12389 ---
12390 apiVersion: v1
12391 kind: Service
12392 metadata:
12393   labels:
12394     app.kubernetes.io/component: notification-controller
12395     app.kubernetes.io/instance: flux-system
12396     app.kubernetes.io/part-of: flux
12397     app.kubernetes.io/version: v2.4.0
12398     control-plane: controller
12399   name: webhook-receiver
12400   namespace: flux-system
12401 spec:
12402   ports:
12403   - name: http
12404     port: 80
12405     protocol: TCP
12406     targetPort: http-webhook
12407   selector:
12408     app: notification-controller
12409   type: ClusterIP
12410 ---
12411 apiVersion: apps/v1
12412 kind: Deployment
12413 metadata:
12414   labels:
12415     app.kubernetes.io/component: notification-controller
12416     app.kubernetes.io/instance: flux-system
12417     app.kubernetes.io/part-of: flux
12418     app.kubernetes.io/version: v2.4.0
12419     control-plane: controller
12420   name: notification-controller
12421   namespace: flux-system
12422 spec:
12423   replicas: 1
12424   selector:
12425     matchLabels:
12426       app: notification-controller
12427   template:
12428     metadata:
12429       annotations:
12430         prometheus.io/port: "8080"
12431         prometheus.io/scrape: "true"
12432       labels:
12433         app: notification-controller
12434     spec:
12435       containers:
12436       - args:
12437         - --watch-all-namespaces=true
12438         - --log-level=info
12439         - --log-encoding=json
12440         - --enable-leader-election
12441         env:
12442         - name: RUNTIME_NAMESPACE
12443           valueFrom:
12444             fieldRef:
12445               fieldPath: metadata.namespace
12446         - name: GOMAXPROCS
12447           valueFrom:
12448             resourceFieldRef:
12449               containerName: manager
12450               resource: limits.cpu
12451         - name: GOMEMLIMIT
12452           valueFrom:
12453             resourceFieldRef:
12454               containerName: manager
12455               resource: limits.memory
12456         image: ghcr.io/fluxcd/notification-controller:v1.4.0
12457         imagePullPolicy: IfNotPresent
12458         livenessProbe:
12459           httpGet:
12460             path: /healthz
12461             port: healthz
12462         name: manager
12463         ports:
12464         - containerPort: 9090
12465           name: http
12466           protocol: TCP
12467         - containerPort: 9292
12468           name: http-webhook
12469           protocol: TCP
12470         - containerPort: 8080
12471           name: http-prom
12472           protocol: TCP
12473         - containerPort: 9440
12474           name: healthz
12475           protocol: TCP
12476         readinessProbe:
12477           httpGet:
12478             path: /readyz
12479             port: healthz
12480         resources:
12481           limits:
12482             cpu: 1000m
12483             memory: 1Gi
12484           requests:
12485             cpu: 100m
12486             memory: 64Mi
12487         securityContext:
12488           allowPrivilegeEscalation: false
12489           capabilities:
12490             drop:
12491             - ALL
12492           readOnlyRootFilesystem: true
12493           runAsNonRoot: true
12494           seccompProfile:
12495             type: RuntimeDefault
12496         volumeMounts:
12497         - mountPath: /tmp
12498           name: temp
12499       nodeSelector:
12500         kubernetes.io/os: linux
12501       securityContext:
12502         fsGroup: 1337
12503       serviceAccountName: notification-controller
12504       terminationGracePeriodSeconds: 10
12505       volumes:
12506       - emptyDir: {}
12507         name: temp