diff --git a/kubernetes-model-generator/kubernetes-model-core/pom.xml b/kubernetes-model-generator/kubernetes-model-core/pom.xml
index 70c7477c82b..ce754f23bfa 100644
--- a/kubernetes-model-generator/kubernetes-model-core/pom.xml
+++ b/kubernetes-model-generator/kubernetes-model-core/pom.xml
@@ -142,15 +142,12 @@
false
+ ${project.basedir}/../openapi/schemas/cluster-api.json
${openapi.schema.kubernetes-latest}
+ ${project.basedir}/../openapi/schemas/admission-registration.json
${project.basedir}/../openapi/schemas/api-machinery-extra.json
${project.basedir}/../openapi/schemas/kubernetes-config.json
- ${project.basedir}/../openapi/schemas/admission-registration.json
-
- io.fabric8.kubernetes.api.model
- io.fabric8.kubernetes.api.model
-
^io\.k8s\.apimachinery\.pkg\.runtime\.RawExtension$
@@ -159,6 +156,7 @@
^io\.k8s\.apimachinery\..*$
^io\.k8s\.kube-aggregator\.pkg\.apis\.apiregistration\..*$
^io\.k8s\.client-go\.tools\.clientcmd\.api\.v1\..*$
+ ^io\.k8s\.sigs\.cluster-api\.api\..*$
diff --git a/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/Bootstrap.java b/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/Bootstrap.java
new file mode 100644
index 00000000000..ba0992e8bac
--- /dev/null
+++ b/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/Bootstrap.java
@@ -0,0 +1,103 @@
+
+package io.fabric8.kubernetes.api.model.clusterapi.v1beta1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.sundr.builder.annotations.Buildable;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "configRef",
+ "dataSecretName"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder")
+@Generated("jsonschema2pojo")
+public class Bootstrap implements Editable , KubernetesResource
+{
+
+ @JsonProperty("configRef")
+ private ObjectReference configRef;
+ @JsonProperty("dataSecretName")
+ private String dataSecretName;
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public Bootstrap() {
+ }
+
+ public Bootstrap(ObjectReference configRef, String dataSecretName) {
+ super();
+ this.configRef = configRef;
+ this.dataSecretName = dataSecretName;
+ }
+
+ @JsonProperty("configRef")
+ public ObjectReference getConfigRef() {
+ return configRef;
+ }
+
+ @JsonProperty("configRef")
+ public void setConfigRef(ObjectReference configRef) {
+ this.configRef = configRef;
+ }
+
+ @JsonProperty("dataSecretName")
+ public String getDataSecretName() {
+ return dataSecretName;
+ }
+
+ @JsonProperty("dataSecretName")
+ public void setDataSecretName(String dataSecretName) {
+ this.dataSecretName = dataSecretName;
+ }
+
+ @JsonIgnore
+ public BootstrapBuilder edit() {
+ return new BootstrapBuilder(this);
+ }
+
+ @JsonIgnore
+ public BootstrapBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/metal3/v1alpha1/ProvisioningStatusConditions.java b/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/Condition.java
similarity index 68%
rename from kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/metal3/v1alpha1/ProvisioningStatusConditions.java
rename to kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/Condition.java
index 4075fc58f53..22abab8e06c 100644
--- a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/metal3/v1alpha1/ProvisioningStatusConditions.java
+++ b/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/Condition.java
@@ -1,5 +1,5 @@
-package io.fabric8.openshift.api.model.miscellaneous.metal3.v1alpha1;
+package io.fabric8.kubernetes.api.model.clusterapi.v1beta1;
import java.util.LinkedHashMap;
import java.util.Map;
@@ -12,18 +12,8 @@
import com.fasterxml.jackson.annotation.JsonPropertyOrder;
import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
import io.fabric8.kubernetes.api.builder.Editable;
-import io.fabric8.kubernetes.api.model.Container;
-import io.fabric8.kubernetes.api.model.IntOrString;
import io.fabric8.kubernetes.api.model.KubernetesResource;
-import io.fabric8.kubernetes.api.model.LabelSelector;
-import io.fabric8.kubernetes.api.model.LocalObjectReference;
-import io.fabric8.kubernetes.api.model.ObjectMeta;
-import io.fabric8.kubernetes.api.model.ObjectReference;
-import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
-import io.fabric8.kubernetes.api.model.PodTemplateSpec;
-import io.fabric8.kubernetes.api.model.ResourceRequirements;
import io.sundr.builder.annotations.Buildable;
-import io.sundr.builder.annotations.BuildableReference;
import lombok.EqualsAndHashCode;
import lombok.ToString;
import lombok.experimental.Accessors;
@@ -34,6 +24,7 @@
"lastTransitionTime",
"message",
"reason",
+ "severity",
"status",
"type"
})
@@ -43,19 +34,9 @@
"_",
""
})
-@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
- @BuildableReference(ObjectMeta.class),
- @BuildableReference(LabelSelector.class),
- @BuildableReference(Container.class),
- @BuildableReference(PodTemplateSpec.class),
- @BuildableReference(ResourceRequirements.class),
- @BuildableReference(IntOrString.class),
- @BuildableReference(ObjectReference.class),
- @BuildableReference(LocalObjectReference.class),
- @BuildableReference(PersistentVolumeClaim.class)
-})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder")
@Generated("jsonschema2pojo")
-public class ProvisioningStatusConditions implements Editable , KubernetesResource
+public class Condition implements Editable , KubernetesResource
{
@JsonProperty("lastTransitionTime")
@@ -64,6 +45,8 @@ public class ProvisioningStatusConditions implements Editable , KubernetesResource
+{
+
+ @JsonProperty("apiVersion")
+ private String apiVersion;
+ @JsonProperty("kind")
+ private String kind;
+ @JsonProperty("metadata")
+ private ObjectMeta metadata;
+ @JsonProperty("spec")
+ private MachineSpec spec;
+ @JsonProperty("status")
+ private MachineStatus status;
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public Machine() {
+ }
+
+ public Machine(String apiVersion, String kind, ObjectMeta metadata, MachineSpec spec, MachineStatus status) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ this.metadata = metadata;
+ this.spec = spec;
+ this.status = status;
+ }
+
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonProperty("metadata")
+ public ObjectMeta getMetadata() {
+ return metadata;
+ }
+
+ @JsonProperty("metadata")
+ public void setMetadata(ObjectMeta metadata) {
+ this.metadata = metadata;
+ }
+
+ @JsonProperty("spec")
+ public MachineSpec getSpec() {
+ return spec;
+ }
+
+ @JsonProperty("spec")
+ public void setSpec(MachineSpec spec) {
+ this.spec = spec;
+ }
+
+ @JsonProperty("status")
+ public MachineStatus getStatus() {
+ return status;
+ }
+
+ @JsonProperty("status")
+ public void setStatus(MachineStatus status) {
+ this.status = status;
+ }
+
+ @JsonIgnore
+ public MachineBuilder edit() {
+ return new MachineBuilder(this);
+ }
+
+ @JsonIgnore
+ public MachineBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/MachineAddress.java b/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/MachineAddress.java
new file mode 100644
index 00000000000..18302358f2f
--- /dev/null
+++ b/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/MachineAddress.java
@@ -0,0 +1,102 @@
+
+package io.fabric8.kubernetes.api.model.clusterapi.v1beta1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.sundr.builder.annotations.Buildable;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "address",
+ "type"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder")
+@Generated("jsonschema2pojo")
+public class MachineAddress implements Editable , KubernetesResource
+{
+
+ @JsonProperty("address")
+ private String address;
+ @JsonProperty("type")
+ private String type;
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public MachineAddress() {
+ }
+
+ public MachineAddress(String address, String type) {
+ super();
+ this.address = address;
+ this.type = type;
+ }
+
+ @JsonProperty("address")
+ public String getAddress() {
+ return address;
+ }
+
+ @JsonProperty("address")
+ public void setAddress(String address) {
+ this.address = address;
+ }
+
+ @JsonProperty("type")
+ public String getType() {
+ return type;
+ }
+
+ @JsonProperty("type")
+ public void setType(String type) {
+ this.type = type;
+ }
+
+ @JsonIgnore
+ public MachineAddressBuilder edit() {
+ return new MachineAddressBuilder(this);
+ }
+
+ @JsonIgnore
+ public MachineAddressBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/MachineSpec.java b/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/MachineSpec.java
new file mode 100644
index 00000000000..1b14d811bec
--- /dev/null
+++ b/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/MachineSpec.java
@@ -0,0 +1,202 @@
+
+package io.fabric8.kubernetes.api.model.clusterapi.v1beta1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Duration;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.sundr.builder.annotations.Buildable;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "bootstrap",
+ "clusterName",
+ "failureDomain",
+ "infrastructureRef",
+ "nodeDeletionTimeout",
+ "nodeDrainTimeout",
+ "nodeVolumeDetachTimeout",
+ "providerID",
+ "version"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder")
+@Generated("jsonschema2pojo")
+public class MachineSpec implements Editable , KubernetesResource
+{
+
+ @JsonProperty("bootstrap")
+ private Bootstrap bootstrap;
+ @JsonProperty("clusterName")
+ private String clusterName;
+ @JsonProperty("failureDomain")
+ private String failureDomain;
+ @JsonProperty("infrastructureRef")
+ private ObjectReference infrastructureRef;
+ @JsonProperty("nodeDeletionTimeout")
+ private Duration nodeDeletionTimeout;
+ @JsonProperty("nodeDrainTimeout")
+ private Duration nodeDrainTimeout;
+ @JsonProperty("nodeVolumeDetachTimeout")
+ private Duration nodeVolumeDetachTimeout;
+ @JsonProperty("providerID")
+ private String providerID;
+ @JsonProperty("version")
+ private String version;
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public MachineSpec() {
+ }
+
+ public MachineSpec(Bootstrap bootstrap, String clusterName, String failureDomain, ObjectReference infrastructureRef, Duration nodeDeletionTimeout, Duration nodeDrainTimeout, Duration nodeVolumeDetachTimeout, String providerID, String version) {
+ super();
+ this.bootstrap = bootstrap;
+ this.clusterName = clusterName;
+ this.failureDomain = failureDomain;
+ this.infrastructureRef = infrastructureRef;
+ this.nodeDeletionTimeout = nodeDeletionTimeout;
+ this.nodeDrainTimeout = nodeDrainTimeout;
+ this.nodeVolumeDetachTimeout = nodeVolumeDetachTimeout;
+ this.providerID = providerID;
+ this.version = version;
+ }
+
+ @JsonProperty("bootstrap")
+ public Bootstrap getBootstrap() {
+ return bootstrap;
+ }
+
+ @JsonProperty("bootstrap")
+ public void setBootstrap(Bootstrap bootstrap) {
+ this.bootstrap = bootstrap;
+ }
+
+ @JsonProperty("clusterName")
+ public String getClusterName() {
+ return clusterName;
+ }
+
+ @JsonProperty("clusterName")
+ public void setClusterName(String clusterName) {
+ this.clusterName = clusterName;
+ }
+
+ @JsonProperty("failureDomain")
+ public String getFailureDomain() {
+ return failureDomain;
+ }
+
+ @JsonProperty("failureDomain")
+ public void setFailureDomain(String failureDomain) {
+ this.failureDomain = failureDomain;
+ }
+
+ @JsonProperty("infrastructureRef")
+ public ObjectReference getInfrastructureRef() {
+ return infrastructureRef;
+ }
+
+ @JsonProperty("infrastructureRef")
+ public void setInfrastructureRef(ObjectReference infrastructureRef) {
+ this.infrastructureRef = infrastructureRef;
+ }
+
+ @JsonProperty("nodeDeletionTimeout")
+ public Duration getNodeDeletionTimeout() {
+ return nodeDeletionTimeout;
+ }
+
+ @JsonProperty("nodeDeletionTimeout")
+ public void setNodeDeletionTimeout(Duration nodeDeletionTimeout) {
+ this.nodeDeletionTimeout = nodeDeletionTimeout;
+ }
+
+ @JsonProperty("nodeDrainTimeout")
+ public Duration getNodeDrainTimeout() {
+ return nodeDrainTimeout;
+ }
+
+ @JsonProperty("nodeDrainTimeout")
+ public void setNodeDrainTimeout(Duration nodeDrainTimeout) {
+ this.nodeDrainTimeout = nodeDrainTimeout;
+ }
+
+ @JsonProperty("nodeVolumeDetachTimeout")
+ public Duration getNodeVolumeDetachTimeout() {
+ return nodeVolumeDetachTimeout;
+ }
+
+ @JsonProperty("nodeVolumeDetachTimeout")
+ public void setNodeVolumeDetachTimeout(Duration nodeVolumeDetachTimeout) {
+ this.nodeVolumeDetachTimeout = nodeVolumeDetachTimeout;
+ }
+
+ @JsonProperty("providerID")
+ public String getProviderID() {
+ return providerID;
+ }
+
+ @JsonProperty("providerID")
+ public void setProviderID(String providerID) {
+ this.providerID = providerID;
+ }
+
+ @JsonProperty("version")
+ public String getVersion() {
+ return version;
+ }
+
+ @JsonProperty("version")
+ public void setVersion(String version) {
+ this.version = version;
+ }
+
+ @JsonIgnore
+ public MachineSpecBuilder edit() {
+ return new MachineSpecBuilder(this);
+ }
+
+ @JsonIgnore
+ public MachineSpecBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/MachineStatus.java b/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/MachineStatus.java
new file mode 100644
index 00000000000..1e6f50b8758
--- /dev/null
+++ b/kubernetes-model-generator/kubernetes-model-core/src/generated/java/io/fabric8/kubernetes/api/model/clusterapi/v1beta1/MachineStatus.java
@@ -0,0 +1,250 @@
+
+package io.fabric8.kubernetes.api.model.clusterapi.v1beta1;
+
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.NodeSystemInfo;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.sundr.builder.annotations.Buildable;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "addresses",
+ "bootstrapReady",
+ "certificatesExpiryDate",
+ "conditions",
+ "failureMessage",
+ "failureReason",
+ "infrastructureReady",
+ "lastUpdated",
+ "nodeInfo",
+ "nodeRef",
+ "observedGeneration",
+ "phase"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder")
+@Generated("jsonschema2pojo")
+public class MachineStatus implements Editable , KubernetesResource
+{
+
+ @JsonProperty("addresses")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ private List addresses = new ArrayList<>();
+ @JsonProperty("bootstrapReady")
+ private Boolean bootstrapReady;
+ @JsonProperty("certificatesExpiryDate")
+ private String certificatesExpiryDate;
+ @JsonProperty("conditions")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ private List conditions = new ArrayList<>();
+ @JsonProperty("failureMessage")
+ private String failureMessage;
+ @JsonProperty("failureReason")
+ private String failureReason;
+ @JsonProperty("infrastructureReady")
+ private Boolean infrastructureReady;
+ @JsonProperty("lastUpdated")
+ private String lastUpdated;
+ @JsonProperty("nodeInfo")
+ private NodeSystemInfo nodeInfo;
+ @JsonProperty("nodeRef")
+ private ObjectReference nodeRef;
+ @JsonProperty("observedGeneration")
+ private Long observedGeneration;
+ @JsonProperty("phase")
+ private String phase;
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public MachineStatus() {
+ }
+
+ public MachineStatus(List addresses, Boolean bootstrapReady, String certificatesExpiryDate, List conditions, String failureMessage, String failureReason, Boolean infrastructureReady, String lastUpdated, NodeSystemInfo nodeInfo, ObjectReference nodeRef, Long observedGeneration, String phase) {
+ super();
+ this.addresses = addresses;
+ this.bootstrapReady = bootstrapReady;
+ this.certificatesExpiryDate = certificatesExpiryDate;
+ this.conditions = conditions;
+ this.failureMessage = failureMessage;
+ this.failureReason = failureReason;
+ this.infrastructureReady = infrastructureReady;
+ this.lastUpdated = lastUpdated;
+ this.nodeInfo = nodeInfo;
+ this.nodeRef = nodeRef;
+ this.observedGeneration = observedGeneration;
+ this.phase = phase;
+ }
+
+ @JsonProperty("addresses")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ public List getAddresses() {
+ return addresses;
+ }
+
+ @JsonProperty("addresses")
+ public void setAddresses(List addresses) {
+ this.addresses = addresses;
+ }
+
+ @JsonProperty("bootstrapReady")
+ public Boolean getBootstrapReady() {
+ return bootstrapReady;
+ }
+
+ @JsonProperty("bootstrapReady")
+ public void setBootstrapReady(Boolean bootstrapReady) {
+ this.bootstrapReady = bootstrapReady;
+ }
+
+ @JsonProperty("certificatesExpiryDate")
+ public String getCertificatesExpiryDate() {
+ return certificatesExpiryDate;
+ }
+
+ @JsonProperty("certificatesExpiryDate")
+ public void setCertificatesExpiryDate(String certificatesExpiryDate) {
+ this.certificatesExpiryDate = certificatesExpiryDate;
+ }
+
+ @JsonProperty("conditions")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ public List getConditions() {
+ return conditions;
+ }
+
+ @JsonProperty("conditions")
+ public void setConditions(List conditions) {
+ this.conditions = conditions;
+ }
+
+ @JsonProperty("failureMessage")
+ public String getFailureMessage() {
+ return failureMessage;
+ }
+
+ @JsonProperty("failureMessage")
+ public void setFailureMessage(String failureMessage) {
+ this.failureMessage = failureMessage;
+ }
+
+ @JsonProperty("failureReason")
+ public String getFailureReason() {
+ return failureReason;
+ }
+
+ @JsonProperty("failureReason")
+ public void setFailureReason(String failureReason) {
+ this.failureReason = failureReason;
+ }
+
+ @JsonProperty("infrastructureReady")
+ public Boolean getInfrastructureReady() {
+ return infrastructureReady;
+ }
+
+ @JsonProperty("infrastructureReady")
+ public void setInfrastructureReady(Boolean infrastructureReady) {
+ this.infrastructureReady = infrastructureReady;
+ }
+
+ @JsonProperty("lastUpdated")
+ public String getLastUpdated() {
+ return lastUpdated;
+ }
+
+ @JsonProperty("lastUpdated")
+ public void setLastUpdated(String lastUpdated) {
+ this.lastUpdated = lastUpdated;
+ }
+
+ @JsonProperty("nodeInfo")
+ public NodeSystemInfo getNodeInfo() {
+ return nodeInfo;
+ }
+
+ @JsonProperty("nodeInfo")
+ public void setNodeInfo(NodeSystemInfo nodeInfo) {
+ this.nodeInfo = nodeInfo;
+ }
+
+ @JsonProperty("nodeRef")
+ public ObjectReference getNodeRef() {
+ return nodeRef;
+ }
+
+ @JsonProperty("nodeRef")
+ public void setNodeRef(ObjectReference nodeRef) {
+ this.nodeRef = nodeRef;
+ }
+
+ @JsonProperty("observedGeneration")
+ public Long getObservedGeneration() {
+ return observedGeneration;
+ }
+
+ @JsonProperty("observedGeneration")
+ public void setObservedGeneration(Long observedGeneration) {
+ this.observedGeneration = observedGeneration;
+ }
+
+ @JsonProperty("phase")
+ public String getPhase() {
+ return phase;
+ }
+
+ @JsonProperty("phase")
+ public void setPhase(String phase) {
+ this.phase = phase;
+ }
+
+ @JsonIgnore
+ public MachineStatusBuilder edit() {
+ return new MachineStatusBuilder(this);
+ }
+
+ @JsonIgnore
+ public MachineStatusBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openapi/generator/cmd/openapi.go b/kubernetes-model-generator/openapi/generator/cmd/openapi.go
index d564280526e..8817e1646c3 100644
--- a/kubernetes-model-generator/openapi/generator/cmd/openapi.go
+++ b/kubernetes-model-generator/openapi/generator/cmd/openapi.go
@@ -24,7 +24,9 @@ import (
"github.com/fabric8io/kubernetes-client/kubernetes-model-generator/openapi/generator/pkg/parser"
"strings"
- //openshiftbaremetaloperatorv1alpha1 "github.com/metal3-io/baremetal-operator/apis/metal3.io/v1alpha1"
+ networkattachmentdefinition "github.com/k8snetworkplumbingwg/network-attachment-definition-client/pkg/apis/k8s.cni.cncf.io/v1"
+ openshiftbaremetaloperatorv1alpha1 "github.com/metal3-io/baremetal-operator/apis/metal3.io/v1alpha1"
+ openshiftclusterapiprovidermetal3v1beta1 "github.com/metal3-io/cluster-api-provider-metal3/api/v1beta1"
openshiftconfigv1 "github.com/openshift/api/config/v1"
openshiftcloudcredentialoperatorv1 "github.com/openshift/cloud-credential-operator/pkg/apis/cloudcredential/v1"
openshiftclusternetworkoperatorv1 "github.com/openshift/cluster-network-operator/pkg/apis/network/v1"
@@ -55,14 +57,16 @@ var openApiRun = func(cobraCmd *cobra.Command, args []string) {
startTime := time.Now()
fmt.Printf("OpenAPI JSON schema generation started...\n%s\n", strings.Join([]string{
// Force imports so that modules are present in go.mod
- openshiftconfigv1.SchemeGroupVersion.String(),
- //openshiftbaremetaloperatorv1alpha1.GroupVersion.String(),
+ networkattachmentdefinition.SchemeGroupVersion.String(),
olm.SchemeGroupVersion.String(),
+ openshiftbaremetaloperatorv1alpha1.GroupVersion.String(),
+ openshiftconfigv1.SchemeGroupVersion.String(),
openshiftcloudcredentialoperatorv1.GroupVersion.String(),
+ openshiftclusterapiprovidermetal3v1beta1.GroupVersion.String(),
openshiftclusternetworkoperatorv1.GroupVersion.String(),
openshiftclusternodetuningoperatorv1.SchemeGroupVersion.String(),
openshifthivev1.SchemeGroupVersion.String(),
- "install.openshift.io/" + openshiftinstallerv1.InstallConfigVersion + "(" + strings.Join(openshiftinstallerv1.PlatformNames, ",") + ")",
+ "install.openshift.io/" + openshiftinstallerv1.InstallConfigVersion + " (" + strings.Join(openshiftinstallerv1.PlatformNames, ", ") + ")",
operatorframeworkv1alpha1.SchemeGroupVersion.String(),
operatorframeworkv1.GroupVersion.String(),
prometheusoperatorv1.SchemeGroupVersion.String(),
diff --git a/kubernetes-model-generator/openapi/generator/cmd/reflection.go b/kubernetes-model-generator/openapi/generator/cmd/reflection.go
index 8e900ca5183..99652409c4b 100644
--- a/kubernetes-model-generator/openapi/generator/cmd/reflection.go
+++ b/kubernetes-model-generator/openapi/generator/cmd/reflection.go
@@ -30,6 +30,7 @@ import (
"os"
"path/filepath"
"reflect"
+ clusterapiv1beta1 "sigs.k8s.io/cluster-api/api/v1beta1"
gatewayApiV1 "sigs.k8s.io/gateway-api/apis/v1"
gatewayApiV1Beta1 "sigs.k8s.io/gateway-api/apis/v1beta1"
kustomize "sigs.k8s.io/kustomize/api/types"
@@ -92,6 +93,10 @@ var reflectionRun = func(cmd *cobra.Command, args []string) {
reflect.TypeOf(apiextensionsV1Beta1.SelectableField{}): {},
reflect.TypeOf(apiextensionsV1Beta1.ValidationRule{}): {},
}, "apiextensions"),
+ NewTypeSchema([]reflect.Type{
+ reflect.TypeOf(clusterapiv1beta1.Condition{}),
+ reflect.TypeOf(clusterapiv1beta1.Machine{}),
+ }, "cluster-api"),
NewPathSchema(map[reflect.Type]ApiVersion{
reflect.TypeOf(gatewayApiV1.GatewayList{}): {true, gatewayApiV1.GroupVersion.String(), "gateways", true},
reflect.TypeOf(gatewayApiV1.Gateway{}): {false, gatewayApiV1.GroupVersion.String(), "gateways", true},
diff --git a/kubernetes-model-generator/openapi/generator/go.mod b/kubernetes-model-generator/openapi/generator/go.mod
index ea1205c7f58..653244f573d 100644
--- a/kubernetes-model-generator/openapi/generator/go.mod
+++ b/kubernetes-model-generator/openapi/generator/go.mod
@@ -6,6 +6,9 @@ toolchain go1.23.1
require (
github.com/getkin/kin-openapi v0.125.0
+ github.com/k8snetworkplumbingwg/network-attachment-definition-client v1.7.4
+ github.com/metal3-io/baremetal-operator/apis v0.4.0
+ github.com/metal3-io/cluster-api-provider-metal3/api v1.8.2
// Match latest commit in the version branch (e.g. release-4.17)
github.com/openshift/api v3.9.0+incompatible
github.com/openshift/cloud-credential-operator v0.0.0-20240910052617-d668c182b0e3
@@ -13,7 +16,7 @@ require (
github.com/openshift/cluster-node-tuning-operator v0.0.0-20241001165112-1685a8fc1376
github.com/openshift/hive/apis v0.0.0-20240930213556-2d25383963db
github.com/openshift/installer v0.0.0-00010101000000-000000000000
- github.com/operator-framework/api v0.27.0
+ github.com/operator-framework/api v0.27.1-0.20241002175140-413605f42947
github.com/operator-framework/operator-lifecycle-manager v0.0.0-00010101000000-000000000000
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.77.1
github.com/spf13/cobra v1.8.1
@@ -23,7 +26,8 @@ require (
k8s.io/client-go v12.0.0+incompatible
k8s.io/gengo/v2 v2.0.0-20240911193312-2b36238f13e9
k8s.io/kube-openapi v0.0.0-20240903163716-9e1beecbcb38
- k8s.io/metrics v0.30.3
+ k8s.io/metrics v0.31.0
+ sigs.k8s.io/cluster-api v1.8.3
sigs.k8s.io/gateway-api v1.1.0
sigs.k8s.io/kustomize/api v0.17.2
)
@@ -36,19 +40,19 @@ replace (
github.com/openshift/assisted-service/models => github.com/openshift/assisted-service/models v0.0.0-20241003070528-341f9860c455
github.com/openshift/hive => github.com/openshift/hive v1.1.17-0.20240930213556-2d25383963db // Latest Master
github.com/openshift/installer => github.com/openshift/installer v0.91.0 // Most up-to-date tag https://issues.redhat.com/browse/OCPBUGS-42448
+ k8s.io/api => k8s.io/api v0.31.1
k8s.io/client-go => k8s.io/client-go v0.31.1
k8s.io/cloud-provider => k8s.io/cloud-provider v0.31.1
k8s.io/csi-translation-lib => k8s.io/csi-translation-lib v0.31.1
k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.31.1
k8s.io/mount-utils => k8s.io/mount-utils v0.31.1
-
)
replace (
+ // TODO: WIP while this gets merged or fixed https://github.com/metal3-io/baremetal-operator/pull/1985
+ github.com/metal3-io/baremetal-operator/apis => github.com/marcnuri-forks/baremetal-operator/apis v0.0.0-20241004142039-6b123cc23349
// TODO: WIP while this gets merged or fixed https://github.com/openshift/api/pull/2050
github.com/openshift/api => github.com/marcnuri-forks/api v0.0.0-20240930125604-62d5277244a4
- // TODO: WIP while this gets merged or fixed https://github.com/operator-framework/api/pull/365
- github.com/operator-framework/api => github.com/marcnuri-forks/operator-framework-api v0.0.0-20241001140003-cf4aa8da1ffa
// TODO: WIP while this gets merged or fixed https://github.com/operator-framework/operator-lifecycle-manager/pull/3406
github.com/operator-framework/operator-lifecycle-manager => github.com/marcnuri-forks/operator-lifecycle-manager v0.0.0-20241002090802-7539192fbf96
)
@@ -67,6 +71,8 @@ require (
github.com/coreos/vcontext v0.0.0-20231102161604-685dc7299dc5 // indirect
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
github.com/emicklei/go-restful/v3 v3.12.1 // indirect
+ github.com/evanphx/json-patch/v5 v5.9.0 // indirect
+ github.com/fsnotify/fsnotify v1.7.0 // indirect
github.com/fxamacker/cbor/v2 v2.7.0 // indirect
github.com/go-errors/errors v1.4.2 // indirect
github.com/go-logr/logr v1.4.2 // indirect
@@ -86,6 +92,7 @@ require (
github.com/h2non/filetype v1.1.3 // indirect
github.com/h2non/go-is-svg v0.0.0-20160927212452-35e8c4b0612c // indirect
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
+ github.com/imdario/mergo v0.3.16 // indirect
github.com/inconshreveable/mousetrap v1.1.0 // indirect
github.com/invopop/yaml v0.2.0 // indirect
github.com/jmespath/go-jmespath v0.4.1-0.20220621161143-b0104c826a24 // indirect
@@ -95,8 +102,8 @@ require (
github.com/klauspost/compress v1.17.9 // indirect
github.com/mailru/easyjson v0.7.7 // indirect
github.com/mattn/go-sqlite3 v2.0.3+incompatible // indirect
- github.com/metal3-io/baremetal-operator/apis v0.4.0 // indirect
- github.com/metal3-io/baremetal-operator/pkg/hardwareutils v0.4.0 // indirect
+ github.com/metal3-io/baremetal-operator/pkg/hardwareutils v0.5.1 // indirect
+ github.com/metal3-io/ip-address-manager/api v1.8.1 // indirect
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
github.com/modern-go/reflect2 v1.0.2 // indirect
github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 // indirect
diff --git a/kubernetes-model-generator/openapi/generator/go.sum b/kubernetes-model-generator/openapi/generator/go.sum
index c2e56717671..408cac8adcf 100644
--- a/kubernetes-model-generator/openapi/generator/go.sum
+++ b/kubernetes-model-generator/openapi/generator/go.sum
@@ -156,10 +156,14 @@ github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7
github.com/evanphx/json-patch v4.12.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk=
github.com/evanphx/json-patch v5.9.0+incompatible h1:fBXyNpNMuTTDdquAq/uisOr2lShz4oaXpDTX2bLe7ls=
github.com/evanphx/json-patch v5.9.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk=
+github.com/evanphx/json-patch/v5 v5.9.0 h1:kcBlZQbplgElYIlo/n1hJbls2z/1awpXxpRi0/FOJfg=
+github.com/evanphx/json-patch/v5 v5.9.0/go.mod h1:VNkHZ/282BpEyt/tObQO8s5CMPmYYq14uClGH4abBuQ=
github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg=
github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
github.com/fsnotify/fsnotify v1.4.9/go.mod h1:znqG4EE+3YCdAaPaxE2ZRY/06pZUdp0tY4IgpuI1SZQ=
+github.com/fsnotify/fsnotify v1.7.0 h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nosvA=
+github.com/fsnotify/fsnotify v1.7.0/go.mod h1:40Bi/Hjc2AVfZrqy+aj+yEI+/bRxZnMJyTJwOpGvigM=
github.com/fxamacker/cbor/v2 v2.7.0 h1:iM5WgngdRBanHcxugY4JySA0nk1wZorNOpTgCMedv5E=
github.com/fxamacker/cbor/v2 v2.7.0/go.mod h1:pxXPTn3joSm21Gbwsv0w9OSA2y1HFR9qXEeXQVeNoDQ=
github.com/gabriel-vasile/mimetype v1.4.3 h1:in2uUcidCuFcDKtdcBxlR0rJ1+fsokWf+uqxgUFjbI0=
@@ -340,6 +344,8 @@ github.com/json-iterator/go v1.1.6/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCV
github.com/json-iterator/go v1.1.9/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
+github.com/k8snetworkplumbingwg/network-attachment-definition-client v1.7.4 h1:vn0d/47rWzEHpDl3Ac7MiD9DfKK3gNBezI5khPKE7AQ=
+github.com/k8snetworkplumbingwg/network-attachment-definition-client v1.7.4/go.mod h1:CM7HAH5PNuIsqjMN0fGc1ydM74Uj+0VZFhob620nklw=
github.com/kdomanski/iso9660 v0.2.1 h1:IepyfCeEqx77rZeOM4XZgWB4XJWEF7Jp+1ehMTrSElg=
github.com/kdomanski/iso9660 v0.2.1/go.mod h1:LY50s7BlG+ES6V99oxYGd0ub9giLrKdHZb3LLOweBj0=
github.com/kelseyhightower/envconfig v1.4.0/go.mod h1:cccZRl6mQpaq41TPp5QxidR+Sa3axMbJDNb//FQX6Gg=
@@ -386,8 +392,8 @@ github.com/mailru/easyjson v0.7.7 h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0
github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
github.com/marcnuri-forks/api v0.0.0-20240930125604-62d5277244a4 h1:OVm/tM0Io+jkCLhrYvDL4B6zJb9ueRBX36zt7q9KFOU=
github.com/marcnuri-forks/api v0.0.0-20240930125604-62d5277244a4/go.mod h1:OOh6Qopf21pSzqNVCB5gomomBXb8o5sGKZxG2KNpaXM=
-github.com/marcnuri-forks/operator-framework-api v0.0.0-20241001140003-cf4aa8da1ffa h1:t7mJvK1J4UOvmr4FpF5wHNszcngKdmbpq3YhFqfs0Jw=
-github.com/marcnuri-forks/operator-framework-api v0.0.0-20241001140003-cf4aa8da1ffa/go.mod h1:l1JgrLzWtCdUiXxQnf4LNVxlgoVEiIKclCEqww9EZrs=
+github.com/marcnuri-forks/baremetal-operator/apis v0.0.0-20241004142039-6b123cc23349 h1:jSdEzmJMzBkCBT4Ft39OYARV+fgP82RlYcZc09Z8Ldk=
+github.com/marcnuri-forks/baremetal-operator/apis v0.0.0-20241004142039-6b123cc23349/go.mod h1:Qao+jEhzuKU8M763GkP70ZIdiZCaeC0H0LPyMw/l/O0=
github.com/marcnuri-forks/operator-lifecycle-manager v0.0.0-20241002090802-7539192fbf96 h1:SYIVgj5Jfq7gpO1kqSvKYazwhVgGvAfszlKFoqVqw3g=
github.com/marcnuri-forks/operator-lifecycle-manager v0.0.0-20241002090802-7539192fbf96/go.mod h1:ToPwavGeU72yaPYn18qaDo6anPlJvFiAkgXhS39PgPc=
github.com/matryer/moq v0.2.3/go.mod h1:9RtPYjTnH1bSBIkpvtHkFN7nbWAnO7oRpdJkEIn6UtE=
@@ -400,10 +406,12 @@ github.com/mattn/go-isatty v0.0.12/go.mod h1:cbi8OIDigv2wuxKPP5vlRcQ1OAZbq2CE4Ky
github.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27kJ6hsGG94=
github.com/mattn/go-sqlite3 v2.0.3+incompatible h1:gXHsfypPkaMZrKbD5209QV9jbUTJKjyR5WD3HYQSd+U=
github.com/mattn/go-sqlite3 v2.0.3+incompatible/go.mod h1:FPy6KqzDD04eiIsT53CuJW3U88zkxoIYsOqkbpncsNc=
-github.com/metal3-io/baremetal-operator/apis v0.4.0 h1:1g5S3SKu9FqeD7OIf5jGKS6234HjNQpIRmfepZnSmiQ=
-github.com/metal3-io/baremetal-operator/apis v0.4.0/go.mod h1:1GDBiA3XqdP63dLZHJ1JH5fRJrfjn7pshoPEd9jwY7Q=
-github.com/metal3-io/baremetal-operator/pkg/hardwareutils v0.4.0 h1:AnA8XLLp3RKYjjlB4KI0fyPSDN/d5gb3ZtM2cVyxwOc=
-github.com/metal3-io/baremetal-operator/pkg/hardwareutils v0.4.0/go.mod h1:399nvdaqoU9rTI25UdFw2EWcVjmJPpeZPIhfDAIx/XU=
+github.com/metal3-io/baremetal-operator/pkg/hardwareutils v0.5.1 h1:X0+MWsJ+Gj/TAkmhGybvesvxk6zQKu3NQXzvC6l0iJs=
+github.com/metal3-io/baremetal-operator/pkg/hardwareutils v0.5.1/go.mod h1:399nvdaqoU9rTI25UdFw2EWcVjmJPpeZPIhfDAIx/XU=
+github.com/metal3-io/cluster-api-provider-metal3/api v1.8.2 h1:chEMHkKmuBagGciaPDTT9IoeNRXSkcIHU1Q18e4m3B8=
+github.com/metal3-io/cluster-api-provider-metal3/api v1.8.2/go.mod h1:FUUgwGlWuz9POCLKwyjYbcvLtqnfA+YZg0/mIFo9svg=
+github.com/metal3-io/ip-address-manager/api v1.8.1 h1:hFWgKmfO02AGnY/+QEd6+IY8BuQTHK25BhYOIwu2C2k=
+github.com/metal3-io/ip-address-manager/api v1.8.1/go.mod h1:yMOQSHu0XjbRaMP38a7ZiJ27zX/2L2YBcSHRLXvZ6aM=
github.com/mitchellh/mapstructure v1.1.2/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
github.com/mitchellh/mapstructure v1.2.3/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
github.com/moby/locker v1.0.1 h1:fOXqR41zeveg4fFODix+1Ch4mj/gT0NE1XJbp/epuBg=
@@ -507,6 +515,8 @@ github.com/openshift/hive/apis v0.0.0-20240930213556-2d25383963db h1:81l8GpANADh
github.com/openshift/hive/apis v0.0.0-20240930213556-2d25383963db/go.mod h1:27UntBsyKUZ9+xMcX6uXLhXsd9U8p/FI0mmIlH7SRG0=
github.com/openshift/installer v0.91.0 h1:pHcDYujhwTM3J+9TcPbc9ddgIZAdNXkuDm1SpsGaG18=
github.com/openshift/installer v0.91.0/go.mod h1:U6mPWM1tZEiV0mC31M6bCzI49DOkSnfaCpLyI9Duc30=
+github.com/operator-framework/api v0.27.1-0.20241002175140-413605f42947 h1:t4cdbon50yoqj80ihqhqM5EbrSHuRGaJAitlDafIRBo=
+github.com/operator-framework/api v0.27.1-0.20241002175140-413605f42947/go.mod h1:l1JgrLzWtCdUiXxQnf4LNVxlgoVEiIKclCEqww9EZrs=
github.com/operator-framework/operator-registry v1.47.0 h1:Imr7X/W6FmXczwpIOXfnX8d6Snr1dzwWxkMG+lLAfhg=
github.com/operator-framework/operator-registry v1.47.0/go.mod h1:CJ3KcP8uRxtC8l9caM1RsV7r7jYlKAd452tcxcgXyTQ=
github.com/orisano/pixelmatch v0.0.0-20220722002657-fb0b55479cde/go.mod h1:nZgzbfBr3hhjoZnS66nKrHmduYNpc34ny7RK4z5/HM0=
@@ -1000,14 +1010,11 @@ gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
-k8s.io/api v0.23.3/go.mod h1:w258XdGyvCmnBj/vGzQMj6kzdufJZVUwEM1U2fRJwSQ=
-k8s.io/api v0.24.2/go.mod h1:AHqbSkTm6YrQ0ObxjO3Pmp/ubFF/KuM7jU+3khoBsOg=
k8s.io/api v0.31.1 h1:Xe1hX/fPW3PXYYv8BlozYqw63ytA92snr96zMW9gWTU=
k8s.io/api v0.31.1/go.mod h1:sbN1g6eY6XVLeqNsZGLnI5FwVseTrZX7Fv3O26rhAaI=
k8s.io/apiextensions-apiserver v0.31.1 h1:L+hwULvXx+nvTYX/MKM3kKMZyei+UiSXQWciX/N6E40=
k8s.io/apiextensions-apiserver v0.31.1/go.mod h1:tWMPR3sgW+jsl2xm9v7lAyRF1rYEK71i9G5dRtkknoQ=
k8s.io/apimachinery v0.23.3/go.mod h1:BEuFMMBaIbcOqVIJqNZJXGFTP4W6AycEpb5+m/97hrM=
-k8s.io/apimachinery v0.24.2/go.mod h1:82Bi4sCzVBdpYjyI4jY6aHX+YCUchUIrZrXKedjd2UM=
k8s.io/apimachinery v0.24.3/go.mod h1:82Bi4sCzVBdpYjyI4jY6aHX+YCUchUIrZrXKedjd2UM=
k8s.io/apimachinery v0.31.1 h1:mhcUBbj7KUjaVhyXILglcVjuS4nYXiwC+KKFBgIVy7U=
k8s.io/apimachinery v0.31.1/go.mod h1:rsPdaZJfTfLsNJSQzNHQvYoTmxhoOEofxtOsF3rtsMo=
@@ -1038,8 +1045,8 @@ k8s.io/kube-openapi v0.0.0-20220328201542-3ee0da9b0b42/go.mod h1:Z/45zLw8lUo4wdi
k8s.io/kube-openapi v0.0.0-20240228011516-70dd3763d340/go.mod h1:yD4MZYeKMBwQKVht279WycxKyM84kkAx2DPrTXaeb98=
k8s.io/kube-openapi v0.0.0-20240903163716-9e1beecbcb38 h1:1dWzkmJrrprYvjGwh9kEUxmcUV/CtNU8QM7h1FLWQOo=
k8s.io/kube-openapi v0.0.0-20240903163716-9e1beecbcb38/go.mod h1:coRQXBK9NxO98XUv3ZD6AK3xzHCxV6+b7lrquKwaKzA=
-k8s.io/metrics v0.30.3 h1:gKCpte5zykrOmQhZ8qmsxyJslMdiLN+sqbBfIWNpbGM=
-k8s.io/metrics v0.30.3/go.mod h1:W06L2nXRhOwPkFYDJYWdEIS3u6JcJy3ebIPYbndRs6A=
+k8s.io/metrics v0.31.0 h1:s7Vu7W0oEZPTN8jgcoiWIXIZBmVxt7YP9MRVyIgMdOc=
+k8s.io/metrics v0.31.0/go.mod h1:UNsz6swyX8FWkDoKN9ixPF75TBREMbHZIKjD7fydaOY=
k8s.io/utils v0.0.0-20210802155522-efc7438f0176/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
k8s.io/utils v0.0.0-20211116205334-6203023598ed/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
k8s.io/utils v0.0.0-20220210201930-3a6ce19ff2f9/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
@@ -1049,6 +1056,8 @@ k8s.io/utils v0.0.0-20240902221715-702e33fdd3c3 h1:b2FmK8YH+QEwq/Sy2uAEhmqL5nPfG
k8s.io/utils v0.0.0-20240902221715-702e33fdd3c3/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.30.3 h1:2770sDpzrjjsAtVhSeUFseziht227YAWYHLGNM8QPwY=
sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.30.3/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw=
+sigs.k8s.io/cluster-api v1.8.3 h1:N6i25rF5QMadwVg2UPfuO6CzmNXjqnF2r1MAO+kcsro=
+sigs.k8s.io/cluster-api v1.8.3/go.mod h1:pXv5LqLxuIbhGIXykyNKiJh+KrLweSBajVHHitPLyoY=
sigs.k8s.io/controller-runtime v0.19.0 h1:nWVM7aq+Il2ABxwiCizrVDSlmDcshi9llbaFbC0ji/Q=
sigs.k8s.io/controller-runtime v0.19.0/go.mod h1:iRmWllt8IlaLjvTTDLhRBXIEtkCK6hwVBJJsYS9Ajf4=
sigs.k8s.io/gateway-api v1.1.0 h1:DsLDXCi6jR+Xz8/xd0Z1PYl2Pn0TyaFMOPPZIj4inDM=
diff --git a/kubernetes-model-generator/openapi/generator/pkg/openapi/openapi-gen.go b/kubernetes-model-generator/openapi/generator/pkg/openapi/openapi-gen.go
index ee12d10da6b..a6020d928c8 100644
--- a/kubernetes-model-generator/openapi/generator/pkg/openapi/openapi-gen.go
+++ b/kubernetes-model-generator/openapi/generator/pkg/openapi/openapi-gen.go
@@ -48,11 +48,23 @@ func (g *GoGenerator) Generate() error {
//
// Allows to override the default kube-openapi generators.apiTypeFilterFunc with our own (see KubernetesFilterFunc).
func (g *GoGenerator) KubernetesTargets(context *generator.Context) []generator.Target {
+ // Non-deterministic bug-fix
+ // ScopeType is sometimes considered enum and others isn't. Force it to be non enum to avoid issues
+ scopeType := context.Universe.Type(types.Name{Package: "k8s.io/api/admissionregistration/v1", Name: "ScopeType"})
+ originalComments := scopeType.CommentLines
+ scopeType.CommentLines = make([]string, 0)
+ for _, comment := range originalComments {
+ if comment != "+enum" {
+ scopeType.CommentLines = append(scopeType.CommentLines, comment)
+ }
+ }
+
// Create a map of all the input packages for performance (queried later on)
g.inputPkgs = make(map[string]bool)
for _, inputPackage := range context.Inputs {
g.inputPkgs[inputPackage] = true
}
+
// Replace original Filter function with something that includes all Kubernetes Object types regardless of the comment tag
openApiGenTargets := generators.GetTargets(context, &g.Args)
for _, target := range openApiGenTargets {
diff --git a/kubernetes-model-generator/openapi/generator/pkg/openshift/openshift.go b/kubernetes-model-generator/openapi/generator/pkg/openshift/openshift.go
index 1df0f5a0a5d..dfd617b6370 100644
--- a/kubernetes-model-generator/openapi/generator/pkg/openshift/openshift.go
+++ b/kubernetes-model-generator/openapi/generator/pkg/openshift/openshift.go
@@ -25,7 +25,9 @@ var PackagePatterns = []string{
// OpenShift APIs
"github.com/openshift/api/.../v...",
// CRDs don't provide info for reused types
- //"github.com/metal3-io/baremetal-operator/apis/metal3.io/v...",
+ "github.com/metal3-io/baremetal-operator/apis/metal3.io/v...",
+ "github.com/metal3-io/cluster-api-provider-metal3/api/v...",
+ "github.com/k8snetworkplumbingwg/network-attachment-definition-client/pkg/apis/.../v...",
"github.com/openshift/cloud-credential-operator/pkg/apis/.../v...",
"github.com/openshift/cluster-network-operator/pkg/apis/.../v...",
"github.com/openshift/cluster-node-tuning-operator/pkg/apis/tuned/v...",
diff --git a/kubernetes-model-generator/openapi/generator/tools/generator/openapi.go b/kubernetes-model-generator/openapi/generator/tools/generator/openapi.go
index c409d56a12f..ff048f3930b 100644
--- a/kubernetes-model-generator/openapi/generator/tools/generator/openapi.go
+++ b/kubernetes-model-generator/openapi/generator/tools/generator/openapi.go
@@ -24,7 +24,9 @@ import (
"github.com/fabric8io/kubernetes-client/kubernetes-model-generator/openapi/generator/pkg/openshift"
"strings"
- //openshiftbaremetaloperatorv1alpha1 "github.com/metal3-io/baremetal-operator/apis/metal3.io/v1alpha1"
+ networkattachmentdefinition "github.com/k8snetworkplumbingwg/network-attachment-definition-client/pkg/apis/k8s.cni.cncf.io/v1"
+ openshiftbaremetaloperatorv1alpha1 "github.com/metal3-io/baremetal-operator/apis/metal3.io/v1alpha1"
+ openshiftclusterapiprovidermetal3v1beta1 "github.com/metal3-io/cluster-api-provider-metal3/api/v1beta1"
openshiftconfigv1 "github.com/openshift/api/config/v1"
openshiftcloudcredentialoperatorv1 "github.com/openshift/cloud-credential-operator/pkg/apis/cloudcredential/v1"
openshiftclusternetworkoperatorv1 "github.com/openshift/cluster-network-operator/pkg/apis/network/v1"
@@ -43,10 +45,12 @@ func main() {
startTime := time.Now()
fmt.Printf("OpenAPI code generation started...\n%s\n", strings.Join([]string{
// Force imports so that modules are present in go.mod
- openshiftconfigv1.SchemeGroupVersion.String(),
- //openshiftbaremetaloperatorv1alpha1.GroupVersion.String(),
+ networkattachmentdefinition.SchemeGroupVersion.String(),
olm.SchemeGroupVersion.String(),
+ openshiftbaremetaloperatorv1alpha1.GroupVersion.String(),
+ openshiftconfigv1.SchemeGroupVersion.String(),
openshiftcloudcredentialoperatorv1.GroupVersion.String(),
+ openshiftclusterapiprovidermetal3v1beta1.GroupVersion.String(),
openshiftclusternetworkoperatorv1.GroupVersion.String(),
openshiftclusternodetuningoperatorv1.SchemeGroupVersion.String(),
openshifthivev1.SchemeGroupVersion.String(),
diff --git a/kubernetes-model-generator/openapi/maven-plugin/src/main/java/io/fabric8/kubernetes/schema/generator/schema/SchemaUtils.java b/kubernetes-model-generator/openapi/maven-plugin/src/main/java/io/fabric8/kubernetes/schema/generator/schema/SchemaUtils.java
index bdb50b700de..fa507efa7f0 100644
--- a/kubernetes-model-generator/openapi/maven-plugin/src/main/java/io/fabric8/kubernetes/schema/generator/schema/SchemaUtils.java
+++ b/kubernetes-model-generator/openapi/maven-plugin/src/main/java/io/fabric8/kubernetes/schema/generator/schema/SchemaUtils.java
@@ -146,6 +146,7 @@ public class SchemaUtils {
"for",
"import",
"int",
+ "interface",
"package",
"private",
"public",
diff --git a/kubernetes-model-generator/openapi/schemas/cluster-api.json b/kubernetes-model-generator/openapi/schemas/cluster-api.json
new file mode 100644
index 00000000000..da61ae77543
--- /dev/null
+++ b/kubernetes-model-generator/openapi/schemas/cluster-api.json
@@ -0,0 +1 @@
+{"components":{"schemas":{"io.k8s.api.core.v1.NodeSystemInfo":{"properties":{"architecture":{"type":"string"},"bootID":{"type":"string"},"containerRuntimeVersion":{"type":"string"},"kernelVersion":{"type":"string"},"kubeProxyVersion":{"type":"string"},"kubeletVersion":{"type":"string"},"machineID":{"type":"string"},"operatingSystem":{"type":"string"},"osImage":{"type":"string"},"systemUUID":{"type":"string"}},"type":"object"},"io.k8s.api.core.v1.ObjectReference":{"properties":{"apiVersion":{"type":"string"},"fieldPath":{"type":"string"},"kind":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"resourceVersion":{"type":"string"},"uid":{"type":"string"}},"type":"object"},"io.k8s.apimachinery.pkg.apis.meta.v1.Duration":{"properties":{"Duration":{"format":"int64","type":"integer"}},"type":"object"},"io.k8s.apimachinery.pkg.apis.meta.v1.FieldsV1":{"properties":{"-":{"type":"string"}},"type":"object"},"io.k8s.apimachinery.pkg.apis.meta.v1.ManagedFieldsEntry":{"properties":{"apiVersion":{"type":"string"},"fieldsType":{"type":"string"},"fieldsV1":{"$ref":"#/components/schemas/io.k8s.apimachinery.pkg.apis.meta.v1.FieldsV1"},"manager":{"type":"string"},"operation":{"type":"string"},"subresource":{"type":"string"},"time":{"$ref":"#/components/schemas/io.k8s.apimachinery.pkg.apis.meta.v1.Time"}},"type":"object"},"io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta":{"properties":{"annotations":{"additionalProperties":{"type":"string"},"type":"object"},"creationTimestamp":{"$ref":"#/components/schemas/io.k8s.apimachinery.pkg.apis.meta.v1.Time"},"deletionGracePeriodSeconds":{"format":"int64","type":"integer"},"deletionTimestamp":{"$ref":"#/components/schemas/io.k8s.apimachinery.pkg.apis.meta.v1.Time"},"finalizers":{"items":{"type":"string"},"type":"array"},"generateName":{"type":"string"},"generation":{"format":"int64","type":"integer"},"labels":{"additionalProperties":{"type":"string"},"type":"object"},"managedFields":{"items":{"$ref":"#/components/schemas/io.k8s.apimachinery.pkg.apis.meta.v1.ManagedFieldsEntry"},"type":"array"},"name":{"type":"string"},"namespace":{"type":"string"},"ownerReferences":{"items":{"$ref":"#/components/schemas/io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReference"},"type":"array"},"resourceVersion":{"type":"string"},"selfLink":{"type":"string"},"uid":{"type":"string"}},"type":"object"},"io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReference":{"properties":{"apiVersion":{"type":"string"},"blockOwnerDeletion":{"type":"boolean"},"controller":{"type":"boolean"},"kind":{"type":"string"},"name":{"type":"string"},"uid":{"type":"string"}},"type":"object"},"io.k8s.apimachinery.pkg.apis.meta.v1.Time":{"properties":{"Time":{"type":"string"}},"type":"object"},"io.k8s.sigs.cluster-api.api.v1beta1.Bootstrap":{"properties":{"configRef":{"$ref":"#/components/schemas/io.k8s.api.core.v1.ObjectReference"},"dataSecretName":{"type":"string"}},"type":"object"},"io.k8s.sigs.cluster-api.api.v1beta1.Condition":{"properties":{"lastTransitionTime":{"$ref":"#/components/schemas/io.k8s.apimachinery.pkg.apis.meta.v1.Time"},"message":{"type":"string"},"reason":{"type":"string"},"severity":{"type":"string"},"status":{"type":"string"},"type":{"type":"string"}},"type":"object"},"io.k8s.sigs.cluster-api.api.v1beta1.Machine":{"properties":{"apiVersion":{"type":"string"},"kind":{"type":"string"},"metadata":{"$ref":"#/components/schemas/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"},"spec":{"$ref":"#/components/schemas/io.k8s.sigs.cluster-api.api.v1beta1.MachineSpec"},"status":{"$ref":"#/components/schemas/io.k8s.sigs.cluster-api.api.v1beta1.MachineStatus"}},"type":"object"},"io.k8s.sigs.cluster-api.api.v1beta1.MachineAddress":{"properties":{"address":{"type":"string"},"type":{"type":"string"}},"type":"object"},"io.k8s.sigs.cluster-api.api.v1beta1.MachineSpec":{"properties":{"bootstrap":{"$ref":"#/components/schemas/io.k8s.sigs.cluster-api.api.v1beta1.Bootstrap"},"clusterName":{"type":"string"},"failureDomain":{"type":"string"},"infrastructureRef":{"$ref":"#/components/schemas/io.k8s.api.core.v1.ObjectReference"},"nodeDeletionTimeout":{"$ref":"#/components/schemas/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"},"nodeDrainTimeout":{"$ref":"#/components/schemas/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"},"nodeVolumeDetachTimeout":{"$ref":"#/components/schemas/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"},"providerID":{"type":"string"},"version":{"type":"string"}},"type":"object"},"io.k8s.sigs.cluster-api.api.v1beta1.MachineStatus":{"properties":{"addresses":{"items":{"$ref":"#/components/schemas/io.k8s.sigs.cluster-api.api.v1beta1.MachineAddress"},"type":"array"},"bootstrapReady":{"type":"boolean"},"certificatesExpiryDate":{"$ref":"#/components/schemas/io.k8s.apimachinery.pkg.apis.meta.v1.Time"},"conditions":{"items":{"$ref":"#/components/schemas/io.k8s.sigs.cluster-api.api.v1beta1.Condition"},"type":"array"},"failureMessage":{"type":"string"},"failureReason":{"type":"string"},"infrastructureReady":{"type":"boolean"},"lastUpdated":{"$ref":"#/components/schemas/io.k8s.apimachinery.pkg.apis.meta.v1.Time"},"nodeInfo":{"$ref":"#/components/schemas/io.k8s.api.core.v1.NodeSystemInfo"},"nodeRef":{"$ref":"#/components/schemas/io.k8s.api.core.v1.ObjectReference"},"observedGeneration":{"format":"int64","type":"integer"},"phase":{"type":"string"}},"type":"object"}}},"info":{"title":"cluster-api","version":"0.0.0"},"openapi":"3.0.0","paths":{}}
\ No newline at end of file
diff --git a/kubernetes-model-generator/openapi/schemas/openshift-generated.json b/kubernetes-model-generator/openapi/schemas/openshift-generated.json
index 6642abed5ba..f047d489963 100644
--- a/kubernetes-model-generator/openapi/schemas/openshift-generated.json
+++ b/kubernetes-model-generator/openapi/schemas/openshift-generated.json
@@ -14891,6 +14891,33 @@
"Scope": "Namespaced"
}
},
+ "com.github.metal3-io.baremetal-operator.apis.metal3.io.v1alpha1.profile.Profile": {
+ "description": "Profile holds the settings for a class of hardware.",
+ "type": "object",
+ "required": [
+ "Name",
+ "RootDeviceHints"
+ ],
+ "properties": {
+ "Name": {
+ "description": "Name holds the profile name",
+ "type": "string",
+ "default": ""
+ },
+ "RootDeviceHints": {
+ "description": "RootDeviceHints holds the suggestions for placing the storage for the root filesystem.",
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.RootDeviceHints"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "",
+ "Version": "profile",
+ "Kind": "Profile",
+ "Scope": "Namespaced"
+ }
+ },
"com.github.openshift.api.unidling.v1alpha1.CrossGroupObjectReference": {
"description": "CrossGroupObjectReference is a reference to an object in the same namespace in the specified group. It is similar to autoscaling.CrossVersionObjectReference.",
"type": "object",
@@ -19942,6 +19969,476 @@
"Scope": "Namespaced"
}
},
+ "io.cncf.cni.k8s.v1.BandwidthEntry": {
+ "description": "BandwidthEntry for CNI BandwidthEntry",
+ "type": "object",
+ "required": [
+ "ingressRate",
+ "ingressBurst",
+ "egressRate",
+ "egressBurst"
+ ],
+ "properties": {
+ "egressBurst": {
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "egressRate": {
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "ingressBurst": {
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "ingressRate": {
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "BandwidthEntry",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.cncf.cni.k8s.v1.DNS": {
+ "description": "DNS contains values interesting for DNS resolvers",
+ "type": "object",
+ "properties": {
+ "domain": {
+ "type": "string"
+ },
+ "nameservers": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "options": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "search": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "DNS",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.cncf.cni.k8s.v1.DeviceInfo": {
+ "description": "DeviceInfo contains the information of the device associated with this network (if any)",
+ "type": "object",
+ "properties": {
+ "memif": {
+ "$ref": "#/definitions/io.cncf.cni.k8s.v1.MemifDevice"
+ },
+ "pci": {
+ "$ref": "#/definitions/io.cncf.cni.k8s.v1.PciDevice"
+ },
+ "type": {
+ "type": "string"
+ },
+ "vdpa": {
+ "$ref": "#/definitions/io.cncf.cni.k8s.v1.VdpaDevice"
+ },
+ "version": {
+ "type": "string"
+ },
+ "vhost-user": {
+ "$ref": "#/definitions/io.cncf.cni.k8s.v1.VhostDevice"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "DeviceInfo",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.cncf.cni.k8s.v1.MemifDevice": {
+ "type": "object",
+ "properties": {
+ "mode": {
+ "type": "string"
+ },
+ "path": {
+ "type": "string"
+ },
+ "role": {
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "MemifDevice",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.cncf.cni.k8s.v1.NetworkAttachmentDefinition": {
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.cncf.cni.k8s.v1.NetworkAttachmentDefinitionSpec"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "NetworkAttachmentDefinition",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.cncf.cni.k8s.v1.NetworkAttachmentDefinitionList": {
+ "type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.cncf.cni.k8s.v1.NetworkAttachmentDefinition"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "NetworkAttachmentDefinitionList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.cncf.cni.k8s.v1.NetworkAttachmentDefinitionSpec": {
+ "type": "object",
+ "required": [
+ "config"
+ ],
+ "properties": {
+ "config": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "NetworkAttachmentDefinitionSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.cncf.cni.k8s.v1.NetworkSelectionElement": {
+ "description": "NetworkSelectionElement represents one element of the JSON format Network Attachment Selection Annotation as described in section 4.1.2 of the CRD specification.",
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "bandwidth": {
+ "description": "BandwidthRequest contains an optional requested bandwidth for the network",
+ "$ref": "#/definitions/io.cncf.cni.k8s.v1.BandwidthEntry"
+ },
+ "cni-args": {
+ "description": "CNIArgs contains additional CNI arguments for the network interface",
+ "type": "object",
+ "additionalProperties": {
+ "type": "object"
+ }
+ },
+ "default-route": {
+ "description": "GatewayRequest contains default route IP address for the pod",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "format": "byte"
+ }
+ },
+ "infiniband-guid": {
+ "description": "InfinibandGUIDRequest contains an optional requested Infiniband GUID address for this network attachment",
+ "type": "string"
+ },
+ "interface": {
+ "description": "InterfaceRequest contains an optional requested name for the network interface this attachment will create in the container",
+ "type": "string"
+ },
+ "ipam-claim-reference": {
+ "description": "IPAMClaimReference container the IPAMClaim name where the IPs for this attachment will be located.",
+ "type": "string"
+ },
+ "ips": {
+ "description": "IPRequest contains an optional requested IP addresses for this network attachment",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "mac": {
+ "description": "MacRequest contains an optional requested MAC address for this network attachment",
+ "type": "string"
+ },
+ "name": {
+ "description": "Name contains the name of the Network object this element selects",
+ "type": "string",
+ "default": ""
+ },
+ "namespace": {
+ "description": "Namespace contains the optional namespace that the network referenced by Name exists in",
+ "type": "string"
+ },
+ "portMappings": {
+ "description": "PortMappingsRequest contains an optional requested port mapping for the network",
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/io.cncf.cni.k8s.v1.PortMapEntry"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "NetworkSelectionElement",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.cncf.cni.k8s.v1.NetworkStatus": {
+ "description": "NetworkStatus is for network status annotation for pod",
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "default": {
+ "type": "boolean"
+ },
+ "device-info": {
+ "$ref": "#/definitions/io.cncf.cni.k8s.v1.DeviceInfo"
+ },
+ "dns": {
+ "default": {},
+ "$ref": "#/definitions/io.cncf.cni.k8s.v1.DNS"
+ },
+ "gateway": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "interface": {
+ "type": "string"
+ },
+ "ips": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "mac": {
+ "type": "string"
+ },
+ "mtu": {
+ "type": "integer",
+ "format": "int32"
+ },
+ "name": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "NetworkStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.cncf.cni.k8s.v1.NoK8sNetworkError": {
+ "description": "NoK8sNetworkError indicates error, no network in kubernetes",
+ "type": "object",
+ "required": [
+ "Message"
+ ],
+ "properties": {
+ "Message": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "NoK8sNetworkError",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.cncf.cni.k8s.v1.PciDevice": {
+ "type": "object",
+ "properties": {
+ "pci-address": {
+ "type": "string"
+ },
+ "pf-pci-address": {
+ "type": "string"
+ },
+ "rdma-device": {
+ "type": "string"
+ },
+ "representor-device": {
+ "type": "string"
+ },
+ "vhost-net": {
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "PciDevice",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.cncf.cni.k8s.v1.PortMapEntry": {
+ "description": "PortMapEntry for CNI PortMapEntry",
+ "type": "object",
+ "required": [
+ "hostPort",
+ "containerPort"
+ ],
+ "properties": {
+ "containerPort": {
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "hostIP": {
+ "type": "string"
+ },
+ "hostPort": {
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "protocol": {
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "PortMapEntry",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.cncf.cni.k8s.v1.VdpaDevice": {
+ "type": "object",
+ "properties": {
+ "driver": {
+ "type": "string"
+ },
+ "parent-device": {
+ "type": "string"
+ },
+ "path": {
+ "type": "string"
+ },
+ "pci-address": {
+ "type": "string"
+ },
+ "pf-pci-address": {
+ "type": "string"
+ },
+ "representor-device": {
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "VdpaDevice",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.cncf.cni.k8s.v1.VhostDevice": {
+ "type": "object",
+ "properties": {
+ "mode": {
+ "type": "string"
+ },
+ "path": {
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "k8s.cni.cncf.io",
+ "Version": "v1",
+ "Kind": "VhostDevice",
+ "Scope": "Namespaced"
+ }
+ },
"io.k8s.api.admission.v1.AdmissionRequest": {
"description": "AdmissionRequest describes the admission.Attributes for the admission request.",
"type": "object",
@@ -20653,13 +21150,8 @@
"x-kubernetes-list-type": "atomic"
},
"scope": {
- "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".\n\n\nPossible enum values:\n - `\"*\"` means that all scopes are included.\n - `\"Cluster\"` means that scope is limited to cluster-scoped objects. Namespace objects are cluster-scoped.\n - `\"Namespaced\"` means that scope is limited to namespaced objects.",
- "type": "string",
- "enum": [
- "*",
- "Cluster",
- "Namespaced"
- ]
+ "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".",
+ "type": "string"
}
},
"x-fabric8-info": {
@@ -20755,13 +21247,8 @@
"x-kubernetes-list-type": "atomic"
},
"scope": {
- "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".\n\n\nPossible enum values:\n - `\"*\"` means that all scopes are included.\n - `\"Cluster\"` means that scope is limited to cluster-scoped objects. Namespace objects are cluster-scoped.\n - `\"Namespaced\"` means that scope is limited to namespaced objects.",
- "type": "string",
- "enum": [
- "*",
- "Cluster",
- "Namespaced"
- ]
+ "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".",
+ "type": "string"
}
},
"x-fabric8-info": {
@@ -20820,13 +21307,8 @@
"x-kubernetes-list-type": "atomic"
},
"scope": {
- "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".\n\n\nPossible enum values:\n - `\"*\"` means that all scopes are included.\n - `\"Cluster\"` means that scope is limited to cluster-scoped objects. Namespace objects are cluster-scoped.\n - `\"Namespaced\"` means that scope is limited to namespaced objects.",
- "type": "string",
- "enum": [
- "*",
- "Cluster",
- "Namespaced"
- ]
+ "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".",
+ "type": "string"
}
},
"x-fabric8-info": {
@@ -21633,13 +22115,8 @@
"x-kubernetes-list-type": "atomic"
},
"scope": {
- "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".\n\n\nPossible enum values:\n - `\"*\"` means that all scopes are included.\n - `\"Cluster\"` means that scope is limited to cluster-scoped objects. Namespace objects are cluster-scoped.\n - `\"Namespaced\"` means that scope is limited to namespaced objects.",
- "type": "string",
- "enum": [
- "*",
- "Cluster",
- "Namespaced"
- ]
+ "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".",
+ "type": "string"
}
},
"x-fabric8-info": {
@@ -22425,13 +22902,8 @@
"x-kubernetes-list-type": "atomic"
},
"scope": {
- "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".\n\n\nPossible enum values:\n - `\"*\"` means that all scopes are included.\n - `\"Cluster\"` means that scope is limited to cluster-scoped objects. Namespace objects are cluster-scoped.\n - `\"Namespaced\"` means that scope is limited to namespaced objects.",
- "type": "string",
- "enum": [
- "*",
- "Cluster",
- "Namespaced"
- ]
+ "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".",
+ "type": "string"
}
},
"x-fabric8-info": {
@@ -57701,12 +58173,85 @@
"Scope": "Namespaced"
}
},
- "io.openshift.apiserver.v1.APIRequestCount": {
- "description": "APIRequestCount tracks requests made to an API. The instance name must be of the form `resource.version.group`, matching the resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.AttachedImageReference": {
+ "description": "Contains the DataImage currently attached to the BMH.",
"type": "object",
"required": [
- "spec"
+ "url"
+ ],
+ "properties": {
+ "url": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "AttachedImageReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.BIOS": {
+ "description": "BIOS describes the BIOS version on the host.",
+ "type": "object",
+ "properties": {
+ "date": {
+ "description": "The release/build date for this BIOS",
+ "type": "string"
+ },
+ "vendor": {
+ "description": "The vendor name for this BIOS",
+ "type": "string"
+ },
+ "version": {
+ "description": "The version of the BIOS",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "BIOS",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.BMCDetails": {
+ "description": "BMCDetails contains the information necessary to communicate with the bare metal controller module on host.",
+ "type": "object",
+ "required": [
+ "address",
+ "credentialsName"
],
+ "properties": {
+ "address": {
+ "description": "Address holds the URL for accessing the controller on the network. The scheme part designates the driver to use with the host.",
+ "type": "string",
+ "default": ""
+ },
+ "credentialsName": {
+ "description": "The name of the secret containing the BMC credentials (requires keys \"username\" and \"password\").",
+ "type": "string",
+ "default": ""
+ },
+ "disableCertificateVerification": {
+ "description": "DisableCertificateVerification disables verification of server certificates when using HTTPS to connect to the BMC. This is required when the server certificate is self-signed, but is insecure because it allows a man-in-the-middle to intercept the connection.",
+ "type": "boolean"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "BMCDetails",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.BMCEventSubscription": {
+ "description": "BMCEventSubscription is the Schema for the fast eventing API",
+ "type": "object",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -57717,34 +58262,30 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec defines the characteristics of the resource.",
"default": {},
- "$ref": "#/definitions/io.openshift.apiserver.v1.APIRequestCountSpec"
+ "$ref": "#/definitions/io.metal3.v1alpha1.BMCEventSubscriptionSpec"
},
"status": {
- "description": "status contains the observed state of the resource.",
"default": {},
- "$ref": "#/definitions/io.openshift.apiserver.v1.APIRequestCountStatus"
+ "$ref": "#/definitions/io.metal3.v1alpha1.BMCEventSubscriptionStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "apiserver.openshift.io",
- "Version": "v1",
- "Kind": "APIRequestCount",
- "Scope": "Clustered"
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "BMCEventSubscription",
+ "Scope": "Namespaced"
}
},
- "io.openshift.apiserver.v1.APIRequestCountList": {
- "description": "APIRequestCountList is a list of APIRequestCount resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.BMCEventSubscriptionList": {
+ "description": "BMCEventSubscriptionList contains a list of BMCEventSubscriptions.",
"type": "object",
"required": [
- "metadata",
"items"
],
"properties": {
@@ -57756,7 +58297,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.apiserver.v1.APIRequestCount"
+ "$ref": "#/definitions/io.metal3.v1alpha1.BMCEventSubscription"
}
},
"kind": {
@@ -57764,352 +58305,388 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "apiserver.openshift.io",
- "Version": "v1",
- "Kind": "APIRequestCountList",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "BMCEventSubscriptionList",
"Scope": "Namespaced"
}
},
- "io.openshift.apiserver.v1.APIRequestCountSpec": {
+ "io.metal3.v1alpha1.BMCEventSubscriptionSpec": {
"type": "object",
"properties": {
- "numberOfUsersToReport": {
- "description": "numberOfUsersToReport is the number of users to include in the report. If unspecified or zero, the default is ten. This is default is subject to change.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "context": {
+ "description": "Arbitrary user-provided context for the event",
+ "type": "string"
+ },
+ "destination": {
+ "description": "A webhook URL to send events to",
+ "type": "string"
+ },
+ "hostName": {
+ "description": "A reference to a BareMetalHost",
+ "type": "string"
+ },
+ "httpHeadersRef": {
+ "description": "A secret containing HTTP headers which should be passed along to the Destination when making a request",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apiserver.openshift.io",
- "Version": "v1",
- "Kind": "APIRequestCountSpec",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "BMCEventSubscriptionSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.apiserver.v1.APIRequestCountStatus": {
+ "io.metal3.v1alpha1.BMCEventSubscriptionStatus": {
"type": "object",
- "required": [
- "conditions",
- "requestCount"
- ],
"properties": {
- "conditions": {
- "description": "conditions contains details of the current status of this API Resource.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "currentHour": {
- "description": "currentHour contains request history for the current hour. This is porcelain to make the API easier to read by humans seeing if they addressed a problem. This field is reset on the hour.",
- "default": {},
- "$ref": "#/definitions/io.openshift.apiserver.v1.PerResourceAPIRequestLog"
- },
- "last24h": {
- "description": "last24h contains request history for the last 24 hours, indexed by the hour, so 12:00AM-12:59 is in index 0, 6am-6:59am is index 6, etc. The index of the current hour is updated live and then duplicated into the requestsLastHour field.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.apiserver.v1.PerResourceAPIRequestLog"
- }
- },
- "removedInRelease": {
- "description": "removedInRelease is when the API will be removed.",
+ "error": {
"type": "string"
},
- "requestCount": {
- "description": "requestCount is a sum of all requestCounts across all current hours, nodes, and users.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "subscriptionID": {
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apiserver.openshift.io",
- "Version": "v1",
- "Kind": "APIRequestCountStatus",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "BMCEventSubscriptionStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.apiserver.v1.PerNodeAPIRequestLog": {
- "description": "PerNodeAPIRequestLog contains logs of requests to a certain node.",
+ "io.metal3.v1alpha1.BareMetalHost": {
+ "description": "BareMetalHost is the Schema for the baremetalhosts API",
"type": "object",
- "required": [
- "nodeName",
- "requestCount",
- "byUser"
- ],
"properties": {
- "byUser": {
- "description": "byUser contains request details by top .spec.numberOfUsersToReport users. Note that because in the case of an apiserver, restart the list of top users is determined on a best-effort basis, the list might be imprecise. In addition, some system users may be explicitly included in the list.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.apiserver.v1.PerUserAPIRequestCount"
- }
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "nodeName": {
- "description": "nodeName where the request are being handled.",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "requestCount": {
- "description": "requestCount is a sum of all requestCounts across all users, even those outside of the top 10 users.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.BareMetalHostSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.BareMetalHostStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "apiserver.openshift.io",
- "Version": "v1",
- "Kind": "PerNodeAPIRequestLog",
+ "Type": "object",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "BareMetalHost",
"Scope": "Namespaced"
}
},
- "io.openshift.apiserver.v1.PerResourceAPIRequestLog": {
- "description": "PerResourceAPIRequestLog logs request for various nodes.",
+ "io.metal3.v1alpha1.BareMetalHostList": {
+ "description": "BareMetalHostList contains a list of BareMetalHost.",
"type": "object",
"required": [
- "requestCount"
+ "items"
],
"properties": {
- "byNode": {
- "description": "byNode contains logs of requests per node.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.apiserver.v1.PerNodeAPIRequestLog"
+ "$ref": "#/definitions/io.metal3.v1alpha1.BareMetalHost"
}
},
- "requestCount": {
- "description": "requestCount is a sum of all requestCounts across nodes.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "apiserver.openshift.io",
- "Version": "v1",
- "Kind": "PerResourceAPIRequestLog",
+ "Type": "list",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "BareMetalHostList",
"Scope": "Namespaced"
}
},
- "io.openshift.apiserver.v1.PerUserAPIRequestCount": {
- "description": "PerUserAPIRequestCount contains logs of a user's requests.",
+ "io.metal3.v1alpha1.BareMetalHostSpec": {
+ "description": "BareMetalHostSpec defines the desired state of BareMetalHost.",
"type": "object",
"required": [
- "username",
- "userAgent",
- "requestCount",
- "byVerb"
+ "online"
],
"properties": {
- "byVerb": {
- "description": "byVerb details by verb.",
+ "architecture": {
+ "description": "CPU architecture of the host, e.g. \"x86_64\" or \"aarch64\". If unset, eventually populated by inspection.",
+ "type": "string"
+ },
+ "automatedCleaningMode": {
+ "description": "When set to disabled, automated cleaning will be skipped during provisioning and deprovisioning.",
+ "type": "string"
+ },
+ "bmc": {
+ "description": "How do we connect to the BMC (Baseboard Management Controller) on the host?",
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.BMCDetails"
+ },
+ "bootMACAddress": {
+ "description": "The MAC address of the NIC used for provisioning the host. In case of network boot, this is the MAC address of the PXE booting interface. The MAC address of the BMC must never be used here!",
+ "type": "string"
+ },
+ "bootMode": {
+ "description": "Select the method of initializing the hardware during boot. Defaults to UEFI. Legacy boot should only be used for hardware that does not support UEFI correctly. Set to UEFISecureBoot to turn secure boot on automatically after provisioning.",
+ "type": "string"
+ },
+ "consumerRef": {
+ "description": "ConsumerRef can be used to store information about something that is using a host. When it is not empty, the host is considered \"in use\". The common use case is a link to a Machine resource when the host is used by Cluster API.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "customDeploy": {
+ "description": "A custom deploy procedure. This is an advanced feature that allows using a custom deploy step provided by a site-specific deployment ramdisk. Most users will want to use \"image\" instead. Settings this field triggers provisioning.",
+ "$ref": "#/definitions/io.metal3.v1alpha1.CustomDeploy"
+ },
+ "description": {
+ "description": "Description is a human-entered text used to help identify the host.",
+ "type": "string"
+ },
+ "externallyProvisioned": {
+ "description": "ExternallyProvisioned means something else has provisioned the image running on the host, and the operator should only manage the power status. This field is used for integration with already provisioned hosts and when pivoting hosts between clusters. If unsure, leave this field as false.",
+ "type": "boolean"
+ },
+ "firmware": {
+ "description": "Firmware (BIOS) configuration for bare metal server. If set, the requested settings will be applied before the host is provisioned. Only some vendor drivers support this field. An alternative is to use HostFirmwareSettings resources that allow changing arbitrary values and support the generic Redfish-based drivers.",
+ "$ref": "#/definitions/io.metal3.v1alpha1.FirmwareConfig"
+ },
+ "hardwareProfile": {
+ "description": "What is the name of the hardware profile for this host? Hardware profiles are deprecated and should not be used. Use the separate fields Architecture and RootDeviceHints instead. Set to \"empty\" to prepare for the future version of the API without hardware profiles.",
+ "type": "string"
+ },
+ "image": {
+ "description": "Image holds the details of the image to be provisioned. Populating the image will cause the host to start provisioning.",
+ "$ref": "#/definitions/io.metal3.v1alpha1.Image"
+ },
+ "metaData": {
+ "description": "MetaData holds the reference to the Secret containing host metadata which is passed to the Config Drive. By default, the operater will generate metadata for the host, so most users do not need to set this field.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
+ },
+ "networkData": {
+ "description": "NetworkData holds the reference to the Secret containing network configuration which is passed to the Config Drive and interpreted by the first boot software such as cloud-init.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
+ },
+ "online": {
+ "description": "Should the host be powered on? Changing this value will trigger a change in power state of the host.",
+ "type": "boolean",
+ "default": false
+ },
+ "preprovisioningNetworkDataName": {
+ "description": "PreprovisioningNetworkDataName is the name of the Secret in the local namespace containing network configuration which is passed to the preprovisioning image, and to the Config Drive if not overridden by specifying NetworkData.",
+ "type": "string"
+ },
+ "raid": {
+ "description": "RAID configuration for bare metal server. If set, the RAID settings will be applied before the host is provisioned. If not, the current settings will not be modified. Only one of the sub-fields hardwareRAIDVolumes and softwareRAIDVolumes can be set at the same time.",
+ "$ref": "#/definitions/io.metal3.v1alpha1.RAIDConfig"
+ },
+ "rootDeviceHints": {
+ "description": "Provide guidance about how to choose the device for the image being provisioned. The default is currently to use /dev/sda as the root device.",
+ "$ref": "#/definitions/io.metal3.v1alpha1.RootDeviceHints"
+ },
+ "taints": {
+ "description": "Taints is the full, authoritative list of taints to apply to the corresponding Machine. This list will overwrite any modifications made to the Machine on an ongoing basis.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.apiserver.v1.PerVerbAPIRequestCount"
+ "$ref": "#/definitions/io.k8s.api.core.v1.Taint"
}
},
- "requestCount": {
- "description": "requestCount of requests by the user across all verbs.",
- "type": "integer",
- "format": "int64",
- "default": 0
- },
- "userAgent": {
- "description": "userAgent that made the request. The same user often has multiple binaries which connect (pods with many containers). The different binaries will have different userAgents, but the same user. In addition, we have userAgents with version information embedded and the userName isn't likely to change.",
- "type": "string",
- "default": ""
- },
- "username": {
- "description": "userName that made the request.",
- "type": "string",
- "default": ""
+ "userData": {
+ "description": "UserData holds the reference to the Secret containing the user data which is passed to the Config Drive and interpreted by the first-boot software such as cloud-init. The format of user data is specific to the first-boot software.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apiserver.openshift.io",
- "Version": "v1",
- "Kind": "PerUserAPIRequestCount",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "BareMetalHostSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.apiserver.v1.PerVerbAPIRequestCount": {
- "description": "PerVerbAPIRequestCount requestCounts requests by API request verb.",
+ "io.metal3.v1alpha1.BareMetalHostStatus": {
+ "description": "BareMetalHostStatus defines the observed state of BareMetalHost.",
"type": "object",
"required": [
- "verb",
- "requestCount"
+ "operationalStatus",
+ "provisioning",
+ "errorMessage",
+ "poweredOn",
+ "errorCount"
],
"properties": {
- "requestCount": {
- "description": "requestCount of requests for verb.",
+ "errorCount": {
+ "description": "ErrorCount records how many times the host has encoutered an error since the last successful operation",
"type": "integer",
- "format": "int64",
+ "format": "int32",
"default": 0
},
- "verb": {
- "description": "verb of API request (get, list, create, etc...)",
+ "errorMessage": {
+ "description": "The last error message reported by the provisioning subsystem.",
+ "type": "string",
+ "default": ""
+ },
+ "errorType": {
+ "description": "ErrorType indicates the type of failure encountered when the OperationalStatus is OperationalStatusError",
+ "type": "string"
+ },
+ "goodCredentials": {
+ "description": "The last credentials we were able to validate as working.",
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.CredentialsStatus"
+ },
+ "hardware": {
+ "description": "The hardware discovered to exist on the host. This field will be removed in the next API version in favour of the separate HardwareData resource.",
+ "$ref": "#/definitions/io.metal3.v1alpha1.HardwareDetails"
+ },
+ "hardwareProfile": {
+ "description": "The name of the profile matching the hardware details. Hardware profiles are deprecated and should not be relied on.",
+ "type": "string"
+ },
+ "lastUpdated": {
+ "description": "LastUpdated identifies when this status was last observed.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "operationHistory": {
+ "description": "OperationHistory holds information about operations performed on this host.",
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.OperationHistory"
+ },
+ "operationalStatus": {
+ "description": "OperationalStatus holds the status of the host",
"type": "string",
"default": ""
+ },
+ "poweredOn": {
+ "description": "Whether or not the host is currently powered on. This field may get briefly out of sync with the actual state of the hardware while provisioning processes are running.",
+ "type": "boolean",
+ "default": false
+ },
+ "provisioning": {
+ "description": "Information tracked by the provisioner.",
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.ProvisionStatus"
+ },
+ "triedCredentials": {
+ "description": "The last credentials we sent to the provisioning backend.",
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.CredentialsStatus"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apiserver.openshift.io",
- "Version": "v1",
- "Kind": "PerVerbAPIRequestCount",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "BareMetalHostStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.CustomDeploymentStrategyParams": {
- "description": "CustomDeploymentStrategyParams are the input to the Custom deployment strategy.",
+ "io.metal3.v1alpha1.CPU": {
+ "description": "CPU describes one processor on the host.",
"type": "object",
"properties": {
- "command": {
- "description": "Command is optional and overrides CMD in the container Image.",
+ "arch": {
+ "type": "string"
+ },
+ "clockMegahertz": {
+ "type": "number",
+ "format": "double"
+ },
+ "count": {
+ "type": "integer",
+ "format": "int32"
+ },
+ "flags": {
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "environment": {
- "description": "Environment holds the environment which will be given to the container for Image.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
- }
- },
- "image": {
- "description": "Image specifies a container image which can carry out a deployment.",
+ "model": {
"type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "CustomDeploymentStrategyParams",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "CPU",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentCause": {
- "description": "DeploymentCause captures information about a particular cause of a deployment.",
+ "io.metal3.v1alpha1.CredentialsStatus": {
+ "description": "CredentialsStatus contains the reference and version of the last set of BMC credentials the controller was able to validate.",
"type": "object",
- "required": [
- "type"
- ],
"properties": {
- "imageTrigger": {
- "description": "ImageTrigger contains the image trigger details, if this trigger was fired based on an image change",
- "$ref": "#/definitions/io.openshift.apps.v1.DeploymentCauseImageTrigger"
+ "credentials": {
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
},
- "type": {
- "description": "Type of the trigger that resulted in the creation of a new deployment",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentCause",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.apps.v1.DeploymentCauseImageTrigger": {
- "description": "DeploymentCauseImageTrigger represents details about the cause of a deployment originating from an image change trigger",
- "type": "object",
- "required": [
- "from"
- ],
- "properties": {
- "from": {
- "description": "From is a reference to the changed object which triggered a deployment. The field may have the kinds DockerImage, ImageStreamTag, or ImageStreamImage.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "credentialsVersion": {
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentCauseImageTrigger",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "CredentialsStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentCondition": {
- "description": "DeploymentCondition describes the state of a deployment config at a certain point.",
+ "io.metal3.v1alpha1.CustomDeploy": {
+ "description": "Custom deploy is a description of a customized deploy process.",
"type": "object",
"required": [
- "type",
- "status"
+ "method"
],
"properties": {
- "lastTransitionTime": {
- "description": "The last time the condition transitioned from one status to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "lastUpdateTime": {
- "description": "The last time this condition was updated.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "A human readable message indicating details about the transition.",
- "type": "string"
- },
- "reason": {
- "description": "The reason for the condition's last transition.",
- "type": "string"
- },
- "status": {
- "description": "Status of the condition, one of True, False, Unknown.",
- "type": "string",
- "default": ""
- },
- "type": {
- "description": "Type of deployment condition.",
+ "method": {
+ "description": "Custom deploy method name. This name is specific to the deploy ramdisk used. If you don't have a custom deploy ramdisk, you shouldn't use CustomDeploy.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentCondition",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "CustomDeploy",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentConfig": {
- "description": "Deployment Configs define the template for a pod and manages deploying new images or configuration changes. A single deployment configuration is usually analogous to a single micro-service. Can support many different deployment patterns, including full restart, customizable rolling updates, and fully custom behaviors, as well as pre- and post- deployment hooks. Each individual deployment is represented as a replication controller.\n\nA deployment is \"triggered\" when its configuration is changed or a tag in an Image Stream is changed. Triggers can be disabled to allow manual control over a deployment. The \"strategy\" determines how the deployment is carried out and may be changed at any time. The `latestVersion` field is updated when a new deployment is triggered by any means.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). Deprecated: Use deployments or other means for declarative updates for pods instead.",
+ "io.metal3.v1alpha1.DataImage": {
+ "description": "DataImage is the Schema for the dataimages API.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -58120,31 +58697,54 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "Spec represents a desired deployment state and how to deploy to it.",
"default": {},
- "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfigSpec"
+ "$ref": "#/definitions/io.metal3.v1alpha1.DataImageSpec"
},
"status": {
- "description": "Status represents the current deployment state.",
"default": {},
- "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfigStatus"
+ "$ref": "#/definitions/io.metal3.v1alpha1.DataImageStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentConfig",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "DataImage",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentConfigList": {
- "description": "DeploymentConfigList is a collection of deployment configs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.DataImageError": {
+ "description": "Contains the count of errors and the last error message.",
+ "type": "object",
+ "required": [
+ "count",
+ "message"
+ ],
+ "properties": {
+ "count": {
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "message": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "DataImageError",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.DataImageList": {
+ "description": "DataImageList contains a list of DataImage.",
"type": "object",
"required": [
"items"
@@ -58155,11 +58755,10 @@
"type": "string"
},
"items": {
- "description": "Items is a list of deployment configs",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfig"
+ "$ref": "#/definitions/io.metal3.v1alpha1.DataImage"
}
},
"kind": {
@@ -58167,785 +58766,628 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentConfigList",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "DataImageList",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentConfigRollback": {
- "description": "DeploymentConfigRollback provides the input to rollback generation.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.DataImageSpec": {
+ "description": "DataImageSpec defines the desired state of DataImage.",
"type": "object",
"required": [
- "name",
- "spec"
+ "url"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "name": {
- "description": "Name of the deployment config that will be rolled back.",
+ "url": {
+ "description": "Url is the address of the dataImage that we want to attach to a BareMetalHost",
"type": "string",
"default": ""
- },
- "spec": {
- "description": "Spec defines the options to rollback generation.",
- "default": {},
- "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfigRollbackSpec"
- },
- "updatedAnnotations": {
- "description": "UpdatedAnnotations is a set of new annotations that will be added in the deployment config.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentConfigRollback",
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "DataImageSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentConfigRollbackSpec": {
- "description": "DeploymentConfigRollbackSpec represents the options for rollback generation.",
+ "io.metal3.v1alpha1.DataImageStatus": {
+ "description": "DataImageStatus defines the observed state of DataImage.",
"type": "object",
- "required": [
- "from",
- "includeTriggers",
- "includeTemplate",
- "includeReplicationMeta",
- "includeStrategy"
- ],
"properties": {
- "from": {
- "description": "From points to a ReplicationController which is a deployment.",
+ "attachedImage": {
+ "description": "Currently attached DataImage",
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "includeReplicationMeta": {
- "description": "IncludeReplicationMeta specifies whether to include the replica count and selector.",
- "type": "boolean",
- "default": false
- },
- "includeStrategy": {
- "description": "IncludeStrategy specifies whether to include the deployment Strategy.",
- "type": "boolean",
- "default": false
- },
- "includeTemplate": {
- "description": "IncludeTemplate specifies whether to include the PodTemplateSpec.",
- "type": "boolean",
- "default": false
+ "$ref": "#/definitions/io.metal3.v1alpha1.AttachedImageReference"
},
- "includeTriggers": {
- "description": "IncludeTriggers specifies whether to include config Triggers.",
- "type": "boolean",
- "default": false
+ "error": {
+ "description": "Error count and message when attaching/detaching",
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.DataImageError"
},
- "revision": {
- "description": "Revision to rollback to. If set to 0, rollback to the last revision.",
- "type": "integer",
- "format": "int64"
+ "lastReconciled": {
+ "description": "Time of last reconciliation",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentConfigRollbackSpec",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "DataImageStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentConfigSpec": {
- "description": "DeploymentConfigSpec represents the desired state of the deployment.",
+ "io.metal3.v1alpha1.DetachedAnnotationArguments": {
"type": "object",
"properties": {
- "minReadySeconds": {
- "description": "MinReadySeconds is the minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)",
- "type": "integer",
- "format": "int32"
- },
- "paused": {
- "description": "Paused indicates that the deployment config is paused resulting in no new deployments on template changes or changes in the template caused by other triggers.",
- "type": "boolean"
- },
- "replicas": {
- "description": "Replicas is the number of desired replicas.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "revisionHistoryLimit": {
- "description": "RevisionHistoryLimit is the number of old ReplicationControllers to retain to allow for rollbacks. This field is a pointer to allow for differentiation between an explicit zero and not specified. Defaults to 10. (This only applies to DeploymentConfigs created via the new group API resource, not the legacy resource.)",
- "type": "integer",
- "format": "int32"
- },
- "selector": {
- "description": "Selector is a label query over pods that should match the Replicas count.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "strategy": {
- "description": "Strategy describes how a deployment is executed.",
- "default": {},
- "$ref": "#/definitions/io.openshift.apps.v1.DeploymentStrategy"
- },
- "template": {
- "description": "Template is the object that describes the pod that will be created if insufficient replicas are detected.",
- "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec"
- },
- "test": {
- "description": "Test ensures that this deployment config will have zero replicas except while a deployment is running. This allows the deployment config to be used as a continuous deployment test - triggering on images, running the deployment, and then succeeding or failing. Post strategy hooks and After actions can be used to integrate successful deployment with an action.",
- "type": "boolean",
- "default": false
- },
- "triggers": {
- "description": "Triggers determine how updates to a DeploymentConfig result in new deployments. If no triggers are defined, a new deployment can only occur as a result of an explicit client update to the DeploymentConfig with a new LatestVersion. If null, defaults to having a config change trigger.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.apps.v1.DeploymentTriggerPolicy"
- }
+ "deleteAction": {
+ "description": "DeleteAction indicates the desired delete logic when the detached annotation is present",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentConfigSpec",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "DetachedAnnotationArguments",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentConfigStatus": {
- "description": "DeploymentConfigStatus represents the current deployment state.",
+ "io.metal3.v1alpha1.Firmware": {
+ "description": "Firmware describes the firmware on the host.",
"type": "object",
- "required": [
- "latestVersion",
- "observedGeneration",
- "replicas",
- "updatedReplicas",
- "availableReplicas",
- "unavailableReplicas"
- ],
"properties": {
- "availableReplicas": {
- "description": "AvailableReplicas is the total number of available pods targeted by this deployment config.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "conditions": {
- "description": "Conditions represents the latest available observations of a deployment config's current state.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.apps.v1.DeploymentCondition"
- },
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "details": {
- "description": "Details are the reasons for the update to this deployment config. This could be based on a change made by the user or caused by an automatic trigger",
- "$ref": "#/definitions/io.openshift.apps.v1.DeploymentDetails"
- },
- "latestVersion": {
- "description": "LatestVersion is used to determine whether the current deployment associated with a deployment config is out of sync.",
- "type": "integer",
- "format": "int64",
- "default": 0
- },
- "observedGeneration": {
- "description": "ObservedGeneration is the most recent generation observed by the deployment config controller.",
- "type": "integer",
- "format": "int64",
- "default": 0
- },
- "readyReplicas": {
- "description": "Total number of ready pods targeted by this deployment.",
- "type": "integer",
- "format": "int32"
- },
- "replicas": {
- "description": "Replicas is the total number of pods targeted by this deployment config.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "unavailableReplicas": {
- "description": "UnavailableReplicas is the total number of unavailable pods targeted by this deployment config.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "updatedReplicas": {
- "description": "UpdatedReplicas is the total number of non-terminated pods targeted by this deployment config that have the desired template spec.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "bios": {
+ "description": "The BIOS for this firmware",
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.BIOS"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentConfigStatus",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "Firmware",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentDetails": {
- "description": "DeploymentDetails captures information about the causes of a deployment.",
+ "io.metal3.v1alpha1.FirmwareComponentStatus": {
+ "description": "FirmwareComponentStatus defines the status of a firmware component.",
"type": "object",
"required": [
- "causes"
+ "component",
+ "initialVersion"
],
"properties": {
- "causes": {
- "description": "Causes are extended data associated with all the causes for creating a new deployment",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.apps.v1.DeploymentCause"
- }
+ "component": {
+ "type": "string",
+ "default": ""
},
- "message": {
- "description": "Message is the user specified change message, if this deployment was triggered manually by the user",
+ "currentVersion": {
+ "type": "string"
+ },
+ "initialVersion": {
+ "type": "string",
+ "default": ""
+ },
+ "lastVersionFlashed": {
"type": "string"
+ },
+ "updatedAt": {
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentDetails",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "FirmwareComponentStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentLog": {
- "description": "DeploymentLog represents the logs for a deployment\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.FirmwareConfig": {
+ "description": "FirmwareConfig contains the configuration that you want to configure BIOS settings in Bare metal server.",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "simultaneousMultithreadingEnabled": {
+ "description": "Allows a single physical processor core to appear as several logical processors.",
+ "type": "boolean"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "sriovEnabled": {
+ "description": "SR-IOV support enables a hypervisor to create virtual instances of a PCI-express device, potentially increasing performance.",
+ "type": "boolean"
+ },
+ "virtualizationEnabled": {
+ "description": "Supports the virtualization of platform hardware.",
+ "type": "boolean"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentLog",
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "FirmwareConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentLogOptions": {
- "description": "DeploymentLogOptions is the REST options for a deployment log\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.FirmwareSchema": {
+ "description": "FirmwareSchema is the Schema for the firmwareschemas API.",
"type": "object",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "container": {
- "description": "The container for which to stream logs. Defaults to only container if there is one container in the pod.",
- "type": "string"
- },
- "follow": {
- "description": "Follow if true indicates that the build log should be streamed until the build terminates.",
- "type": "boolean"
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "limitBytes": {
- "description": "If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.",
- "type": "integer",
- "format": "int64"
- },
- "nowait": {
- "description": "NoWait if true causes the call to return immediately even if the deployment is not available yet. Otherwise the server will wait until the deployment has started.",
- "type": "boolean"
- },
- "previous": {
- "description": "Return previous deployment logs. Defaults to false.",
- "type": "boolean"
- },
- "sinceSeconds": {
- "description": "A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.",
- "type": "integer",
- "format": "int64"
- },
- "sinceTime": {
- "description": "An RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "tailLines": {
- "description": "If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime",
- "type": "integer",
- "format": "int64"
- },
- "timestamps": {
- "description": "If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.",
- "type": "boolean"
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "version": {
- "description": "Version of the deployment for which to view logs.",
- "type": "integer",
- "format": "int64"
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.FirmwareSchemaSpec"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentLogOptions",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "FirmwareSchema",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentRequest": {
- "description": "DeploymentRequest is a request to a deployment config for a new deployment.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.FirmwareSchemaList": {
+ "description": "FirmwareSchemaList contains a list of FirmwareSchema.",
"type": "object",
"required": [
- "name",
- "latest",
- "force"
+ "items"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "excludeTriggers": {
- "description": "ExcludeTriggers instructs the instantiator to avoid processing the specified triggers. This field overrides the triggers from latest and allows clients to control specific logic. This field is ignored if not specified.",
+ "items": {
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.FirmwareSchema"
}
},
- "force": {
- "description": "Force will try to force a new deployment to run. If the deployment config is paused, then setting this to true will return an Invalid error.",
- "type": "boolean",
- "default": false
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "latest": {
- "description": "Latest will update the deployment config with the latest state from all triggers.",
- "type": "boolean",
- "default": false
- },
- "name": {
- "description": "Name of the deployment config for requesting a new deployment.",
- "type": "string",
- "default": ""
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentRequest",
+ "Type": "list",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "FirmwareSchemaList",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentStrategy": {
- "description": "DeploymentStrategy describes how to perform a deployment.",
+ "io.metal3.v1alpha1.FirmwareSchemaSpec": {
+ "description": "FirmwareSchemaSpec defines the desired state of FirmwareSchema.",
"type": "object",
+ "required": [
+ "schema"
+ ],
"properties": {
- "activeDeadlineSeconds": {
- "description": "ActiveDeadlineSeconds is the duration in seconds that the deployer pods for this deployment config may be active on a node before the system actively tries to terminate them.",
- "type": "integer",
- "format": "int64"
- },
- "annotations": {
- "description": "Annotations is a set of key, value pairs added to custom deployer and lifecycle pre/post hook pods.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
+ "hardwareModel": {
+ "description": "The hardware model associated with this schema",
+ "type": "string"
},
- "customParams": {
- "description": "CustomParams are the input to the Custom deployment strategy, and may also be specified for the Recreate and Rolling strategies to customize the execution process that runs the deployment.",
- "$ref": "#/definitions/io.openshift.apps.v1.CustomDeploymentStrategyParams"
+ "hardwareVendor": {
+ "description": "The hardware vendor associated with this schema",
+ "type": "string"
},
- "labels": {
- "description": "Labels is a set of key, value pairs added to custom deployer and lifecycle pre/post hook pods.",
+ "schema": {
+ "description": "Map of firmware name to schema",
"type": "object",
"additionalProperties": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.SettingSchema"
}
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "FirmwareSchemaSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.FirmwareUpdate": {
+ "description": "FirmwareUpdate defines a firmware update specification.",
+ "type": "object",
+ "required": [
+ "component",
+ "url"
+ ],
+ "properties": {
+ "component": {
+ "type": "string",
+ "default": ""
},
- "recreateParams": {
- "description": "RecreateParams are the input to the Recreate deployment strategy.",
- "$ref": "#/definitions/io.openshift.apps.v1.RecreateDeploymentStrategyParams"
+ "url": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "FirmwareUpdate",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.HardwareData": {
+ "description": "HardwareData is the Schema for the hardwaredata API.",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "resources": {
- "description": "Resources contains resource requirements to execute the deployment and any hooks.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "rollingParams": {
- "description": "RollingParams are the input to the Rolling deployment strategy.",
- "$ref": "#/definitions/io.openshift.apps.v1.RollingDeploymentStrategyParams"
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "type": {
- "description": "Type is the name of a deployment strategy.",
- "type": "string"
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.HardwareDataSpec"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentStrategy",
+ "Type": "object",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HardwareData",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentTriggerImageChangeParams": {
- "description": "DeploymentTriggerImageChangeParams represents the parameters to the ImageChange trigger.",
+ "io.metal3.v1alpha1.HardwareDataList": {
+ "description": "HardwareDataList contains a list of HardwareData.",
"type": "object",
"required": [
- "from"
+ "items"
],
"properties": {
- "automatic": {
- "description": "Automatic means that the detection of a new tag value should result in an image update inside the pod template.",
- "type": "boolean"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "containerNames": {
- "description": "ContainerNames is used to restrict tag updates to the specified set of container names in a pod. If multiple triggers point to the same containers, the resulting behavior is undefined. Future API versions will make this a validation error. If ContainerNames does not point to a valid container, the trigger will be ignored. Future API versions will make this a validation error.",
+ "items": {
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.HardwareData"
}
},
- "from": {
- "description": "From is a reference to an image stream tag to watch for changes. From.Name is the only required subfield - if From.Namespace is blank, the namespace of the current deployment trigger will be used.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "lastTriggeredImage": {
- "description": "LastTriggeredImage is the last image to be triggered.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentTriggerImageChangeParams",
+ "Type": "list",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HardwareDataList",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.DeploymentTriggerPolicy": {
- "description": "DeploymentTriggerPolicy describes a policy for a single trigger that results in a new deployment.",
+ "io.metal3.v1alpha1.HardwareDataSpec": {
+ "description": "HardwareDataSpec defines the desired state of HardwareData.",
"type": "object",
"properties": {
- "imageChangeParams": {
- "description": "ImageChangeParams represents the parameters for the ImageChange trigger.",
- "$ref": "#/definitions/io.openshift.apps.v1.DeploymentTriggerImageChangeParams"
- },
- "type": {
- "description": "Type of the trigger",
- "type": "string"
+ "hardware": {
+ "description": "The hardware discovered on the host during its inspection.",
+ "$ref": "#/definitions/io.metal3.v1alpha1.HardwareDetails"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "DeploymentTriggerPolicy",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HardwareDataSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.ExecNewPodHook": {
- "description": "ExecNewPodHook is a hook implementation which runs a command in a new pod based on the specified container which is assumed to be part of the deployment template.",
+ "io.metal3.v1alpha1.HardwareDetails": {
+ "description": "HardwareDetails collects all of the information about hardware discovered on the host.",
"type": "object",
- "required": [
- "command",
- "containerName"
- ],
"properties": {
- "command": {
- "description": "Command is the action command and its arguments.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "cpu": {
+ "description": "Details of the CPU(s) in the system.",
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.CPU"
},
- "containerName": {
- "description": "ContainerName is the name of a container in the deployment pod template whose container image will be used for the hook pod's container.",
- "type": "string",
- "default": ""
+ "firmware": {
+ "description": "System firmware information.",
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.Firmware"
},
- "env": {
- "description": "Env is a set of environment variables to supply to the hook pod's container.",
+ "hostname": {
+ "type": "string"
+ },
+ "nics": {
+ "description": "List of network interfaces for the host.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
+ "$ref": "#/definitions/io.metal3.v1alpha1.NIC"
}
},
- "volumes": {
- "description": "Volumes is a list of named volumes from the pod template which should be copied to the hook pod. Volumes names not found in pod spec are ignored. An empty list means no volumes will be copied.",
+ "ramMebibytes": {
+ "description": "The host's amount of memory in Mebibytes.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "storage": {
+ "description": "List of storage (disk, SSD, etc.) available to the host.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.Storage"
}
+ },
+ "systemVendor": {
+ "description": "System vendor information.",
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.HardwareSystemVendor"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "ExecNewPodHook",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HardwareDetails",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.LifecycleHook": {
- "description": "LifecycleHook defines a specific deployment lifecycle action. Only one type of action may be specified at any time.",
+ "io.metal3.v1alpha1.HardwareRAIDVolume": {
+ "description": "HardwareRAIDVolume defines the desired configuration of volume in hardware RAID.",
"type": "object",
"required": [
- "failurePolicy"
+ "level"
],
"properties": {
- "execNewPod": {
- "description": "ExecNewPod specifies the options for a lifecycle hook backed by a pod.",
- "$ref": "#/definitions/io.openshift.apps.v1.ExecNewPodHook"
+ "controller": {
+ "description": "The name of the RAID controller to use.",
+ "type": "string"
},
- "failurePolicy": {
- "description": "FailurePolicy specifies what action to take if the hook fails.",
+ "level": {
+ "description": "RAID level for the logical disk. The following levels are supported: 0, 1, 2, 5, 6, 1+0, 5+0, 6+0 (drivers may support only some of them).",
"type": "string",
"default": ""
},
- "tagImages": {
- "description": "TagImages instructs the deployer to tag the current image referenced under a container onto an image stream tag.",
+ "name": {
+ "description": "Name of the volume. Should be unique within the Node. If not specified, the name will be auto-generated.",
+ "type": "string"
+ },
+ "numberOfPhysicalDisks": {
+ "description": "Integer, number of physical disks to use for the logical disk. Defaults to minimum number of disks required for the particular RAID level.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "physicalDisks": {
+ "description": "Optional list of physical disk names to be used for the hardware RAID volumes. The disk names are interpreted by the hardware RAID controller, and the format is hardware specific.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.apps.v1.TagImageHook"
+ "type": "string",
+ "default": ""
}
- }
- },
+ },
+ "rotational": {
+ "description": "Select disks with only rotational (if set to true) or solid-state (if set to false) storage. By default, any disks can be picked.",
+ "type": "boolean"
+ },
+ "sizeGibibytes": {
+ "description": "Size of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk.",
+ "type": "integer",
+ "format": "int32"
+ }
+ },
"x-fabric8-info": {
"Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "LifecycleHook",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HardwareRAIDVolume",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.RecreateDeploymentStrategyParams": {
- "description": "RecreateDeploymentStrategyParams are the input to the Recreate deployment strategy.",
+ "io.metal3.v1alpha1.HardwareSystemVendor": {
+ "description": "HardwareSystemVendor stores details about the whole hardware system.",
"type": "object",
"properties": {
- "mid": {
- "description": "Mid is a lifecycle hook which is executed while the deployment is scaled down to zero before the first new pod is created. All LifecycleHookFailurePolicy values are supported.",
- "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook"
- },
- "post": {
- "description": "Post is a lifecycle hook which is executed after the strategy has finished all deployment logic. All LifecycleHookFailurePolicy values are supported.",
- "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook"
+ "manufacturer": {
+ "type": "string"
},
- "pre": {
- "description": "Pre is a lifecycle hook which is executed before the strategy manipulates the deployment. All LifecycleHookFailurePolicy values are supported.",
- "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook"
+ "productName": {
+ "type": "string"
},
- "timeoutSeconds": {
- "description": "TimeoutSeconds is the time to wait for updates before giving up. If the value is nil, a default will be used.",
- "type": "integer",
- "format": "int64"
+ "serialNumber": {
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "RecreateDeploymentStrategyParams",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HardwareSystemVendor",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.RollingDeploymentStrategyParams": {
- "description": "RollingDeploymentStrategyParams are the input to the Rolling deployment strategy.",
+ "io.metal3.v1alpha1.HostFirmwareComponents": {
+ "description": "HostFirmwareComponents is the Schema for the hostfirmwarecomponents API.",
"type": "object",
"properties": {
- "intervalSeconds": {
- "description": "IntervalSeconds is the time to wait between polling deployment status after update. If the value is nil, a default will be used.",
- "type": "integer",
- "format": "int64"
- },
- "maxSurge": {
- "description": "MaxSurge is the maximum number of pods that can be scheduled above the original number of pods. Value can be an absolute number (ex: 5) or a percentage of total pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up.\n\nThis cannot be 0 if MaxUnavailable is 0. By default, 25% is used.\n\nExample: when this is set to 30%, the new RC can be scaled up by 30% immediately when the rolling update starts. Once old pods have been killed, new RC can be scaled up further, ensuring that total number of pods running at any time during the update is atmost 130% of original pods.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
- },
- "maxUnavailable": {
- "description": "MaxUnavailable is the maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total pods at the start of update (ex: 10%). Absolute number is calculated from percentage by rounding down.\n\nThis cannot be 0 if MaxSurge is 0. By default, 25% is used.\n\nExample: when this is set to 30%, the old RC can be scaled down by 30% immediately when the rolling update starts. Once new pods are ready, old RC can be scaled down further, followed by scaling up the new RC, ensuring that at least 70% of original number of pods are available at all times during the update.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "post": {
- "description": "Post is a lifecycle hook which is executed after the strategy has finished all deployment logic. All LifecycleHookFailurePolicy values are supported.",
- "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "pre": {
- "description": "Pre is a lifecycle hook which is executed before the deployment process begins. All LifecycleHookFailurePolicy values are supported.",
- "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook"
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "timeoutSeconds": {
- "description": "TimeoutSeconds is the time to wait for updates before giving up. If the value is nil, a default will be used.",
- "type": "integer",
- "format": "int64"
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.HostFirmwareComponentsSpec"
},
- "updatePeriodSeconds": {
- "description": "UpdatePeriodSeconds is the time to wait between individual pod updates. If the value is nil, a default will be used.",
- "type": "integer",
- "format": "int64"
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.HostFirmwareComponentsStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "RollingDeploymentStrategyParams",
+ "Type": "object",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HostFirmwareComponents",
"Scope": "Namespaced"
}
},
- "io.openshift.apps.v1.TagImageHook": {
- "description": "TagImageHook is a request to tag the image in a particular container onto an ImageStreamTag.",
+ "io.metal3.v1alpha1.HostFirmwareComponentsList": {
+ "description": "HostFirmwareComponentsList contains a list of HostFirmwareComponents.",
"type": "object",
"required": [
- "containerName",
- "to"
+ "items"
],
"properties": {
- "containerName": {
- "description": "ContainerName is the name of a container in the deployment config whose image value will be used as the source of the tag. If there is only a single container this value will be defaulted to the name of that container.",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "to": {
- "description": "To is the target ImageStreamTag to set the container's image onto.",
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.HostFirmwareComponents"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "apps.openshift.io",
- "Version": "v1",
- "Kind": "TagImageHook",
+ "Type": "list",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HostFirmwareComponentsList",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.Action": {
- "description": "Action describes a request to the API server",
+ "io.metal3.v1alpha1.HostFirmwareComponentsSpec": {
+ "description": "HostFirmwareComponentsSpec defines the desired state of HostFirmwareComponents.",
"type": "object",
"required": [
- "namespace",
- "verb",
- "resourceAPIGroup",
- "resourceAPIVersion",
- "resource",
- "resourceName",
- "path",
- "isNonResourceURL"
+ "updates"
],
"properties": {
- "content": {
- "description": "Content is the actual content of the request for create and update",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "isNonResourceURL": {
- "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)",
- "type": "boolean",
- "default": false
- },
- "namespace": {
- "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces",
- "type": "string",
- "default": ""
- },
- "path": {
- "description": "Path is the path of a non resource URL",
- "type": "string",
- "default": ""
- },
- "resource": {
- "description": "Resource is one of the existing resource types",
- "type": "string",
- "default": ""
- },
- "resourceAPIGroup": {
- "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined",
- "type": "string",
- "default": ""
+ "updates": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.FirmwareUpdate"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HostFirmwareComponentsSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.HostFirmwareComponentsStatus": {
+ "description": "HostFirmwareComponentsStatus defines the observed state of HostFirmwareComponents.",
+ "type": "object",
+ "properties": {
+ "components": {
+ "description": "Components is the list of all available firmware components and their information.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.FirmwareComponentStatus"
+ }
},
- "resourceAPIVersion": {
- "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined",
- "type": "string",
- "default": ""
+ "conditions": {
+ "description": "Track whether updates stored in the spec are valid based on the schema",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "resourceName": {
- "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"",
- "type": "string",
- "default": ""
+ "lastUpdated": {
+ "description": "Time that the status was last updated",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "verb": {
- "description": "Verb is one of: get, list, watch, create, update, delete",
- "type": "string",
- "default": ""
+ "updates": {
+ "description": "Updates is the list of all firmware components that should be updated they are specified via name and url fields.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.FirmwareUpdate"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "Action",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HostFirmwareComponentsStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.ClusterRole": {
- "description": "ClusterRole is a logical grouping of PolicyRules that can be referenced as a unit by ClusterRoleBindings.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.HostFirmwareSettings": {
+ "description": "HostFirmwareSettings is the Schema for the hostfirmwaresettings API.",
"type": "object",
- "required": [
- "rules"
- ],
"properties": {
- "aggregationRule": {
- "description": "AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.",
- "$ref": "#/definitions/io.k8s.api.rbac.v1.AggregationRule"
- },
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
@@ -58955,45 +59397,42 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "rules": {
- "description": "Rules holds all the PolicyRules for this ClusterRole",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.PolicyRule"
- }
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.HostFirmwareSettingsSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.HostFirmwareSettingsStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "ClusterRole",
- "Scope": "Clustered"
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HostFirmwareSettings",
+ "Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.ClusterRoleBinding": {
- "description": "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference any ClusterRole in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. ClusterRoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.HostFirmwareSettingsList": {
+ "description": "HostFirmwareSettingsList contains a list of HostFirmwareSettings.",
"type": "object",
"required": [
- "subjects",
- "roleRef"
+ "items"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "groupNames": {
- "description": "GroupNames holds all the groups directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.",
+ "items": {
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.HostFirmwareSettings"
}
},
"kind": {
@@ -59001,79 +59440,123 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "roleRef": {
- "description": "RoleRef can only reference the current namespace and the global namespace. If the ClusterRoleRef cannot be resolved, the Authorizer must return an error. Since Policy is a singleton, this is sufficient knowledge to locate a role.",
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "subjects": {
- "description": "Subjects hold object references to authorize with this rule. This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers. Thus newer clients that do not need to support backwards compatibility should send only fully qualified Subjects and should omit the UserNames and GroupNames fields. Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HostFirmwareSettingsList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.HostFirmwareSettingsSpec": {
+ "description": "HostFirmwareSettingsSpec defines the desired state of HostFirmwareSettings.",
+ "type": "object",
+ "required": [
+ "settings"
+ ],
+ "properties": {
+ "settings": {
+ "description": "Settings are the desired firmware settings stored as name/value pairs.",
+ "type": "object",
+ "additionalProperties": {
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
+ },
+ "x-kubernetes-patch-strategy": "merge"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HostFirmwareSettingsSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.HostFirmwareSettingsStatus": {
+ "description": "HostFirmwareSettingsStatus defines the observed state of HostFirmwareSettings.",
+ "type": "object",
+ "required": [
+ "settings"
+ ],
+ "properties": {
+ "conditions": {
+ "description": "Track whether settings stored in the spec are valid based on the schema",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- }
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "userNames": {
- "description": "UserNames holds all the usernames directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.",
- "type": "array",
- "items": {
+ "lastUpdated": {
+ "description": "Time that the status was last updated",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "schema": {
+ "description": "FirmwareSchema is a reference to the Schema used to describe each FirmwareSetting. By default, this will be a Schema in the same Namespace as the settings but it can be overwritten in the Spec",
+ "$ref": "#/definitions/io.metal3.v1alpha1.SchemaReference"
+ },
+ "settings": {
+ "description": "Settings are the firmware settings stored as name/value pairs",
+ "type": "object",
+ "additionalProperties": {
"type": "string",
"default": ""
}
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "ClusterRoleBinding",
- "Scope": "Clustered"
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HostFirmwareSettingsStatus",
+ "Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.ClusterRoleBindingList": {
- "description": "ClusterRoleBindingList is a collection of ClusterRoleBindings\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.HostUpdatePolicy": {
+ "description": "HostUpdatePolicy is the Schema for the hostupdatepolicy API.",
"type": "object",
- "required": [
- "items"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "items": {
- "description": "Items is a list of ClusterRoleBindings",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRoleBinding"
- }
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.HostUpdatePolicySpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.HostUpdatePolicyStatus"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "ClusterRoleBindingList",
+ "Type": "object",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HostUpdatePolicy",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.ClusterRoleList": {
- "description": "ClusterRoleList is a collection of ClusterRoles\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.HostUpdatePolicyList": {
+ "description": "HostUpdatePolicyList contains a list of HostUpdatePolicy.",
"type": "object",
"required": [
"items"
@@ -59084,11 +59567,10 @@
"type": "string"
},
"items": {
- "description": "Items is a list of ClusterRoles",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRole"
+ "$ref": "#/definitions/io.metal3.v1alpha1.HostUpdatePolicy"
}
},
"kind": {
@@ -59096,54 +59578,184 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "ClusterRoleList",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HostUpdatePolicyList",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.GroupRestriction": {
- "description": "GroupRestriction matches a group either by a string match on the group name or a label selector applied to group labels.",
+ "io.metal3.v1alpha1.HostUpdatePolicySpec": {
+ "description": "HostUpdatePolicySpec defines the desired state of HostUpdatePolicy.",
+ "type": "object",
+ "properties": {
+ "firmwareSettings": {
+ "description": "Defines policy for changing firmware settings",
+ "type": "string"
+ },
+ "firmwareUpdates": {
+ "description": "Defines policy for updating firmware",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HostUpdatePolicySpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.HostUpdatePolicyStatus": {
+ "description": "HostUpdatePolicyStatus defines the observed state of HostUpdatePolicy.",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "HostUpdatePolicyStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.Image": {
+ "description": "Image holds the details of an image either to provisioned or that has been provisioned.",
"type": "object",
"required": [
- "groups",
- "labels"
+ "url"
],
"properties": {
- "groups": {
- "description": "Groups is a list of groups used to match against an individual user's groups. If the user is a member of one of the whitelisted groups, the user is allowed to be bound to a role.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "checksum": {
+ "description": "Checksum is the checksum for the image. Required for all formats except for \"live-iso\".",
+ "type": "string"
},
- "labels": {
- "description": "Selectors specifies a list of label selectors over group labels.",
+ "checksumType": {
+ "description": "ChecksumType is the checksum algorithm for the image, e.g md5, sha256 or sha512. The special value \"auto\" can be used to detect the algorithm from the checksum. If missing, MD5 is used. If in doubt, use \"auto\".",
+ "type": "string"
+ },
+ "format": {
+ "description": "Format contains the format of the image (raw, qcow2, ...). When set to \"live-iso\", an ISO 9660 image referenced by the url will be live-booted and not deployed to disk.",
+ "type": "string"
+ },
+ "url": {
+ "description": "URL is a location of an image to deploy.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "Image",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.NIC": {
+ "description": "NIC describes one network interface on the host.",
+ "type": "object",
+ "properties": {
+ "ip": {
+ "description": "The IP address of the interface. This will be an IPv4 or IPv6 address if one is present. If both IPv4 and IPv6 addresses are present in a dual-stack environment, two nics will be output, one with each IP.",
+ "type": "string"
+ },
+ "mac": {
+ "description": "The device MAC address",
+ "type": "string"
+ },
+ "model": {
+ "description": "The vendor and product IDs of the NIC, e.g. \"0x8086 0x1572\"",
+ "type": "string"
+ },
+ "name": {
+ "description": "The name of the network interface, e.g. \"en0\"",
+ "type": "string"
+ },
+ "pxe": {
+ "description": "Whether the NIC is PXE Bootable",
+ "type": "boolean"
+ },
+ "speedGbps": {
+ "description": "The speed of the device in Gigabits per second",
+ "type": "integer",
+ "format": "int32"
+ },
+ "vlanId": {
+ "description": "The untagged VLAN ID",
+ "type": "integer",
+ "format": "int32"
+ },
+ "vlans": {
+ "description": "The VLANs available",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ "$ref": "#/definitions/io.metal3.v1alpha1.VLAN"
}
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "GroupRestriction",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "NIC",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.IsPersonalSubjectAccessReview": {
- "description": "IsPersonalSubjectAccessReview is a marker for PolicyRule.AttributeRestrictions that denotes that subjectaccessreviews on self should be allowed\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.OperationHistory": {
+ "description": "OperationHistory holds information about operations performed on a host.",
+ "type": "object",
+ "properties": {
+ "deprovision": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.OperationMetric"
+ },
+ "inspect": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.OperationMetric"
+ },
+ "provision": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.OperationMetric"
+ },
+ "register": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.OperationMetric"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "OperationHistory",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.OperationMetric": {
+ "description": "OperationMetric contains metadata about an operation (inspection, provisioning, etc.) used for tracking metrics.",
+ "type": "object",
+ "properties": {
+ "end": {
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "start": {
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "OperationMetric",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.PreprovisioningImage": {
+ "description": "PreprovisioningImage is the Schema for the preprovisioningimages API.",
"type": "object",
"properties": {
"apiVersion": {
@@ -59153,396 +59765,556 @@
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.PreprovisioningImageSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.PreprovisioningImageStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "IsPersonalSubjectAccessReview",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "PreprovisioningImage",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.LocalResourceAccessReview": {
- "description": "LocalResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec in a particular namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.PreprovisioningImageList": {
+ "description": "PreprovisioningImageList contains a list of PreprovisioningImage.",
"type": "object",
"required": [
- "namespace",
- "verb",
- "resourceAPIGroup",
- "resourceAPIVersion",
- "resource",
- "resourceName",
- "path",
- "isNonResourceURL"
+ "items"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "content": {
- "description": "Content is the actual content of the request for create and update",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "isNonResourceURL": {
- "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)",
- "type": "boolean",
- "default": false
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.PreprovisioningImage"
+ }
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "namespace": {
- "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces",
- "type": "string",
- "default": ""
- },
- "path": {
- "description": "Path is the path of a non resource URL",
- "type": "string",
- "default": ""
- },
- "resource": {
- "description": "Resource is one of the existing resource types",
- "type": "string",
- "default": ""
- },
- "resourceAPIGroup": {
- "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined",
- "type": "string",
- "default": ""
- },
- "resourceAPIVersion": {
- "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined",
- "type": "string",
- "default": ""
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "PreprovisioningImageList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.PreprovisioningImageSpec": {
+ "description": "PreprovisioningImageSpec defines the desired state of PreprovisioningImage.",
+ "type": "object",
+ "properties": {
+ "acceptFormats": {
+ "description": "acceptFormats is a list of acceptable image formats.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "resourceName": {
- "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"",
- "type": "string",
- "default": ""
+ "architecture": {
+ "description": "architecture is the processor architecture for which to build the image.",
+ "type": "string"
},
- "verb": {
- "description": "Verb is one of: get, list, watch, create, update, delete",
- "type": "string",
- "default": ""
+ "networkDataName": {
+ "description": "networkDataName is the name of a Secret in the local namespace that contains network data to build in to the image.",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "LocalResourceAccessReview",
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "PreprovisioningImageSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.LocalSubjectAccessReview": {
- "description": "LocalSubjectAccessReview is an object for requesting information about whether a user or group can perform an action in a particular namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.PreprovisioningImageStatus": {
+ "description": "PreprovisioningImageStatus defines the observed state of PreprovisioningImage.",
"type": "object",
- "required": [
- "namespace",
- "verb",
- "resourceAPIGroup",
- "resourceAPIVersion",
- "resource",
- "resourceName",
- "path",
- "isNonResourceURL",
- "user",
- "groups",
- "scopes"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "architecture": {
+ "description": "architecture is the processor architecture for which the image is built",
"type": "string"
},
- "content": {
- "description": "Content is the actual content of the request for create and update",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "groups": {
- "description": "Groups is optional. Groups is the list of groups to which the User belongs.",
+ "conditions": {
+ "description": "conditions describe the state of the built image",
"type": "array",
"items": {
- "type": "string",
- "default": ""
- }
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "isNonResourceURL": {
- "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)",
- "type": "boolean",
- "default": false
+ "extraKernelParams": {
+ "description": "extraKernelParams is a string with extra parameters to pass to the kernel when booting the image over network. Only makes sense for initrd images.",
+ "type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "format": {
+ "description": "format is the type of image that is available at the download url: either iso or initrd.",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "imageUrl": {
+ "description": "imageUrl is the URL from which the built image can be downloaded.",
+ "type": "string"
},
- "namespace": {
- "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces",
- "type": "string",
- "default": ""
+ "kernelUrl": {
+ "description": "kernelUrl is the URL from which the kernel of the image can be downloaded. Only makes sense for initrd images.",
+ "type": "string"
},
- "path": {
- "description": "Path is the path of a non resource URL",
+ "networkData": {
+ "description": "networkData is a reference to the version of the Secret containing the network data used to build the image.",
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.SecretStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "PreprovisioningImageStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.ProvisionStatus": {
+ "description": "ProvisionStatus holds the state information for a single target.",
+ "type": "object",
+ "required": [
+ "state",
+ "ID"
+ ],
+ "properties": {
+ "ID": {
+ "description": "The hosts's ID from the underlying provisioning tool (e.g. the Ironic node UUID).",
"type": "string",
"default": ""
},
- "resource": {
- "description": "Resource is one of the existing resource types",
- "type": "string",
- "default": ""
+ "bootMode": {
+ "description": "BootMode indicates the boot mode used to provision the node",
+ "type": "string"
},
- "resourceAPIGroup": {
- "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined",
- "type": "string",
- "default": ""
+ "customDeploy": {
+ "description": "Custom deploy procedure applied to the host.",
+ "$ref": "#/definitions/io.metal3.v1alpha1.CustomDeploy"
},
- "resourceAPIVersion": {
- "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined",
- "type": "string",
- "default": ""
+ "firmware": {
+ "description": "The firmware settings that have been applied.",
+ "$ref": "#/definitions/io.metal3.v1alpha1.FirmwareConfig"
},
- "resourceName": {
- "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"",
+ "image": {
+ "description": "Image holds the details of the last image successfully provisioned to the host.",
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.Image"
+ },
+ "raid": {
+ "description": "The RAID configuration that has been applied.",
+ "$ref": "#/definitions/io.metal3.v1alpha1.RAIDConfig"
+ },
+ "rootDeviceHints": {
+ "description": "The root device hints set by the user.",
+ "$ref": "#/definitions/io.metal3.v1alpha1.RootDeviceHints"
+ },
+ "state": {
+ "description": "An indicator for what the provisioner is doing with the host.",
"type": "string",
"default": ""
- },
- "scopes": {
- "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil for a self-SAR, means \"use the scopes on this request\". Nil for a regular SAR, means the same as empty.",
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "ProvisionStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.RAIDConfig": {
+ "description": "RAIDConfig contains the configuration that are required to config RAID in Bare Metal server.",
+ "type": "object",
+ "properties": {
+ "hardwareRAIDVolumes": {
+ "description": "The list of logical disks for hardware RAID, if rootDeviceHints isn't used, first volume is root volume. You can set the value of this field to `[]` to clear all the hardware RAID configurations.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.HardwareRAIDVolume"
}
},
- "user": {
- "description": "User is optional. If both User and Groups are empty, the current authenticated user is used.",
- "type": "string",
- "default": ""
- },
- "verb": {
- "description": "Verb is one of: get, list, watch, create, update, delete",
- "type": "string",
- "default": ""
+ "softwareRAIDVolumes": {
+ "description": "The list of logical disks for software RAID, if rootDeviceHints isn't used, first volume is root volume. If HardwareRAIDVolumes is set this item will be invalid. The number of created Software RAID devices must be 1 or 2. If there is only one Software RAID device, it has to be a RAID-1. If there are two, the first one has to be a RAID-1, while the RAID level for the second one can be 0, 1, or 1+0. As the first RAID device will be the deployment device, enforcing a RAID-1 reduces the risk of ending up with a non-booting node in case of a disk failure. Software RAID will always be deleted.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.SoftwareRAIDVolume"
+ }
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "LocalSubjectAccessReview",
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "RAIDConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.NamedClusterRole": {
- "description": "NamedClusterRole relates a name with a cluster role",
+ "io.metal3.v1alpha1.RebootAnnotationArguments": {
+ "description": "RebootAnnotationArguments defines the arguments of the RebootAnnotation type.",
"type": "object",
"required": [
- "name",
- "role"
+ "mode",
+ "force"
],
"properties": {
- "name": {
- "description": "Name is the name of the cluster role",
+ "force": {
+ "type": "boolean",
+ "default": false
+ },
+ "mode": {
"type": "string",
"default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "RebootAnnotationArguments",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.RootDeviceHints": {
+ "description": "RootDeviceHints holds the hints for specifying the storage location for the root filesystem for the image.",
+ "type": "object",
+ "properties": {
+ "deviceName": {
+ "description": "A Linux device name like \"/dev/vda\", or a by-path link to it like \"/dev/disk/by-path/pci-0000:01:00.0-scsi-0:2:0:0\". The hint must match the actual value exactly.",
+ "type": "string"
},
- "role": {
- "description": "Role is the cluster role being named",
- "default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRole"
+ "hctl": {
+ "description": "A SCSI bus address like 0:0:0:0. The hint must match the actual value exactly.",
+ "type": "string"
+ },
+ "minSizeGigabytes": {
+ "description": "The minimum size of the device in Gigabytes.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "model": {
+ "description": "A vendor-specific device identifier. The hint can be a substring of the actual value.",
+ "type": "string"
+ },
+ "rotational": {
+ "description": "True if the device should use spinning media, false otherwise.",
+ "type": "boolean"
+ },
+ "serialNumber": {
+ "description": "Device serial number. The hint must match the actual value exactly.",
+ "type": "string"
+ },
+ "vendor": {
+ "description": "The name of the vendor or manufacturer of the device. The hint can be a substring of the actual value.",
+ "type": "string"
+ },
+ "wwn": {
+ "description": "Unique storage identifier. The hint must match the actual value exactly.",
+ "type": "string"
+ },
+ "wwnVendorExtension": {
+ "description": "Unique vendor storage identifier. The hint must match the actual value exactly.",
+ "type": "string"
+ },
+ "wwnWithExtension": {
+ "description": "Unique storage identifier with the vendor extension appended. The hint must match the actual value exactly.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "NamedClusterRole",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "RootDeviceHints",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.NamedClusterRoleBinding": {
- "description": "NamedClusterRoleBinding relates a name with a cluster role binding",
+ "io.metal3.v1alpha1.SchemaReference": {
"type": "object",
"required": [
- "name",
- "roleBinding"
+ "namespace",
+ "name"
],
"properties": {
"name": {
- "description": "Name is the name of the cluster role binding",
+ "description": "`name` is the reference to the schema.",
"type": "string",
"default": ""
},
- "roleBinding": {
- "description": "RoleBinding is the cluster role binding being named",
- "default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRoleBinding"
+ "namespace": {
+ "description": "`namespace` is the namespace of the where the schema is stored.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "NamedClusterRoleBinding",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "SchemaReference",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.NamedRole": {
- "description": "NamedRole relates a Role with a name",
+ "io.metal3.v1alpha1.SchemaSettingError": {
"type": "object",
"required": [
"name",
- "role"
+ "message"
],
"properties": {
- "name": {
- "description": "Name is the name of the role",
+ "message": {
"type": "string",
"default": ""
},
- "role": {
- "description": "Role is the role being named",
- "default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.Role"
+ "name": {
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "NamedRole",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "SchemaSettingError",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.NamedRoleBinding": {
- "description": "NamedRoleBinding relates a role binding with a name",
+ "io.metal3.v1alpha1.SecretStatus": {
"type": "object",
- "required": [
- "name",
- "roleBinding"
- ],
"properties": {
"name": {
- "description": "Name is the name of the role binding",
- "type": "string",
- "default": ""
+ "type": "string"
},
- "roleBinding": {
- "description": "RoleBinding is the role binding being named",
- "default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.RoleBinding"
+ "version": {
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "NamedRoleBinding",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "SecretStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.PolicyRule": {
- "description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.",
+ "io.metal3.v1alpha1.SettingSchema": {
+ "description": "Additional data describing the firmware setting.",
"type": "object",
- "required": [
- "verbs",
- "resources"
- ],
"properties": {
- "apiGroups": {
- "description": "APIGroups is the name of the APIGroup that contains the resources. If this field is empty, then both kubernetes and origin API groups are assumed. That means that if an action is requested against one of the enumerated resources in either the kubernetes or the origin API group, the request will be allowed",
+ "allowable_values": {
+ "description": "The allowable value for an Enumeration type setting.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "attributeRestrictions": {
- "description": "AttributeRestrictions will vary depending on what the Authorizer/AuthorizationAttributeBuilder pair supports. If the Authorizer does not recognize how to handle the AttributeRestrictions, the Authorizer should report an error.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "attribute_type": {
+ "description": "The type of setting.",
+ "type": "string"
},
- "nonResourceURLs": {
- "description": "NonResourceURLsSlice is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path This name is intentionally different than the internal type so that the DefaultConvert works nicely and because the ordering may be different.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "lower_bound": {
+ "description": "The lowest value for an Integer type setting.",
+ "type": "integer",
+ "format": "int32"
},
- "resourceNames": {
- "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "max_length": {
+ "description": "Maximum length for a String type setting.",
+ "type": "integer",
+ "format": "int32"
},
- "resources": {
- "description": "Resources is a list of resources this rule applies to. ResourceAll represents all resources.",
+ "min_length": {
+ "description": "Minimum length for a String type setting.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "read_only": {
+ "description": "Whether or not this setting is read only.",
+ "type": "boolean"
+ },
+ "unique": {
+ "description": "Whether or not this setting's value is unique to this node, e.g. a serial number.",
+ "type": "boolean"
+ },
+ "upper_bound": {
+ "description": "The highest value for an Integer type setting.",
+ "type": "integer",
+ "format": "int32"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "SettingSchema",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.SoftwareRAIDVolume": {
+ "description": "SoftwareRAIDVolume defines the desired configuration of volume in software RAID.",
+ "type": "object",
+ "required": [
+ "level"
+ ],
+ "properties": {
+ "level": {
+ "description": "RAID level for the logical disk. The following levels are supported: 0, 1 and 1+0.",
+ "type": "string",
+ "default": ""
+ },
+ "physicalDisks": {
+ "description": "A list of device hints, the number of items should be greater than or equal to 2.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.metal3.v1alpha1.RootDeviceHints"
}
},
- "verbs": {
- "description": "Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.",
+ "sizeGibibytes": {
+ "description": "Size of the logical disk to be created in GiB. If unspecified or set be 0, the maximum capacity of disk will be used for logical disk.",
+ "type": "integer",
+ "format": "int32"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "SoftwareRAIDVolume",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.metal3.v1alpha1.Storage": {
+ "description": "Storage describes one storage device (disk, SSD, etc.) on the host.",
+ "type": "object",
+ "properties": {
+ "alternateNames": {
+ "description": "A list of alternate Linux device names of the disk, e.g. \"/dev/sda\". Note that this list is not exhaustive, and names may not be stable across reboots.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
+ },
+ "hctl": {
+ "description": "The SCSI location of the device",
+ "type": "string"
+ },
+ "model": {
+ "description": "Hardware model",
+ "type": "string"
+ },
+ "name": {
+ "description": "A Linux device name of the disk, e.g. \"/dev/disk/by-path/pci-0000:01:00.0-scsi-0:2:0:0\". This will be a name that is stable across reboots if one is available.",
+ "type": "string"
+ },
+ "rotational": {
+ "description": "Whether this disk represents rotational storage. This field is not recommended for usage, please prefer using 'Type' field instead, this field will be deprecated eventually.",
+ "type": "boolean"
+ },
+ "serialNumber": {
+ "description": "The serial number of the device",
+ "type": "string"
+ },
+ "sizeBytes": {
+ "description": "The size of the disk in Bytes",
+ "type": "integer",
+ "format": "int64"
+ },
+ "type": {
+ "description": "Device type, one of: HDD, SSD, NVME.",
+ "type": "string"
+ },
+ "vendor": {
+ "description": "The name of the vendor of the device",
+ "type": "string"
+ },
+ "wwn": {
+ "description": "The WWN of the device",
+ "type": "string"
+ },
+ "wwnVendorExtension": {
+ "description": "The WWN Vendor extension of the device",
+ "type": "string"
+ },
+ "wwnWithExtension": {
+ "description": "The WWN with the extension",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "authorization.openshift.io",
- "Version": "v1",
- "Kind": "PolicyRule",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "Storage",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.ResourceAccessReview": {
- "description": "ResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.metal3.v1alpha1.VLAN": {
+ "description": "VLAN represents the name and ID of a VLAN.",
+ "type": "object",
+ "properties": {
+ "id": {
+ "type": "integer",
+ "format": "int32"
+ },
+ "name": {
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "metal3.io",
+ "Version": "v1alpha1",
+ "Kind": "VLAN",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.apiserver.v1.APIRequestCount": {
+ "description": "APIRequestCount tracks requests made to an API. The instance name must be of the form `resource.version.group`, matching the resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "namespace",
- "verb",
- "resourceAPIGroup",
- "resourceAPIVersion",
- "resource",
- "resourceName",
- "path",
- "isNonResourceURL"
+ "spec"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "content": {
- "description": "Content is the actual content of the request for create and update",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "isNonResourceURL": {
- "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)",
- "type": "boolean",
- "default": false
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
@@ -59552,375 +60324,391 @@
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "namespace": {
- "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces",
- "type": "string",
- "default": ""
- },
- "path": {
- "description": "Path is the path of a non resource URL",
- "type": "string",
- "default": ""
- },
- "resource": {
- "description": "Resource is one of the existing resource types",
- "type": "string",
- "default": ""
- },
- "resourceAPIGroup": {
- "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined",
- "type": "string",
- "default": ""
- },
- "resourceAPIVersion": {
- "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined",
- "type": "string",
- "default": ""
- },
- "resourceName": {
- "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"",
- "type": "string",
- "default": ""
+ "spec": {
+ "description": "spec defines the characteristics of the resource.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.apiserver.v1.APIRequestCountSpec"
},
- "verb": {
- "description": "Verb is one of: get, list, watch, create, update, delete",
- "type": "string",
- "default": ""
+ "status": {
+ "description": "status contains the observed state of the resource.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.apiserver.v1.APIRequestCountStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "authorization.openshift.io",
+ "Group": "apiserver.openshift.io",
"Version": "v1",
- "Kind": "ResourceAccessReview",
+ "Kind": "APIRequestCount",
"Scope": "Clustered"
}
},
- "io.openshift.authorization.v1.ResourceAccessReviewResponse": {
- "description": "ResourceAccessReviewResponse describes who can perform the action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.apiserver.v1.APIRequestCountList": {
+ "description": "APIRequestCountList is a list of APIRequestCount resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "users",
- "groups",
- "evalutionError"
+ "metadata",
+ "items"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "evalutionError": {
- "description": "EvaluationError is an indication that some error occurred during resolution, but partial results can still be returned. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is most common when a bound role is missing, but enough roles are still present and bound to reason about the request.",
- "type": "string",
- "default": ""
- },
- "groups": {
- "description": "GroupsSlice is the list of groups who can perform the action",
+ "items": {
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.apiserver.v1.APIRequestCount"
}
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "namespace": {
- "description": "Namespace is the namespace used for the access review",
- "type": "string"
- },
- "users": {
- "description": "UsersSlice is the list of users who can perform the action",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "authorization.openshift.io",
+ "Type": "list",
+ "Group": "apiserver.openshift.io",
"Version": "v1",
- "Kind": "ResourceAccessReviewResponse",
+ "Kind": "APIRequestCountList",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.Role": {
- "description": "Role is a logical grouping of PolicyRules that can be referenced as a unit by RoleBindings.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.apiserver.v1.APIRequestCountSpec": {
+ "type": "object",
+ "properties": {
+ "numberOfUsersToReport": {
+ "description": "numberOfUsersToReport is the number of users to include in the report. If unspecified or zero, the default is ten. This is default is subject to change.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "apiserver.openshift.io",
+ "Version": "v1",
+ "Kind": "APIRequestCountSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.apiserver.v1.APIRequestCountStatus": {
"type": "object",
"required": [
- "rules"
+ "conditions",
+ "requestCount"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "conditions": {
+ "description": "conditions contains details of the current status of this API Resource.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "currentHour": {
+ "description": "currentHour contains request history for the current hour. This is porcelain to make the API easier to read by humans seeing if they addressed a problem. This field is reset on the hour.",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "$ref": "#/definitions/io.openshift.apiserver.v1.PerResourceAPIRequestLog"
},
- "rules": {
- "description": "Rules holds all the PolicyRules for this Role",
+ "last24h": {
+ "description": "last24h contains request history for the last 24 hours, indexed by the hour, so 12:00AM-12:59 is in index 0, 6am-6:59am is index 6, etc. The index of the current hour is updated live and then duplicated into the requestsLastHour field.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.PolicyRule"
+ "$ref": "#/definitions/io.openshift.apiserver.v1.PerResourceAPIRequestLog"
}
+ },
+ "removedInRelease": {
+ "description": "removedInRelease is when the API will be removed.",
+ "type": "string"
+ },
+ "requestCount": {
+ "description": "requestCount is a sum of all requestCounts across all current hours, nodes, and users.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "authorization.openshift.io",
+ "Type": "nested",
+ "Group": "apiserver.openshift.io",
"Version": "v1",
- "Kind": "Role",
+ "Kind": "APIRequestCountStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.RoleBinding": {
- "description": "RoleBinding references a Role, but not contain it. It can reference any Role in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.apiserver.v1.PerNodeAPIRequestLog": {
+ "description": "PerNodeAPIRequestLog contains logs of requests to a certain node.",
"type": "object",
"required": [
- "subjects",
- "roleRef"
+ "nodeName",
+ "requestCount",
+ "byUser"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "groupNames": {
- "description": "GroupNames holds all the groups directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.",
+ "byUser": {
+ "description": "byUser contains request details by top .spec.numberOfUsersToReport users. Note that because in the case of an apiserver, restart the list of top users is determined on a best-effort basis, the list might be imprecise. In addition, some system users may be explicitly included in the list.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.apiserver.v1.PerUserAPIRequestCount"
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "roleRef": {
- "description": "RoleRef can only reference the current namespace and the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. Since Policy is a singleton, this is sufficient knowledge to locate a role.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "nodeName": {
+ "description": "nodeName where the request are being handled.",
+ "type": "string",
+ "default": ""
},
- "subjects": {
- "description": "Subjects hold object references to authorize with this rule. This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers. Thus newer clients that do not need to support backwards compatibility should send only fully qualified Subjects and should omit the UserNames and GroupNames fields. Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.",
+ "requestCount": {
+ "description": "requestCount is a sum of all requestCounts across all users, even those outside of the top 10 users.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "apiserver.openshift.io",
+ "Version": "v1",
+ "Kind": "PerNodeAPIRequestLog",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.apiserver.v1.PerResourceAPIRequestLog": {
+ "description": "PerResourceAPIRequestLog logs request for various nodes.",
+ "type": "object",
+ "required": [
+ "requestCount"
+ ],
+ "properties": {
+ "byNode": {
+ "description": "byNode contains logs of requests per node.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "$ref": "#/definitions/io.openshift.apiserver.v1.PerNodeAPIRequestLog"
}
},
- "userNames": {
- "description": "UserNames holds all the usernames directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "requestCount": {
+ "description": "requestCount is a sum of all requestCounts across nodes.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "authorization.openshift.io",
+ "Type": "nested",
+ "Group": "apiserver.openshift.io",
"Version": "v1",
- "Kind": "RoleBinding",
+ "Kind": "PerResourceAPIRequestLog",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.RoleBindingList": {
- "description": "RoleBindingList is a collection of RoleBindings\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.apiserver.v1.PerUserAPIRequestCount": {
+ "description": "PerUserAPIRequestCount contains logs of a user's requests.",
"type": "object",
"required": [
- "items"
+ "username",
+ "userAgent",
+ "requestCount",
+ "byVerb"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "description": "Items is a list of RoleBindings",
+ "byVerb": {
+ "description": "byVerb details by verb.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.RoleBinding"
+ "$ref": "#/definitions/io.openshift.apiserver.v1.PerVerbAPIRequestCount"
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "requestCount": {
+ "description": "requestCount of requests by the user across all verbs.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "userAgent": {
+ "description": "userAgent that made the request. The same user often has multiple binaries which connect (pods with many containers). The different binaries will have different userAgents, but the same user. In addition, we have userAgents with version information embedded and the userName isn't likely to change.",
+ "type": "string",
+ "default": ""
+ },
+ "username": {
+ "description": "userName that made the request.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "authorization.openshift.io",
+ "Type": "nested",
+ "Group": "apiserver.openshift.io",
"Version": "v1",
- "Kind": "RoleBindingList",
+ "Kind": "PerUserAPIRequestCount",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.RoleBindingRestriction": {
- "description": "RoleBindingRestriction is an object that can be matched against a subject (user, group, or service account) to determine whether rolebindings on that subject are allowed in the namespace to which the RoleBindingRestriction belongs. If any one of those RoleBindingRestriction objects matches a subject, rolebindings on that subject in the namespace are allowed.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.apiserver.v1.PerVerbAPIRequestCount": {
+ "description": "PerVerbAPIRequestCount requestCounts requests by API request verb.",
"type": "object",
"required": [
- "metadata",
- "spec"
+ "verb",
+ "requestCount"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "requestCount": {
+ "description": "requestCount of requests for verb.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
},
- "spec": {
- "description": "Spec defines the matcher.",
- "default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.RoleBindingRestrictionSpec"
+ "verb": {
+ "description": "verb of API request (get, list, create, etc...)",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "authorization.openshift.io",
+ "Type": "nested",
+ "Group": "apiserver.openshift.io",
"Version": "v1",
- "Kind": "RoleBindingRestriction",
+ "Kind": "PerVerbAPIRequestCount",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.RoleBindingRestrictionList": {
- "description": "RoleBindingRestrictionList is a collection of RoleBindingRestriction objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.apps.v1.CustomDeploymentStrategyParams": {
+ "description": "CustomDeploymentStrategyParams are the input to the Custom deployment strategy.",
"type": "object",
- "required": [
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "command": {
+ "description": "Command is optional and overrides CMD in the container Image.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "items": {
- "description": "Items is a list of RoleBindingRestriction objects.",
+ "environment": {
+ "description": "Environment holds the environment which will be given to the container for Image.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.RoleBindingRestriction"
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "image": {
+ "description": "Image specifies a container image which can carry out a deployment.",
"type": "string"
- },
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "authorization.openshift.io",
+ "Type": "nested",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "RoleBindingRestrictionList",
+ "Kind": "CustomDeploymentStrategyParams",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.RoleBindingRestrictionSpec": {
- "description": "RoleBindingRestrictionSpec defines a rolebinding restriction. Exactly one field must be non-nil.",
+ "io.openshift.apps.v1.DeploymentCause": {
+ "description": "DeploymentCause captures information about a particular cause of a deployment.",
"type": "object",
"required": [
- "userrestriction",
- "grouprestriction",
- "serviceaccountrestriction"
+ "type"
],
"properties": {
- "grouprestriction": {
- "description": "GroupRestriction matches against group subjects.",
- "$ref": "#/definitions/io.openshift.authorization.v1.GroupRestriction"
- },
- "serviceaccountrestriction": {
- "description": "ServiceAccountRestriction matches against service-account subjects.",
- "$ref": "#/definitions/io.openshift.authorization.v1.ServiceAccountRestriction"
+ "imageTrigger": {
+ "description": "ImageTrigger contains the image trigger details, if this trigger was fired based on an image change",
+ "$ref": "#/definitions/io.openshift.apps.v1.DeploymentCauseImageTrigger"
},
- "userrestriction": {
- "description": "UserRestriction matches against user subjects.",
- "$ref": "#/definitions/io.openshift.authorization.v1.UserRestriction"
+ "type": {
+ "description": "Type of the trigger that resulted in the creation of a new deployment",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "authorization.openshift.io",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "RoleBindingRestrictionSpec",
+ "Kind": "DeploymentCause",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.RoleList": {
- "description": "RoleList is a collection of Roles\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.apps.v1.DeploymentCauseImageTrigger": {
+ "description": "DeploymentCauseImageTrigger represents details about the cause of a deployment originating from an image change trigger",
"type": "object",
"required": [
- "items"
+ "from"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "from": {
+ "description": "From is a reference to the changed object which triggered a deployment. The field may have the kinds DockerImage, ImageStreamTag, or ImageStreamImage.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "apps.openshift.io",
+ "Version": "v1",
+ "Kind": "DeploymentCauseImageTrigger",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.apps.v1.DeploymentCondition": {
+ "description": "DeploymentCondition describes the state of a deployment config at a certain point.",
+ "type": "object",
+ "required": [
+ "type",
+ "status"
+ ],
+ "properties": {
+ "lastTransitionTime": {
+ "description": "The last time the condition transitioned from one status to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "items": {
- "description": "Items is a list of Roles",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.Role"
- }
+ "lastUpdateTime": {
+ "description": "The last time this condition was updated.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "message": {
+ "description": "A human readable message indicating details about the transition.",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "reason": {
+ "description": "The reason for the condition's last transition.",
+ "type": "string"
+ },
+ "status": {
+ "description": "Status of the condition, one of True, False, Unknown.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "Type of deployment condition.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "authorization.openshift.io",
+ "Type": "nested",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "RoleList",
+ "Kind": "DeploymentCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.SelfSubjectRulesReview": {
- "description": "SelfSubjectRulesReview is a resource you can create to determine which actions you can perform in a namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.apps.v1.DeploymentConfig": {
+ "description": "Deployment Configs define the template for a pod and manages deploying new images or configuration changes. A single deployment configuration is usually analogous to a single micro-service. Can support many different deployment patterns, including full restart, customizable rolling updates, and fully custom behaviors, as well as pre- and post- deployment hooks. Each individual deployment is represented as a replication controller.\n\nA deployment is \"triggered\" when its configuration is changed or a tag in an Image Stream is changed. Triggers can be disabled to allow manual control over a deployment. The \"strategy\" determines how the deployment is carried out and may be changed at any time. The `latestVersion` field is updated when a new deployment is triggered by any means.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). Deprecated: Use deployments or other means for declarative updates for pods instead.",
"type": "object",
"required": [
"spec"
@@ -59940,579 +60728,827 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "Spec adds information about how to conduct the check",
+ "description": "Spec represents a desired deployment state and how to deploy to it.",
"default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.SelfSubjectRulesReviewSpec"
+ "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfigSpec"
},
"status": {
- "description": "Status is completed by the server to tell which permissions you have",
+ "description": "Status represents the current deployment state.",
"default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.SubjectRulesReviewStatus"
+ "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfigStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "authorization.openshift.io",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "SelfSubjectRulesReview",
+ "Kind": "DeploymentConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.SelfSubjectRulesReviewSpec": {
- "description": "SelfSubjectRulesReviewSpec adds information about how to conduct the check",
+ "io.openshift.apps.v1.DeploymentConfigList": {
+ "description": "DeploymentConfigList is a collection of deployment configs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "scopes"
+ "items"
],
"properties": {
- "scopes": {
- "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil means \"use the scopes on this request\".",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items is a list of deployment configs",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfig"
}
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "authorization.openshift.io",
+ "Type": "list",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "SelfSubjectRulesReviewSpec",
+ "Kind": "DeploymentConfigList",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.ServiceAccountReference": {
- "description": "ServiceAccountReference specifies a service account and namespace by their names.",
+ "io.openshift.apps.v1.DeploymentConfigRollback": {
+ "description": "DeploymentConfigRollback provides the input to rollback generation.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"name",
- "namespace"
+ "spec"
],
"properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
"name": {
- "description": "Name is the name of the service account.",
+ "description": "Name of the deployment config that will be rolled back.",
"type": "string",
"default": ""
},
- "namespace": {
- "description": "Namespace is the namespace of the service account. Service accounts from inside the whitelisted namespaces are allowed to be bound to roles. If Namespace is empty, then the namespace of the RoleBindingRestriction in which the ServiceAccountReference is embedded is used.",
- "type": "string",
- "default": ""
+ "spec": {
+ "description": "Spec defines the options to rollback generation.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfigRollbackSpec"
+ },
+ "updatedAnnotations": {
+ "description": "UpdatedAnnotations is a set of new annotations that will be added in the deployment config.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "authorization.openshift.io",
+ "Type": "object",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "ServiceAccountReference",
+ "Kind": "DeploymentConfigRollback",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.ServiceAccountRestriction": {
- "description": "ServiceAccountRestriction matches a service account by a string match on either the service-account name or the name of the service account's namespace.",
+ "io.openshift.apps.v1.DeploymentConfigRollbackSpec": {
+ "description": "DeploymentConfigRollbackSpec represents the options for rollback generation.",
"type": "object",
"required": [
- "serviceaccounts",
- "namespaces"
+ "from",
+ "includeTriggers",
+ "includeTemplate",
+ "includeReplicationMeta",
+ "includeStrategy"
],
"properties": {
- "namespaces": {
- "description": "Namespaces specifies a list of literal namespace names.",
- "type": "array",
- "items": {
+ "from": {
+ "description": "From points to a ReplicationController which is a deployment.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "includeReplicationMeta": {
+ "description": "IncludeReplicationMeta specifies whether to include the replica count and selector.",
+ "type": "boolean",
+ "default": false
+ },
+ "includeStrategy": {
+ "description": "IncludeStrategy specifies whether to include the deployment Strategy.",
+ "type": "boolean",
+ "default": false
+ },
+ "includeTemplate": {
+ "description": "IncludeTemplate specifies whether to include the PodTemplateSpec.",
+ "type": "boolean",
+ "default": false
+ },
+ "includeTriggers": {
+ "description": "IncludeTriggers specifies whether to include config Triggers.",
+ "type": "boolean",
+ "default": false
+ },
+ "revision": {
+ "description": "Revision to rollback to. If set to 0, rollback to the last revision.",
+ "type": "integer",
+ "format": "int64"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "apps.openshift.io",
+ "Version": "v1",
+ "Kind": "DeploymentConfigRollbackSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.apps.v1.DeploymentConfigSpec": {
+ "description": "DeploymentConfigSpec represents the desired state of the deployment.",
+ "type": "object",
+ "properties": {
+ "minReadySeconds": {
+ "description": "MinReadySeconds is the minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)",
+ "type": "integer",
+ "format": "int32"
+ },
+ "paused": {
+ "description": "Paused indicates that the deployment config is paused resulting in no new deployments on template changes or changes in the template caused by other triggers.",
+ "type": "boolean"
+ },
+ "replicas": {
+ "description": "Replicas is the number of desired replicas.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "revisionHistoryLimit": {
+ "description": "RevisionHistoryLimit is the number of old ReplicationControllers to retain to allow for rollbacks. This field is a pointer to allow for differentiation between an explicit zero and not specified. Defaults to 10. (This only applies to DeploymentConfigs created via the new group API resource, not the legacy resource.)",
+ "type": "integer",
+ "format": "int32"
+ },
+ "selector": {
+ "description": "Selector is a label query over pods that should match the Replicas count.",
+ "type": "object",
+ "additionalProperties": {
"type": "string",
"default": ""
}
},
- "serviceaccounts": {
- "description": "ServiceAccounts specifies a list of literal service-account names.",
+ "strategy": {
+ "description": "Strategy describes how a deployment is executed.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.apps.v1.DeploymentStrategy"
+ },
+ "template": {
+ "description": "Template is the object that describes the pod that will be created if insufficient replicas are detected.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec"
+ },
+ "test": {
+ "description": "Test ensures that this deployment config will have zero replicas except while a deployment is running. This allows the deployment config to be used as a continuous deployment test - triggering on images, running the deployment, and then succeeding or failing. Post strategy hooks and After actions can be used to integrate successful deployment with an action.",
+ "type": "boolean",
+ "default": false
+ },
+ "triggers": {
+ "description": "Triggers determine how updates to a DeploymentConfig result in new deployments. If no triggers are defined, a new deployment can only occur as a result of an explicit client update to the DeploymentConfig with a new LatestVersion. If null, defaults to having a config change trigger.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.ServiceAccountReference"
+ "$ref": "#/definitions/io.openshift.apps.v1.DeploymentTriggerPolicy"
}
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "authorization.openshift.io",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "ServiceAccountRestriction",
+ "Kind": "DeploymentConfigSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.SubjectAccessReview": {
- "description": "SubjectAccessReview is an object for requesting information about whether a user or group can perform an action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.apps.v1.DeploymentConfigStatus": {
+ "description": "DeploymentConfigStatus represents the current deployment state.",
"type": "object",
"required": [
- "namespace",
- "verb",
- "resourceAPIGroup",
- "resourceAPIVersion",
- "resource",
- "resourceName",
- "path",
- "isNonResourceURL",
- "user",
- "groups",
- "scopes"
+ "latestVersion",
+ "observedGeneration",
+ "replicas",
+ "updatedReplicas",
+ "availableReplicas",
+ "unavailableReplicas"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "content": {
- "description": "Content is the actual content of the request for create and update",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "availableReplicas": {
+ "description": "AvailableReplicas is the total number of available pods targeted by this deployment config.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "groups": {
- "description": "GroupsSlice is optional. Groups is the list of groups to which the User belongs.",
+ "conditions": {
+ "description": "Conditions represents the latest available observations of a deployment config's current state.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
- }
- },
- "isNonResourceURL": {
- "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)",
- "type": "boolean",
- "default": false
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "default": {},
+ "$ref": "#/definitions/io.openshift.apps.v1.DeploymentCondition"
+ },
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "namespace": {
- "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces",
- "type": "string",
- "default": ""
+ "details": {
+ "description": "Details are the reasons for the update to this deployment config. This could be based on a change made by the user or caused by an automatic trigger",
+ "$ref": "#/definitions/io.openshift.apps.v1.DeploymentDetails"
},
- "path": {
- "description": "Path is the path of a non resource URL",
- "type": "string",
- "default": ""
+ "latestVersion": {
+ "description": "LatestVersion is used to determine whether the current deployment associated with a deployment config is out of sync.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
},
- "resource": {
- "description": "Resource is one of the existing resource types",
- "type": "string",
- "default": ""
+ "observedGeneration": {
+ "description": "ObservedGeneration is the most recent generation observed by the deployment config controller.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
},
- "resourceAPIGroup": {
- "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined",
- "type": "string",
- "default": ""
+ "readyReplicas": {
+ "description": "Total number of ready pods targeted by this deployment.",
+ "type": "integer",
+ "format": "int32"
},
- "resourceAPIVersion": {
- "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined",
- "type": "string",
- "default": ""
+ "replicas": {
+ "description": "Replicas is the total number of pods targeted by this deployment config.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "resourceName": {
- "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"",
- "type": "string",
- "default": ""
+ "unavailableReplicas": {
+ "description": "UnavailableReplicas is the total number of unavailable pods targeted by this deployment config.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "scopes": {
- "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil for a self-SAR, means \"use the scopes on this request\". Nil for a regular SAR, means the same as empty.",
+ "updatedReplicas": {
+ "description": "UpdatedReplicas is the total number of non-terminated pods targeted by this deployment config that have the desired template spec.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "apps.openshift.io",
+ "Version": "v1",
+ "Kind": "DeploymentConfigStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.apps.v1.DeploymentDetails": {
+ "description": "DeploymentDetails captures information about the causes of a deployment.",
+ "type": "object",
+ "required": [
+ "causes"
+ ],
+ "properties": {
+ "causes": {
+ "description": "Causes are extended data associated with all the causes for creating a new deployment",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.apps.v1.DeploymentCause"
}
},
- "user": {
- "description": "User is optional. If both User and Groups are empty, the current authenticated user is used.",
- "type": "string",
- "default": ""
- },
- "verb": {
- "description": "Verb is one of: get, list, watch, create, update, delete",
- "type": "string",
- "default": ""
+ "message": {
+ "description": "Message is the user specified change message, if this deployment was triggered manually by the user",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "authorization.openshift.io",
+ "Type": "nested",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "SubjectAccessReview",
- "Scope": "Clustered"
+ "Kind": "DeploymentDetails",
+ "Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.SubjectAccessReviewResponse": {
- "description": "SubjectAccessReviewResponse describes whether or not a user or group can perform an action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.apps.v1.DeploymentLog": {
+ "description": "DeploymentLog represents the logs for a deployment\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "allowed"
- ],
"properties": {
- "allowed": {
- "description": "Allowed is required. True if the action would be allowed, false otherwise.",
- "type": "boolean",
- "default": false
- },
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "evaluationError": {
- "description": "EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is most common when a bound role is missing, but enough roles are still present and bound to reason about the request.",
- "type": "string"
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
- },
- "namespace": {
- "description": "Namespace is the namespace used for the access review",
- "type": "string"
- },
- "reason": {
- "description": "Reason is optional. It indicates why a request was allowed or denied.",
- "type": "string"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "authorization.openshift.io",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "SubjectAccessReviewResponse",
+ "Kind": "DeploymentLog",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.SubjectRulesReview": {
- "description": "SubjectRulesReview is a resource you can create to determine which actions another user can perform in a namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.apps.v1.DeploymentLogOptions": {
+ "description": "DeploymentLogOptions is the REST options for a deployment log\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
+ "container": {
+ "description": "The container for which to stream logs. Defaults to only container if there is one container in the pod.",
+ "type": "string"
+ },
+ "follow": {
+ "description": "Follow if true indicates that the build log should be streamed until the build terminates.",
+ "type": "boolean"
+ },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "limitBytes": {
+ "description": "If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.",
+ "type": "integer",
+ "format": "int64"
},
- "spec": {
- "description": "Spec adds information about how to conduct the check",
- "default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.SubjectRulesReviewSpec"
+ "nowait": {
+ "description": "NoWait if true causes the call to return immediately even if the deployment is not available yet. Otherwise the server will wait until the deployment has started.",
+ "type": "boolean"
},
- "status": {
- "description": "Status is completed by the server to tell which permissions you have",
- "default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.SubjectRulesReviewStatus"
+ "previous": {
+ "description": "Return previous deployment logs. Defaults to false.",
+ "type": "boolean"
+ },
+ "sinceSeconds": {
+ "description": "A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "sinceTime": {
+ "description": "An RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "tailLines": {
+ "description": "If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime",
+ "type": "integer",
+ "format": "int64"
+ },
+ "timestamps": {
+ "description": "If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.",
+ "type": "boolean"
+ },
+ "version": {
+ "description": "Version of the deployment for which to view logs.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "authorization.openshift.io",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "SubjectRulesReview",
+ "Kind": "DeploymentLogOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.SubjectRulesReviewSpec": {
- "description": "SubjectRulesReviewSpec adds information about how to conduct the check",
+ "io.openshift.apps.v1.DeploymentRequest": {
+ "description": "DeploymentRequest is a request to a deployment config for a new deployment.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "user",
- "groups",
- "scopes"
+ "name",
+ "latest",
+ "force"
],
"properties": {
- "groups": {
- "description": "Groups is optional. Groups is the list of groups to which the User belongs. At least one of User and Groups must be specified.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "scopes": {
- "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\".",
+ "excludeTriggers": {
+ "description": "ExcludeTriggers instructs the instantiator to avoid processing the specified triggers. This field overrides the triggers from latest and allows clients to control specific logic. This field is ignored if not specified.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "user": {
- "description": "User is optional. At least one of User and Groups must be specified.",
+ "force": {
+ "description": "Force will try to force a new deployment to run. If the deployment config is paused, then setting this to true will return an Invalid error.",
+ "type": "boolean",
+ "default": false
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "latest": {
+ "description": "Latest will update the deployment config with the latest state from all triggers.",
+ "type": "boolean",
+ "default": false
+ },
+ "name": {
+ "description": "Name of the deployment config for requesting a new deployment.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "authorization.openshift.io",
+ "Type": "object",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "SubjectRulesReviewSpec",
+ "Kind": "DeploymentRequest",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.SubjectRulesReviewStatus": {
- "description": "SubjectRulesReviewStatus is contains the result of a rules check",
+ "io.openshift.apps.v1.DeploymentStrategy": {
+ "description": "DeploymentStrategy describes how to perform a deployment.",
"type": "object",
- "required": [
- "rules"
- ],
"properties": {
- "evaluationError": {
- "description": "EvaluationError can appear in combination with Rules. It means some error happened during evaluation that may have prevented additional rules from being populated.",
- "type": "string"
+ "activeDeadlineSeconds": {
+ "description": "ActiveDeadlineSeconds is the duration in seconds that the deployer pods for this deployment config may be active on a node before the system actively tries to terminate them.",
+ "type": "integer",
+ "format": "int64"
},
- "rules": {
- "description": "Rules is the list of rules (no particular sort) that are allowed for the subject",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.authorization.v1.PolicyRule"
+ "annotations": {
+ "description": "Annotations is a set of key, value pairs added to custom deployer and lifecycle pre/post hook pods.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "customParams": {
+ "description": "CustomParams are the input to the Custom deployment strategy, and may also be specified for the Recreate and Rolling strategies to customize the execution process that runs the deployment.",
+ "$ref": "#/definitions/io.openshift.apps.v1.CustomDeploymentStrategyParams"
+ },
+ "labels": {
+ "description": "Labels is a set of key, value pairs added to custom deployer and lifecycle pre/post hook pods.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
}
+ },
+ "recreateParams": {
+ "description": "RecreateParams are the input to the Recreate deployment strategy.",
+ "$ref": "#/definitions/io.openshift.apps.v1.RecreateDeploymentStrategyParams"
+ },
+ "resources": {
+ "description": "Resources contains resource requirements to execute the deployment and any hooks.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
+ },
+ "rollingParams": {
+ "description": "RollingParams are the input to the Rolling deployment strategy.",
+ "$ref": "#/definitions/io.openshift.apps.v1.RollingDeploymentStrategyParams"
+ },
+ "type": {
+ "description": "Type is the name of a deployment strategy.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "authorization.openshift.io",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "SubjectRulesReviewStatus",
+ "Kind": "DeploymentStrategy",
"Scope": "Namespaced"
}
},
- "io.openshift.authorization.v1.UserRestriction": {
- "description": "UserRestriction matches a user either by a string match on the user name, a string match on the name of a group to which the user belongs, or a label selector applied to the user labels.",
+ "io.openshift.apps.v1.DeploymentTriggerImageChangeParams": {
+ "description": "DeploymentTriggerImageChangeParams represents the parameters to the ImageChange trigger.",
"type": "object",
"required": [
- "users",
- "groups",
- "labels"
+ "from"
],
"properties": {
- "groups": {
- "description": "Groups specifies a list of literal group names.",
+ "automatic": {
+ "description": "Automatic means that the detection of a new tag value should result in an image update inside the pod template.",
+ "type": "boolean"
+ },
+ "containerNames": {
+ "description": "ContainerNames is used to restrict tag updates to the specified set of container names in a pod. If multiple triggers point to the same containers, the resulting behavior is undefined. Future API versions will make this a validation error. If ContainerNames does not point to a valid container, the trigger will be ignored. Future API versions will make this a validation error.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "labels": {
- "description": "Selectors specifies a list of label selectors over user labels.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
- }
+ "from": {
+ "description": "From is a reference to an image stream tag to watch for changes. From.Name is the only required subfield - if From.Namespace is blank, the namespace of the current deployment trigger will be used.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
},
- "users": {
- "description": "Users specifies a list of literal user names.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "lastTriggeredImage": {
+ "description": "LastTriggeredImage is the last image to be triggered.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "authorization.openshift.io",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "UserRestriction",
+ "Kind": "DeploymentTriggerImageChangeParams",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BinaryBuildRequestOptions": {
- "description": "BinaryBuildRequestOptions are the options required to fully speficy a binary build request\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.apps.v1.DeploymentTriggerPolicy": {
+ "description": "DeploymentTriggerPolicy describes a policy for a single trigger that results in a new deployment.",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "asFile": {
- "description": "asFile determines if the binary should be created as a file within the source rather than extracted as an archive",
- "type": "string"
+ "imageChangeParams": {
+ "description": "ImageChangeParams represents the parameters for the ImageChange trigger.",
+ "$ref": "#/definitions/io.openshift.apps.v1.DeploymentTriggerImageChangeParams"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "revision.authorEmail": {
- "description": "revision.authorEmail of the source control user",
- "type": "string"
- },
- "revision.authorName": {
- "description": "revision.authorName of the source control user",
- "type": "string"
- },
- "revision.commit": {
- "description": "revision.commit is the value identifying a specific commit",
+ "type": {
+ "description": "Type of the trigger",
"type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "apps.openshift.io",
+ "Version": "v1",
+ "Kind": "DeploymentTriggerPolicy",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.apps.v1.ExecNewPodHook": {
+ "description": "ExecNewPodHook is a hook implementation which runs a command in a new pod based on the specified container which is assumed to be part of the deployment template.",
+ "type": "object",
+ "required": [
+ "command",
+ "containerName"
+ ],
+ "properties": {
+ "command": {
+ "description": "Command is the action command and its arguments.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "revision.committerEmail": {
- "description": "revision.committerEmail of the source control user",
- "type": "string"
+ "containerName": {
+ "description": "ContainerName is the name of a container in the deployment pod template whose container image will be used for the hook pod's container.",
+ "type": "string",
+ "default": ""
},
- "revision.committerName": {
- "description": "revision.committerName of the source control user",
- "type": "string"
+ "env": {
+ "description": "Env is a set of environment variables to supply to the hook pod's container.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
+ }
},
- "revision.message": {
- "description": "revision.message is the description of a specific commit",
- "type": "string"
+ "volumes": {
+ "description": "Volumes is a list of named volumes from the pod template which should be copied to the hook pod. Volumes names not found in pod spec are ignored. An empty list means no volumes will be copied.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "build.openshift.io",
+ "Type": "nested",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "BinaryBuildRequestOptions",
+ "Kind": "ExecNewPodHook",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BinaryBuildSource": {
- "description": "BinaryBuildSource describes a binary file to be used for the Docker and Source build strategies, where the file will be extracted and used as the build source.",
+ "io.openshift.apps.v1.LifecycleHook": {
+ "description": "LifecycleHook defines a specific deployment lifecycle action. Only one type of action may be specified at any time.",
"type": "object",
+ "required": [
+ "failurePolicy"
+ ],
"properties": {
- "asFile": {
- "description": "asFile indicates that the provided binary input should be considered a single file within the build input. For example, specifying \"webapp.war\" would place the provided binary as `/webapp.war` for the builder. If left empty, the Docker and Source build strategies assume this file is a zip, tar, or tar.gz file and extract it as the source. The custom strategy receives this binary as standard input. This filename may not contain slashes or be '..' or '.'.",
- "type": "string"
+ "execNewPod": {
+ "description": "ExecNewPod specifies the options for a lifecycle hook backed by a pod.",
+ "$ref": "#/definitions/io.openshift.apps.v1.ExecNewPodHook"
+ },
+ "failurePolicy": {
+ "description": "FailurePolicy specifies what action to take if the hook fails.",
+ "type": "string",
+ "default": ""
+ },
+ "tagImages": {
+ "description": "TagImages instructs the deployer to tag the current image referenced under a container onto an image stream tag.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.apps.v1.TagImageHook"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "BinaryBuildSource",
+ "Kind": "LifecycleHook",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BitbucketWebHookCause": {
- "description": "BitbucketWebHookCause has information about a Bitbucket webhook that triggered a build.",
+ "io.openshift.apps.v1.RecreateDeploymentStrategyParams": {
+ "description": "RecreateDeploymentStrategyParams are the input to the Recreate deployment strategy.",
"type": "object",
"properties": {
- "revision": {
- "description": "Revision is the git source revision information of the trigger.",
- "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
+ "mid": {
+ "description": "Mid is a lifecycle hook which is executed while the deployment is scaled down to zero before the first new pod is created. All LifecycleHookFailurePolicy values are supported.",
+ "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook"
},
- "secret": {
- "description": "Secret is the obfuscated webhook secret that triggered a build.",
- "type": "string"
+ "post": {
+ "description": "Post is a lifecycle hook which is executed after the strategy has finished all deployment logic. All LifecycleHookFailurePolicy values are supported.",
+ "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook"
+ },
+ "pre": {
+ "description": "Pre is a lifecycle hook which is executed before the strategy manipulates the deployment. All LifecycleHookFailurePolicy values are supported.",
+ "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook"
+ },
+ "timeoutSeconds": {
+ "description": "TimeoutSeconds is the time to wait for updates before giving up. If the value is nil, a default will be used.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "BitbucketWebHookCause",
+ "Kind": "RecreateDeploymentStrategyParams",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.Build": {
- "description": "Build encapsulates the inputs needed to produce a new deployable image, as well as the status of the execution and a reference to the Pod which executed the build.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.apps.v1.RollingDeploymentStrategyParams": {
+ "description": "RollingDeploymentStrategyParams are the input to the Rolling deployment strategy.",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "intervalSeconds": {
+ "description": "IntervalSeconds is the time to wait between polling deployment status after update. If the value is nil, a default will be used.",
+ "type": "integer",
+ "format": "int64"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "maxSurge": {
+ "description": "MaxSurge is the maximum number of pods that can be scheduled above the original number of pods. Value can be an absolute number (ex: 5) or a percentage of total pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up.\n\nThis cannot be 0 if MaxUnavailable is 0. By default, 25% is used.\n\nExample: when this is set to 30%, the new RC can be scaled up by 30% immediately when the rolling update starts. Once old pods have been killed, new RC can be scaled up further, ensuring that total number of pods running at any time during the update is atmost 130% of original pods.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "maxUnavailable": {
+ "description": "MaxUnavailable is the maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total pods at the start of update (ex: 10%). Absolute number is calculated from percentage by rounding down.\n\nThis cannot be 0 if MaxSurge is 0. By default, 25% is used.\n\nExample: when this is set to 30%, the old RC can be scaled down by 30% immediately when the rolling update starts. Once new pods are ready, old RC can be scaled down further, followed by scaling up the new RC, ensuring that at least 70% of original number of pods are available at all times during the update.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
},
- "spec": {
- "description": "spec is all the inputs used to execute the build.",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildSpec"
+ "post": {
+ "description": "Post is a lifecycle hook which is executed after the strategy has finished all deployment logic. All LifecycleHookFailurePolicy values are supported.",
+ "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook"
},
- "status": {
- "description": "status is the current status of the build.",
+ "pre": {
+ "description": "Pre is a lifecycle hook which is executed before the deployment process begins. All LifecycleHookFailurePolicy values are supported.",
+ "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook"
+ },
+ "timeoutSeconds": {
+ "description": "TimeoutSeconds is the time to wait for updates before giving up. If the value is nil, a default will be used.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "updatePeriodSeconds": {
+ "description": "UpdatePeriodSeconds is the time to wait between individual pod updates. If the value is nil, a default will be used.",
+ "type": "integer",
+ "format": "int64"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "apps.openshift.io",
+ "Version": "v1",
+ "Kind": "RollingDeploymentStrategyParams",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.apps.v1.TagImageHook": {
+ "description": "TagImageHook is a request to tag the image in a particular container onto an ImageStreamTag.",
+ "type": "object",
+ "required": [
+ "containerName",
+ "to"
+ ],
+ "properties": {
+ "containerName": {
+ "description": "ContainerName is the name of a container in the deployment config whose image value will be used as the source of the tag. If there is only a single container this value will be defaulted to the name of that container.",
+ "type": "string",
+ "default": ""
+ },
+ "to": {
+ "description": "To is the target ImageStreamTag to set the container's image onto.",
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildStatus"
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "build.openshift.io",
+ "Type": "nested",
+ "Group": "apps.openshift.io",
"Version": "v1",
- "Kind": "Build",
+ "Kind": "TagImageHook",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildCondition": {
- "description": "BuildCondition describes the state of a build at a certain point.",
+ "io.openshift.authorization.v1.Action": {
+ "description": "Action describes a request to the API server",
"type": "object",
"required": [
- "type",
- "status"
+ "namespace",
+ "verb",
+ "resourceAPIGroup",
+ "resourceAPIVersion",
+ "resource",
+ "resourceName",
+ "path",
+ "isNonResourceURL"
],
"properties": {
- "lastTransitionTime": {
- "description": "The last time the condition transitioned from one status to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "content": {
+ "description": "Content is the actual content of the request for create and update",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
},
- "lastUpdateTime": {
- "description": "The last time this condition was updated.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "isNonResourceURL": {
+ "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)",
+ "type": "boolean",
+ "default": false
},
- "message": {
- "description": "A human readable message indicating details about the transition.",
- "type": "string"
+ "namespace": {
+ "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces",
+ "type": "string",
+ "default": ""
},
- "reason": {
- "description": "The reason for the condition's last transition.",
- "type": "string"
+ "path": {
+ "description": "Path is the path of a non resource URL",
+ "type": "string",
+ "default": ""
},
- "status": {
- "description": "Status of the condition, one of True, False, Unknown.",
+ "resource": {
+ "description": "Resource is one of the existing resource types",
"type": "string",
"default": ""
},
- "type": {
- "description": "Type of build condition.",
+ "resourceAPIGroup": {
+ "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined",
+ "type": "string",
+ "default": ""
+ },
+ "resourceAPIVersion": {
+ "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined",
+ "type": "string",
+ "default": ""
+ },
+ "resourceName": {
+ "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"",
+ "type": "string",
+ "default": ""
+ },
+ "verb": {
+ "description": "Verb is one of: get, list, watch, create, update, delete",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildCondition",
+ "Kind": "Action",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildConfig": {
- "description": "Build configurations define a build process for new container images. There are three types of builds possible - a container image build using a Dockerfile, a Source-to-Image build that uses a specially prepared base image that accepts source code that it can make runnable, and a custom build that can run // arbitrary container images as a base and accept the build parameters. Builds run on the cluster and on completion are pushed to the container image registry specified in the \"output\" section. A build can be triggered via a webhook, when the base image changes, or when a user manually requests a new build be // created.\n\nEach build created by a build configuration is numbered and refers back to its parent configuration. Multiple builds can be triggered at once. Builds that do not have \"output\" set can be used to test code or run a verification build.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.authorization.v1.ClusterRole": {
+ "description": "ClusterRole is a logical grouping of PolicyRules that can be referenced as a unit by ClusterRoleBindings.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "spec"
+ "rules"
],
"properties": {
+ "aggregationRule": {
+ "description": "AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.",
+ "$ref": "#/definitions/io.k8s.api.rbac.v1.AggregationRule"
+ },
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
@@ -60526,42 +61562,41 @@
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "spec": {
- "description": "spec holds all the input necessary to produce a new build, and the conditions when to trigger them.",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildConfigSpec"
- },
- "status": {
- "description": "status holds any relevant information about a build config",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildConfigStatus"
+ "rules": {
+ "description": "Rules holds all the PolicyRules for this ClusterRole",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.authorization.v1.PolicyRule"
+ }
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildConfig",
- "Scope": "Namespaced"
+ "Kind": "ClusterRole",
+ "Scope": "Clustered"
}
},
- "io.openshift.build.v1.BuildConfigList": {
- "description": "BuildConfigList is a collection of BuildConfigs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.authorization.v1.ClusterRoleBinding": {
+ "description": "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference any ClusterRole in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. ClusterRoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "items"
+ "subjects",
+ "roleRef"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "items": {
- "description": "items is a list of build configs",
+ "groupNames": {
+ "description": "GroupNames holds all the groups directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildConfig"
+ "type": "string",
+ "default": ""
}
},
"kind": {
@@ -60569,139 +61604,79 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
- }
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "build.openshift.io",
- "Version": "v1",
- "Kind": "BuildConfigList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.build.v1.BuildConfigSpec": {
- "description": "BuildConfigSpec describes when and how builds are created",
- "type": "object",
- "required": [
- "strategy"
- ],
- "properties": {
- "completionDeadlineSeconds": {
- "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer",
- "type": "integer",
- "format": "int64"
- },
- "failedBuildsHistoryLimit": {
- "description": "failedBuildsHistoryLimit is the number of old failed builds to retain. When a BuildConfig is created, the 5 most recent failed builds are retained unless this value is set. If removed after the BuildConfig has been created, all failed builds are retained.",
- "type": "integer",
- "format": "int32"
- },
- "mountTrustedCA": {
- "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.",
- "type": "boolean"
- },
- "nodeSelector": {
- "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "output": {
- "description": "output describes the container image the Strategy should produce.",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildOutput"
- },
- "postCommit": {
- "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildPostCommitSpec"
- },
- "resources": {
- "description": "resources computes resource requirements to execute the build.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
- },
- "revision": {
- "description": "revision is the information from the source for a specific repo snapshot. This is optional.",
- "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
- },
- "runPolicy": {
- "description": "RunPolicy describes how the new build created from this build configuration will be scheduled for execution. This is optional, if not specified we default to \"Serial\".",
- "type": "string"
- },
- "serviceAccount": {
- "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount",
- "type": "string"
- },
- "source": {
- "description": "source describes the SCM in use.",
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildSource"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "strategy": {
- "description": "strategy defines how to perform a build.",
+ "roleRef": {
+ "description": "RoleRef can only reference the current namespace and the global namespace. If the ClusterRoleRef cannot be resolved, the Authorizer must return an error. Since Policy is a singleton, this is sufficient knowledge to locate a role.",
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildStrategy"
- },
- "successfulBuildsHistoryLimit": {
- "description": "successfulBuildsHistoryLimit is the number of old successful builds to retain. When a BuildConfig is created, the 5 most recent successful builds are retained unless this value is set. If removed after the BuildConfig has been created, all successful builds are retained.",
- "type": "integer",
- "format": "int32"
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
},
- "triggers": {
- "description": "triggers determine how new Builds can be launched from a BuildConfig. If no triggers are defined, a new build can only occur as a result of an explicit client build creation.",
+ "subjects": {
+ "description": "Subjects hold object references to authorize with this rule. This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers. Thus newer clients that do not need to support backwards compatibility should send only fully qualified Subjects and should omit the UserNames and GroupNames fields. Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildTriggerPolicy"
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ }
+ },
+ "userNames": {
+ "description": "UserNames holds all the usernames directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
}
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "object",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildConfigSpec",
- "Scope": "Namespaced"
+ "Kind": "ClusterRoleBinding",
+ "Scope": "Clustered"
}
},
- "io.openshift.build.v1.BuildConfigStatus": {
- "description": "BuildConfigStatus contains current state of the build config object.",
+ "io.openshift.authorization.v1.ClusterRoleBindingList": {
+ "description": "ClusterRoleBindingList is a collection of ClusterRoleBindings\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "lastVersion"
+ "items"
],
"properties": {
- "imageChangeTriggers": {
- "description": "ImageChangeTriggers captures the runtime state of any ImageChangeTrigger specified in the BuildConfigSpec, including the value reconciled by the OpenShift APIServer for the lastTriggeredImageID. There is a single entry in this array for each image change trigger in spec. Each trigger status references the ImageStreamTag that acts as the source of the trigger.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items is a list of ClusterRoleBindings",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.ImageChangeTriggerStatus"
+ "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRoleBinding"
}
},
- "lastVersion": {
- "description": "lastVersion is used to inform about number of last triggered build.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "list",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildConfigStatus",
+ "Kind": "ClusterRoleBindingList",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildList": {
- "description": "BuildList is a collection of Builds.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.authorization.v1.ClusterRoleList": {
+ "description": "ClusterRoleList is a collection of ClusterRoles\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"items"
@@ -60712,11 +61687,11 @@
"type": "string"
},
"items": {
- "description": "items is a list of builds",
+ "description": "Items is a list of ClusterRoles",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.Build"
+ "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRole"
}
},
"kind": {
@@ -60731,1407 +61706,1298 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildList",
+ "Kind": "ClusterRoleList",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildLog": {
- "description": "BuildLog is the (unused) resource associated with the build log redirector\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.authorization.v1.GroupRestriction": {
+ "description": "GroupRestriction matches a group either by a string match on the group name or a label selector applied to group labels.",
"type": "object",
+ "required": [
+ "groups",
+ "labels"
+ ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "groups": {
+ "description": "Groups is a list of groups used to match against an individual user's groups. If the user is a member of one of the whitelisted groups, the user is allowed to be bound to a role.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "labels": {
+ "description": "Selectors specifies a list of label selectors over group labels.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ }
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "build.openshift.io",
+ "Type": "nested",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildLog",
+ "Kind": "GroupRestriction",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildLogOptions": {
- "description": "BuildLogOptions is the REST options for a build log\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.authorization.v1.IsPersonalSubjectAccessReview": {
+ "description": "IsPersonalSubjectAccessReview is a marker for PolicyRule.AttributeRestrictions that denotes that subjectaccessreviews on self should be allowed\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "container": {
- "description": "cointainer for which to stream logs. Defaults to only container if there is one container in the pod.",
- "type": "string"
- },
- "follow": {
- "description": "follow if true indicates that the build log should be streamed until the build terminates.",
- "type": "boolean"
- },
- "insecureSkipTLSVerifyBackend": {
- "description": "insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to. This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet. If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).",
- "type": "boolean"
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
- },
- "limitBytes": {
- "description": "limitBytes, If set, is the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.",
- "type": "integer",
- "format": "int64"
- },
- "nowait": {
- "description": "noWait if true causes the call to return immediately even if the build is not available yet. Otherwise the server will wait until the build has started.",
- "type": "boolean"
- },
- "previous": {
- "description": "previous returns previous build logs. Defaults to false.",
- "type": "boolean"
- },
- "sinceSeconds": {
- "description": "sinceSeconds is a relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.",
- "type": "integer",
- "format": "int64"
- },
- "sinceTime": {
- "description": "sinceTime is an RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "tailLines": {
- "description": "tailLines, If set, is the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime",
- "type": "integer",
- "format": "int64"
- },
- "timestamps": {
- "description": "timestamps, If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.",
- "type": "boolean"
- },
- "version": {
- "description": "version of the build for which to view logs.",
- "type": "integer",
- "format": "int64"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "build.openshift.io",
- "Version": "v1",
- "Kind": "BuildLogOptions",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.build.v1.BuildOutput": {
- "description": "BuildOutput is input to a build strategy and describes the container image that the strategy should produce.",
- "type": "object",
- "properties": {
- "imageLabels": {
- "description": "imageLabels define a list of labels that are applied to the resulting image. If there are multiple labels with the same name then the last one in the list is used.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.ImageLabel"
- }
- },
- "pushSecret": {
- "description": "PushSecret is the name of a Secret that would be used for setting up the authentication for executing the Docker push to authentication enabled Docker Registry (or Docker Hub).",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "to": {
- "description": "to defines an optional location to push the output of this build to. Kind must be one of 'ImageStreamTag' or 'DockerImage'. This value will be used to look up a container image repository to push to. In the case of an ImageStreamTag, the ImageStreamTag will be looked for in the namespace of the build unless Namespace is specified.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
- "Version": "v1",
- "Kind": "BuildOutput",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.build.v1.BuildPostCommitSpec": {
- "description": "A BuildPostCommitSpec holds a build post commit hook specification. The hook executes a command in a temporary container running the build output image, immediately after the last layer of the image is committed and before the image is pushed to a registry. The command is executed with the current working directory ($PWD) set to the image's WORKDIR.\n\nThe build will be marked as failed if the hook execution fails. It will fail if the script or command return a non-zero exit code, or if there is any other error related to starting the temporary container.\n\nThere are five different ways to configure the hook. As an example, all forms below are equivalent and will execute `rake test --verbose`.\n\n1. Shell script:\n\n\t \"postCommit\": {\n\t \"script\": \"rake test --verbose\",\n\t }\n\n\tThe above is a convenient form which is equivalent to:\n\n\t \"postCommit\": {\n\t \"command\": [\"/bin/sh\", \"-ic\"],\n\t \"args\": [\"rake test --verbose\"]\n\t }\n\n2. A command as the image entrypoint:\n\n\t \"postCommit\": {\n\t \"commit\": [\"rake\", \"test\", \"--verbose\"]\n\t }\n\n\tCommand overrides the image entrypoint in the exec form, as documented in\n\tDocker: https://docs.docker.com/engine/reference/builder/#entrypoint.\n\n3. Pass arguments to the default entrypoint:\n\n\t \"postCommit\": {\n\t\t\t \"args\": [\"rake\", \"test\", \"--verbose\"]\n\t\t }\n\n\t This form is only useful if the image entrypoint can handle arguments.\n\n4. Shell script with arguments:\n\n\t \"postCommit\": {\n\t \"script\": \"rake test $1\",\n\t \"args\": [\"--verbose\"]\n\t }\n\n\tThis form is useful if you need to pass arguments that would otherwise be\n\thard to quote properly in the shell script. In the script, $0 will be\n\t\"/bin/sh\" and $1, $2, etc, are the positional arguments from Args.\n\n5. Command with arguments:\n\n\t \"postCommit\": {\n\t \"command\": [\"rake\", \"test\"],\n\t \"args\": [\"--verbose\"]\n\t }\n\n\tThis form is equivalent to appending the arguments to the Command slice.\n\nIt is invalid to provide both Script and Command simultaneously. If none of the fields are specified, the hook is not executed.",
- "type": "object",
- "properties": {
- "args": {
- "description": "args is a list of arguments that are provided to either Command, Script or the container image's default entrypoint. The arguments are placed immediately after the command to be run.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "command": {
- "description": "command is the command to run. It may not be specified with Script. This might be needed if the image doesn't have `/bin/sh`, or if you do not want to use a shell. In all other cases, using Script might be more convenient.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "script": {
- "description": "script is a shell script to be run with `/bin/sh -ic`. It may not be specified with Command. Use Script when a shell script is appropriate to execute the post build hook, for example for running unit tests with `rake test`. If you need control over the image entrypoint, or if the image does not have `/bin/sh`, use Command and/or Args. The `-i` flag is needed to support CentOS and RHEL images that use Software Collections (SCL), in order to have the appropriate collections enabled in the shell. E.g., in the Ruby image, this is necessary to make `ruby`, `bundle` and other binaries available in the PATH.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildPostCommitSpec",
+ "Kind": "IsPersonalSubjectAccessReview",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildRequest": {
- "description": "BuildRequest is the resource used to pass parameters to build generator\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.authorization.v1.LocalResourceAccessReview": {
+ "description": "LocalResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec in a particular namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "namespace",
+ "verb",
+ "resourceAPIGroup",
+ "resourceAPIVersion",
+ "resource",
+ "resourceName",
+ "path",
+ "isNonResourceURL"
+ ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "binary": {
- "description": "binary indicates a request to build from a binary provided to the builder",
- "$ref": "#/definitions/io.openshift.build.v1.BinaryBuildSource"
- },
- "dockerStrategyOptions": {
- "description": "DockerStrategyOptions contains additional docker-strategy specific options for the build",
- "$ref": "#/definitions/io.openshift.build.v1.DockerStrategyOptions"
- },
- "env": {
- "description": "env contains additional environment variables you want to pass into a builder container.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
- }
+ "content": {
+ "description": "Content is the actual content of the request for create and update",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
},
- "from": {
- "description": "from is the reference to the ImageStreamTag that triggered the build.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "isNonResourceURL": {
+ "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)",
+ "type": "boolean",
+ "default": false
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "lastVersion": {
- "description": "lastVersion (optional) is the LastVersion of the BuildConfig that was used to generate the build. If the BuildConfig in the generator doesn't match, a build will not be generated.",
- "type": "integer",
- "format": "int64"
- },
"metadata": {
"description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "revision": {
- "description": "revision is the information from the source for a specific repo snapshot.",
- "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
+ "namespace": {
+ "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces",
+ "type": "string",
+ "default": ""
},
- "sourceStrategyOptions": {
- "description": "SourceStrategyOptions contains additional source-strategy specific options for the build",
- "$ref": "#/definitions/io.openshift.build.v1.SourceStrategyOptions"
+ "path": {
+ "description": "Path is the path of a non resource URL",
+ "type": "string",
+ "default": ""
},
- "triggeredBy": {
- "description": "triggeredBy describes which triggers started the most recent update to the build configuration and contains information about those triggers.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildTriggerCause"
- }
+ "resource": {
+ "description": "Resource is one of the existing resource types",
+ "type": "string",
+ "default": ""
},
- "triggeredByImage": {
- "description": "triggeredByImage is the Image that triggered this build.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "resourceAPIGroup": {
+ "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined",
+ "type": "string",
+ "default": ""
+ },
+ "resourceAPIVersion": {
+ "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined",
+ "type": "string",
+ "default": ""
+ },
+ "resourceName": {
+ "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"",
+ "type": "string",
+ "default": ""
+ },
+ "verb": {
+ "description": "Verb is one of: get, list, watch, create, update, delete",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildRequest",
+ "Kind": "LocalResourceAccessReview",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildSource": {
- "description": "BuildSource is the SCM used for the build.",
+ "io.openshift.authorization.v1.LocalSubjectAccessReview": {
+ "description": "LocalSubjectAccessReview is an object for requesting information about whether a user or group can perform an action in a particular namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "namespace",
+ "verb",
+ "resourceAPIGroup",
+ "resourceAPIVersion",
+ "resource",
+ "resourceName",
+ "path",
+ "isNonResourceURL",
+ "user",
+ "groups",
+ "scopes"
+ ],
"properties": {
- "binary": {
- "description": "binary builds accept a binary as their input. The binary is generally assumed to be a tar, gzipped tar, or zip file depending on the strategy. For container image builds, this is the build context and an optional Dockerfile may be specified to override any Dockerfile in the build context. For Source builds, this is assumed to be an archive as described above. For Source and container image builds, if binary.asFile is set the build will receive a directory with a single file. contextDir may be used when an archive is provided. Custom builds will receive this binary as input on STDIN.",
- "$ref": "#/definitions/io.openshift.build.v1.BinaryBuildSource"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "configMaps": {
- "description": "configMaps represents a list of configMaps and their destinations that will be used for the build.",
+ "content": {
+ "description": "Content is the actual content of the request for create and update",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "groups": {
+ "description": "Groups is optional. Groups is the list of groups to which the User belongs.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.ConfigMapBuildSource"
+ "type": "string",
+ "default": ""
}
},
- "contextDir": {
- "description": "contextDir specifies the sub-directory where the source code for the application exists. This allows to have buildable sources in directory other than root of repository.",
- "type": "string"
+ "isNonResourceURL": {
+ "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)",
+ "type": "boolean",
+ "default": false
},
- "dockerfile": {
- "description": "dockerfile is the raw contents of a Dockerfile which should be built. When this option is specified, the FROM may be modified based on your strategy base image and additional ENV stanzas from your strategy environment will be added after the FROM, but before the rest of your Dockerfile stanzas. The Dockerfile source type may be used with other options like git - in those cases the Git repo will have any innate Dockerfile replaced in the context dir.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "git": {
- "description": "git contains optional information about git build source",
- "$ref": "#/definitions/io.openshift.build.v1.GitBuildSource"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "images": {
- "description": "images describes a set of images to be used to provide source for the build",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.ImageSource"
- }
+ "namespace": {
+ "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces",
+ "type": "string",
+ "default": ""
},
- "secrets": {
- "description": "secrets represents a list of secrets and their destinations that will be used only for the build.",
+ "path": {
+ "description": "Path is the path of a non resource URL",
+ "type": "string",
+ "default": ""
+ },
+ "resource": {
+ "description": "Resource is one of the existing resource types",
+ "type": "string",
+ "default": ""
+ },
+ "resourceAPIGroup": {
+ "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined",
+ "type": "string",
+ "default": ""
+ },
+ "resourceAPIVersion": {
+ "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined",
+ "type": "string",
+ "default": ""
+ },
+ "resourceName": {
+ "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"",
+ "type": "string",
+ "default": ""
+ },
+ "scopes": {
+ "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil for a self-SAR, means \"use the scopes on this request\". Nil for a regular SAR, means the same as empty.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.SecretBuildSource"
+ "type": "string",
+ "default": ""
}
},
- "sourceSecret": {
- "description": "sourceSecret is the name of a Secret that would be used for setting up the authentication for cloning private repository. The secret contains valid credentials for remote repository, where the data's key represent the authentication method to be used and value is the base64 encoded credentials. Supported auth methods are: ssh-privatekey.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "user": {
+ "description": "User is optional. If both User and Groups are empty, the current authenticated user is used.",
+ "type": "string",
+ "default": ""
},
- "type": {
- "description": "type of build input to accept",
- "type": "string"
+ "verb": {
+ "description": "Verb is one of: get, list, watch, create, update, delete",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "object",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildSource",
+ "Kind": "LocalSubjectAccessReview",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildSpec": {
- "description": "BuildSpec has the information to represent a build and also additional information about a build",
+ "io.openshift.authorization.v1.NamedClusterRole": {
+ "description": "NamedClusterRole relates a name with a cluster role",
"type": "object",
"required": [
- "strategy"
+ "name",
+ "role"
],
"properties": {
- "completionDeadlineSeconds": {
- "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer",
- "type": "integer",
- "format": "int64"
- },
- "mountTrustedCA": {
- "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.",
- "type": "boolean"
- },
- "nodeSelector": {
- "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "output": {
- "description": "output describes the container image the Strategy should produce.",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildOutput"
- },
- "postCommit": {
- "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildPostCommitSpec"
- },
- "resources": {
- "description": "resources computes resource requirements to execute the build.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
- },
- "revision": {
- "description": "revision is the information from the source for a specific repo snapshot. This is optional.",
- "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
- },
- "serviceAccount": {
- "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount",
- "type": "string"
- },
- "source": {
- "description": "source describes the SCM in use.",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildSource"
+ "name": {
+ "description": "Name is the name of the cluster role",
+ "type": "string",
+ "default": ""
},
- "strategy": {
- "description": "strategy defines how to perform a build.",
+ "role": {
+ "description": "Role is the cluster role being named",
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildStrategy"
- },
- "triggeredBy": {
- "description": "triggeredBy describes which triggers started the most recent update to the build configuration and contains information about those triggers.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildTriggerCause"
- }
+ "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRole"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildSpec",
+ "Kind": "NamedClusterRole",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildStatus": {
- "description": "BuildStatus contains the status of a build",
+ "io.openshift.authorization.v1.NamedClusterRoleBinding": {
+ "description": "NamedClusterRoleBinding relates a name with a cluster role binding",
"type": "object",
"required": [
- "phase"
+ "name",
+ "roleBinding"
],
"properties": {
- "cancelled": {
- "description": "cancelled describes if a cancel event was triggered for the build.",
- "type": "boolean"
- },
- "completionTimestamp": {
- "description": "completionTimestamp is a timestamp representing the server time when this Build was finished, whether that build failed or succeeded. It reflects the time at which the Pod running the Build terminated. It is represented in RFC3339 form and is in UTC.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "conditions": {
- "description": "Conditions represents the latest available observations of a build's current state.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildCondition"
- },
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "config": {
- "description": "config is an ObjectReference to the BuildConfig this Build is based on.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "duration": {
- "description": "duration contains time.Duration object describing build time.",
- "type": "integer",
- "format": "int64"
- },
- "logSnippet": {
- "description": "logSnippet is the last few lines of the build log. This value is only set for builds that failed.",
- "type": "string"
- },
- "message": {
- "description": "message is a human-readable message indicating details about why the build has this status.",
- "type": "string"
- },
- "output": {
- "description": "output describes the container image the build has produced.",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildStatusOutput"
- },
- "outputDockerImageReference": {
- "description": "outputDockerImageReference contains a reference to the container image that will be built by this build. Its value is computed from Build.Spec.Output.To, and should include the registry address, so that it can be used to push and pull the image.",
- "type": "string"
- },
- "phase": {
- "description": "phase is the point in the build lifecycle. Possible values are \"New\", \"Pending\", \"Running\", \"Complete\", \"Failed\", \"Error\", and \"Cancelled\".",
+ "name": {
+ "description": "Name is the name of the cluster role binding",
"type": "string",
"default": ""
},
- "reason": {
- "description": "reason is a brief CamelCase string that describes any failure and is meant for machine parsing and tidy display in the CLI.",
- "type": "string"
- },
- "stages": {
- "description": "stages contains details about each stage that occurs during the build including start time, duration (in milliseconds), and the steps that occured within each stage.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.StageInfo"
- }
- },
- "startTimestamp": {
- "description": "startTimestamp is a timestamp representing the server time when this Build started running in a Pod. It is represented in RFC3339 form and is in UTC.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "roleBinding": {
+ "description": "RoleBinding is the cluster role binding being named",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRoleBinding"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildStatus",
+ "Kind": "NamedClusterRoleBinding",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildStatusOutput": {
- "description": "BuildStatusOutput contains the status of the built image.",
+ "io.openshift.authorization.v1.NamedRole": {
+ "description": "NamedRole relates a Role with a name",
"type": "object",
+ "required": [
+ "name",
+ "role"
+ ],
"properties": {
- "to": {
- "description": "to describes the status of the built image being pushed to a registry.",
- "$ref": "#/definitions/io.openshift.build.v1.BuildStatusOutputTo"
+ "name": {
+ "description": "Name is the name of the role",
+ "type": "string",
+ "default": ""
+ },
+ "role": {
+ "description": "Role is the role being named",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.authorization.v1.Role"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildStatusOutput",
+ "Kind": "NamedRole",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildStatusOutputTo": {
- "description": "BuildStatusOutputTo describes the status of the built image with regards to image registry to which it was supposed to be pushed.",
- "type": "object",
- "properties": {
- "imageDigest": {
- "description": "imageDigest is the digest of the built container image. The digest uniquely identifies the image in the registry to which it was pushed.\n\nPlease note that this field may not always be set even if the push completes successfully - e.g. when the registry returns no digest or returns it in a format that the builder doesn't understand.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
- "Version": "v1",
- "Kind": "BuildStatusOutputTo",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.build.v1.BuildStrategy": {
- "description": "BuildStrategy contains the details of how to perform a build.",
+ "io.openshift.authorization.v1.NamedRoleBinding": {
+ "description": "NamedRoleBinding relates a role binding with a name",
"type": "object",
+ "required": [
+ "name",
+ "roleBinding"
+ ],
"properties": {
- "customStrategy": {
- "description": "customStrategy holds the parameters to the Custom build strategy",
- "$ref": "#/definitions/io.openshift.build.v1.CustomBuildStrategy"
- },
- "dockerStrategy": {
- "description": "dockerStrategy holds the parameters to the container image build strategy.",
- "$ref": "#/definitions/io.openshift.build.v1.DockerBuildStrategy"
- },
- "jenkinsPipelineStrategy": {
- "description": "JenkinsPipelineStrategy holds the parameters to the Jenkins Pipeline build strategy. Deprecated: use OpenShift Pipelines",
- "$ref": "#/definitions/io.openshift.build.v1.JenkinsPipelineBuildStrategy"
- },
- "sourceStrategy": {
- "description": "sourceStrategy holds the parameters to the Source build strategy.",
- "$ref": "#/definitions/io.openshift.build.v1.SourceBuildStrategy"
+ "name": {
+ "description": "Name is the name of the role binding",
+ "type": "string",
+ "default": ""
},
- "type": {
- "description": "type is the kind of build strategy.",
- "type": "string"
+ "roleBinding": {
+ "description": "RoleBinding is the role binding being named",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.authorization.v1.RoleBinding"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildStrategy",
+ "Kind": "NamedRoleBinding",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildTriggerCause": {
- "description": "BuildTriggerCause holds information about a triggered build. It is used for displaying build trigger data for each build and build configuration in oc describe. It is also used to describe which triggers led to the most recent update in the build configuration.",
+ "io.openshift.authorization.v1.PolicyRule": {
+ "description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.",
"type": "object",
+ "required": [
+ "verbs",
+ "resources"
+ ],
"properties": {
- "bitbucketWebHook": {
- "description": "BitbucketWebHook represents data for a Bitbucket webhook that fired a specific build.",
- "$ref": "#/definitions/io.openshift.build.v1.BitbucketWebHookCause"
+ "apiGroups": {
+ "description": "APIGroups is the name of the APIGroup that contains the resources. If this field is empty, then both kubernetes and origin API groups are assumed. That means that if an action is requested against one of the enumerated resources in either the kubernetes or the origin API group, the request will be allowed",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "genericWebHook": {
- "description": "genericWebHook holds data about a builds generic webhook trigger.",
- "$ref": "#/definitions/io.openshift.build.v1.GenericWebHookCause"
+ "attributeRestrictions": {
+ "description": "AttributeRestrictions will vary depending on what the Authorizer/AuthorizationAttributeBuilder pair supports. If the Authorizer does not recognize how to handle the AttributeRestrictions, the Authorizer should report an error.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
},
- "githubWebHook": {
- "description": "gitHubWebHook represents data for a GitHub webhook that fired a specific build.",
- "$ref": "#/definitions/io.openshift.build.v1.GitHubWebHookCause"
+ "nonResourceURLs": {
+ "description": "NonResourceURLsSlice is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path This name is intentionally different than the internal type so that the DefaultConvert works nicely and because the ordering may be different.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "gitlabWebHook": {
- "description": "GitLabWebHook represents data for a GitLab webhook that fired a specific build.",
- "$ref": "#/definitions/io.openshift.build.v1.GitLabWebHookCause"
+ "resourceNames": {
+ "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "imageChangeBuild": {
- "description": "imageChangeBuild stores information about an imagechange event that triggered a new build.",
- "$ref": "#/definitions/io.openshift.build.v1.ImageChangeCause"
+ "resources": {
+ "description": "Resources is a list of resources this rule applies to. ResourceAll represents all resources.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "message": {
- "description": "message is used to store a human readable message for why the build was triggered. E.g.: \"Manually triggered by user\", \"Configuration change\",etc.",
- "type": "string"
+ "verbs": {
+ "description": "Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildTriggerCause",
+ "Kind": "PolicyRule",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildTriggerPolicy": {
- "description": "BuildTriggerPolicy describes a policy for a single trigger that results in a new Build.",
+ "io.openshift.authorization.v1.ResourceAccessReview": {
+ "description": "ResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "type"
+ "namespace",
+ "verb",
+ "resourceAPIGroup",
+ "resourceAPIVersion",
+ "resource",
+ "resourceName",
+ "path",
+ "isNonResourceURL"
],
"properties": {
- "bitbucket": {
- "description": "BitbucketWebHook contains the parameters for a Bitbucket webhook type of trigger",
- "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "generic": {
- "description": "generic contains the parameters for a Generic webhook type of trigger",
- "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger"
+ "content": {
+ "description": "Content is the actual content of the request for create and update",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
},
- "github": {
- "description": "github contains the parameters for a GitHub webhook type of trigger",
- "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger"
+ "isNonResourceURL": {
+ "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)",
+ "type": "boolean",
+ "default": false
},
- "gitlab": {
- "description": "GitLabWebHook contains the parameters for a GitLab webhook type of trigger",
- "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "imageChange": {
- "description": "imageChange contains parameters for an ImageChange type of trigger",
- "$ref": "#/definitions/io.openshift.build.v1.ImageChangeTrigger"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "type": {
- "description": "type is the type of build trigger. Valid values:\n\n- GitHub GitHubWebHookBuildTriggerType represents a trigger that launches builds on GitHub webhook invocations\n\n- Generic GenericWebHookBuildTriggerType represents a trigger that launches builds on generic webhook invocations\n\n- GitLab GitLabWebHookBuildTriggerType represents a trigger that launches builds on GitLab webhook invocations\n\n- Bitbucket BitbucketWebHookBuildTriggerType represents a trigger that launches builds on Bitbucket webhook invocations\n\n- ImageChange ImageChangeBuildTriggerType represents a trigger that launches builds on availability of a new version of an image\n\n- ConfigChange ConfigChangeBuildTriggerType will trigger a build on an initial build config creation WARNING: In the future the behavior will change to trigger a build on any config change",
+ "namespace": {
+ "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces",
"type": "string",
"default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
- "Version": "v1",
- "Kind": "BuildTriggerPolicy",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.build.v1.BuildVolume": {
- "description": "BuildVolume describes a volume that is made available to build pods, such that it can be mounted into buildah's runtime environment. Only a subset of Kubernetes Volume sources are supported.",
- "type": "object",
- "required": [
- "name",
- "source",
- "mounts"
- ],
- "properties": {
- "mounts": {
- "description": "mounts represents the location of the volume in the image build container",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildVolumeMount"
- },
- "x-kubernetes-list-map-keys": [
- "destinationPath"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "destinationPath",
- "x-kubernetes-patch-strategy": "merge"
},
- "name": {
- "description": "name is a unique identifier for this BuildVolume. It must conform to the Kubernetes DNS label standard and be unique within the pod. Names that collide with those added by the build controller will result in a failed build with an error message detailing which name caused the error. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names",
+ "path": {
+ "description": "Path is the path of a non resource URL",
"type": "string",
"default": ""
},
- "source": {
- "description": "source represents the location and type of the mounted volume.",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildVolumeSource"
+ "resource": {
+ "description": "Resource is one of the existing resource types",
+ "type": "string",
+ "default": ""
+ },
+ "resourceAPIGroup": {
+ "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined",
+ "type": "string",
+ "default": ""
+ },
+ "resourceAPIVersion": {
+ "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined",
+ "type": "string",
+ "default": ""
+ },
+ "resourceName": {
+ "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"",
+ "type": "string",
+ "default": ""
+ },
+ "verb": {
+ "description": "Verb is one of: get, list, watch, create, update, delete",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "object",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildVolume",
- "Scope": "Namespaced"
+ "Kind": "ResourceAccessReview",
+ "Scope": "Clustered"
}
},
- "io.openshift.build.v1.BuildVolumeMount": {
- "description": "BuildVolumeMount describes the mounting of a Volume within buildah's runtime environment.",
+ "io.openshift.authorization.v1.ResourceAccessReviewResponse": {
+ "description": "ResourceAccessReviewResponse describes who can perform the action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "destinationPath"
+ "users",
+ "groups",
+ "evalutionError"
],
"properties": {
- "destinationPath": {
- "description": "destinationPath is the path within the buildah runtime environment at which the volume should be mounted. The transient mount within the build image and the backing volume will both be mounted read only. Must be an absolute path, must not contain '..' or ':', and must not collide with a destination path generated by the builder process Paths that collide with those added by the build controller will result in a failed build with an error message detailing which path caused the error.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "evalutionError": {
+ "description": "EvaluationError is an indication that some error occurred during resolution, but partial results can still be returned. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is most common when a bound role is missing, but enough roles are still present and bound to reason about the request.",
"type": "string",
"default": ""
+ },
+ "groups": {
+ "description": "GroupsSlice is the list of groups who can perform the action",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "namespace": {
+ "description": "Namespace is the namespace used for the access review",
+ "type": "string"
+ },
+ "users": {
+ "description": "UsersSlice is the list of users who can perform the action",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "object",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildVolumeMount",
+ "Kind": "ResourceAccessReviewResponse",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.BuildVolumeSource": {
- "description": "BuildVolumeSource represents the source of a volume to mount Only one of its supported types may be specified at any given time.",
+ "io.openshift.authorization.v1.Role": {
+ "description": "Role is a logical grouping of PolicyRules that can be referenced as a unit by RoleBindings.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "type"
+ "rules"
],
"properties": {
- "configMap": {
- "description": "configMap represents a ConfigMap that should populate this volume",
- "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapVolumeSource"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "csi": {
- "description": "csi represents ephemeral storage provided by external CSI drivers which support this capability",
- "$ref": "#/definitions/io.k8s.api.core.v1.CSIVolumeSource"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "secret": {
- "description": "secret represents a Secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret",
- "$ref": "#/definitions/io.k8s.api.core.v1.SecretVolumeSource"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "type": {
- "description": "type is the BuildVolumeSourceType for the volume source. Type must match the populated volume source. Valid types are: Secret, ConfigMap",
- "type": "string",
- "default": ""
+ "rules": {
+ "description": "Rules holds all the PolicyRules for this Role",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.authorization.v1.PolicyRule"
+ }
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "object",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "BuildVolumeSource",
+ "Kind": "Role",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.CommonSpec": {
- "description": "CommonSpec encapsulates all the inputs necessary to represent a build.",
+ "io.openshift.authorization.v1.RoleBinding": {
+ "description": "RoleBinding references a Role, but not contain it. It can reference any Role in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "strategy"
+ "subjects",
+ "roleRef"
],
"properties": {
- "completionDeadlineSeconds": {
- "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer",
- "type": "integer",
- "format": "int64"
- },
- "mountTrustedCA": {
- "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.",
- "type": "boolean"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "nodeSelector": {
- "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.",
- "type": "object",
- "additionalProperties": {
+ "groupNames": {
+ "description": "GroupNames holds all the groups directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.",
+ "type": "array",
+ "items": {
"type": "string",
"default": ""
}
},
- "output": {
- "description": "output describes the container image the Strategy should produce.",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildOutput"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "postCommit": {
- "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.",
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildPostCommitSpec"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "resources": {
- "description": "resources computes resource requirements to execute the build.",
+ "roleRef": {
+ "description": "RoleRef can only reference the current namespace and the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. Since Policy is a singleton, this is sufficient knowledge to locate a role.",
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
- },
- "revision": {
- "description": "revision is the information from the source for a specific repo snapshot. This is optional.",
- "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
- },
- "serviceAccount": {
- "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount",
- "type": "string"
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
},
- "source": {
- "description": "source describes the SCM in use.",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildSource"
+ "subjects": {
+ "description": "Subjects hold object references to authorize with this rule. This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers. Thus newer clients that do not need to support backwards compatibility should send only fully qualified Subjects and should omit the UserNames and GroupNames fields. Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ }
},
- "strategy": {
- "description": "strategy defines how to perform a build.",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildStrategy"
+ "userNames": {
+ "description": "UserNames holds all the usernames directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "object",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "CommonSpec",
+ "Kind": "RoleBinding",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.CommonWebHookCause": {
- "description": "CommonWebHookCause factors out the identical format of these webhook causes into struct so we can share it in the specific causes; it is too late for GitHub and Generic but we can leverage this pattern with GitLab and Bitbucket.",
+ "io.openshift.authorization.v1.RoleBindingList": {
+ "description": "RoleBindingList is a collection of RoleBindings\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "revision": {
- "description": "Revision is the git source revision information of the trigger.",
- "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "secret": {
- "description": "Secret is the obfuscated webhook secret that triggered a build.",
+ "items": {
+ "description": "Items is a list of RoleBindings",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.authorization.v1.RoleBinding"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "list",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "CommonWebHookCause",
+ "Kind": "RoleBindingList",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.ConfigMapBuildSource": {
- "description": "ConfigMapBuildSource describes a configmap and its destination directory that will be used only at the build time. The content of the configmap referenced here will be copied into the destination directory instead of mounting.",
+ "io.openshift.authorization.v1.RoleBindingRestriction": {
+ "description": "RoleBindingRestriction is an object that can be matched against a subject (user, group, or service account) to determine whether rolebindings on that subject are allowed in the namespace to which the RoleBindingRestriction belongs. If any one of those RoleBindingRestriction objects matches a subject, rolebindings on that subject in the namespace are allowed.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "configMap"
+ "metadata",
+ "spec"
],
"properties": {
- "configMap": {
- "description": "configMap is a reference to an existing configmap that you want to use in your build.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "destinationDir": {
- "description": "destinationDir is the directory where the files from the configmap should be available for the build time. For the Source build strategy, these will be injected into a container where the assemble script runs. For the container image build strategy, these will be copied into the build directory, where the Dockerfile is located, so users can ADD or COPY them during container image build.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "Spec defines the matcher.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.authorization.v1.RoleBindingRestrictionSpec"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "object",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "ConfigMapBuildSource",
+ "Kind": "RoleBindingRestriction",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.CustomBuildStrategy": {
- "description": "CustomBuildStrategy defines input parameters specific to Custom build.",
+ "io.openshift.authorization.v1.RoleBindingRestrictionList": {
+ "description": "RoleBindingRestrictionList is a collection of RoleBindingRestriction objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "from"
+ "items"
],
"properties": {
- "buildAPIVersion": {
- "description": "buildAPIVersion is the requested API version for the Build object serialized and passed to the custom builder",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "env": {
- "description": "env contains additional environment variables you want to pass into a builder container.",
+ "items": {
+ "description": "Items is a list of RoleBindingRestriction objects.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
+ "$ref": "#/definitions/io.openshift.authorization.v1.RoleBindingRestriction"
}
},
- "exposeDockerSocket": {
- "description": "exposeDockerSocket will allow running Docker commands (and build container images) from inside the container.",
- "type": "boolean"
- },
- "forcePull": {
- "description": "forcePull describes if the controller should configure the build pod to always pull the images for the builder or only pull if it is not present locally",
- "type": "boolean"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "from": {
- "description": "from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which the container image should be pulled",
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "pullSecret": {
- "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "secrets": {
- "description": "secrets is a list of additional secrets that will be included in the build pod",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.SecretSpec"
- }
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "list",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "CustomBuildStrategy",
+ "Kind": "RoleBindingRestrictionList",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.DockerBuildStrategy": {
- "description": "DockerBuildStrategy defines input parameters specific to container image build.",
+ "io.openshift.authorization.v1.RoleBindingRestrictionSpec": {
+ "description": "RoleBindingRestrictionSpec defines a rolebinding restriction. Exactly one field must be non-nil.",
"type": "object",
+ "required": [
+ "userrestriction",
+ "grouprestriction",
+ "serviceaccountrestriction"
+ ],
"properties": {
- "buildArgs": {
- "description": "buildArgs contains build arguments that will be resolved in the Dockerfile. See https://docs.docker.com/engine/reference/builder/#/arg for more details. NOTE: Only the 'name' and 'value' fields are supported. Any settings on the 'valueFrom' field are ignored.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
- }
- },
- "dockerfilePath": {
- "description": "dockerfilePath is the path of the Dockerfile that will be used to build the container image, relative to the root of the context (contextDir). Defaults to `Dockerfile` if unset.",
- "type": "string"
- },
- "env": {
- "description": "env contains additional environment variables you want to pass into a builder container.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
- }
- },
- "forcePull": {
- "description": "forcePull describes if the builder should pull the images from registry prior to building.",
- "type": "boolean"
- },
- "from": {
- "description": "from is a reference to an DockerImage, ImageStreamTag, or ImageStreamImage which overrides the FROM image in the Dockerfile for the build. If the Dockerfile uses multi-stage builds, this will replace the image in the last FROM directive of the file.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "imageOptimizationPolicy": {
- "description": "imageOptimizationPolicy describes what optimizations the system can use when building images to reduce the final size or time spent building the image. The default policy is 'None' which means the final build image will be equivalent to an image created by the container image build API. The experimental policy 'SkipLayers' will avoid commiting new layers in between each image step, and will fail if the Dockerfile cannot provide compatibility with the 'None' policy. An additional experimental policy 'SkipLayersAndWarn' is the same as 'SkipLayers' but simply warns if compatibility cannot be preserved.",
- "type": "string"
- },
- "noCache": {
- "description": "noCache if set to true indicates that the container image build must be executed with the --no-cache=true flag",
- "type": "boolean"
+ "grouprestriction": {
+ "description": "GroupRestriction matches against group subjects.",
+ "$ref": "#/definitions/io.openshift.authorization.v1.GroupRestriction"
},
- "pullSecret": {
- "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "serviceaccountrestriction": {
+ "description": "ServiceAccountRestriction matches against service-account subjects.",
+ "$ref": "#/definitions/io.openshift.authorization.v1.ServiceAccountRestriction"
},
- "volumes": {
- "description": "volumes is a list of input volumes that can be mounted into the builds runtime environment. Only a subset of Kubernetes Volume sources are supported by builds. More info: https://kubernetes.io/docs/concepts/storage/volumes",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildVolume"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "name",
- "x-kubernetes-patch-strategy": "merge"
+ "userrestriction": {
+ "description": "UserRestriction matches against user subjects.",
+ "$ref": "#/definitions/io.openshift.authorization.v1.UserRestriction"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "DockerBuildStrategy",
+ "Kind": "RoleBindingRestrictionSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.DockerStrategyOptions": {
- "description": "DockerStrategyOptions contains extra strategy options for container image builds",
+ "io.openshift.authorization.v1.RoleList": {
+ "description": "RoleList is a collection of Roles\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "buildArgs": {
- "description": "Args contains any build arguments that are to be passed to Docker. See https://docs.docker.com/engine/reference/builder/#/arg for more details",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items is a list of Roles",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
+ "$ref": "#/definitions/io.openshift.authorization.v1.Role"
}
},
- "noCache": {
- "description": "noCache overrides the docker-strategy noCache option in the build config",
- "type": "boolean"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "list",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "DockerStrategyOptions",
+ "Kind": "RoleList",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.GenericWebHookCause": {
- "description": "GenericWebHookCause holds information about a generic WebHook that triggered a build.",
+ "io.openshift.authorization.v1.SelfSubjectRulesReview": {
+ "description": "SelfSubjectRulesReview is a resource you can create to determine which actions you can perform in a namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
- "revision": {
- "description": "revision is an optional field that stores the git source revision information of the generic webhook trigger when it is available.",
- "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "secret": {
- "description": "secret is the obfuscated webhook secret that triggered a build.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "Spec adds information about how to conduct the check",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.authorization.v1.SelfSubjectRulesReviewSpec"
+ },
+ "status": {
+ "description": "Status is completed by the server to tell which permissions you have",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.authorization.v1.SubjectRulesReviewStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "object",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "GenericWebHookCause",
+ "Kind": "SelfSubjectRulesReview",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.GenericWebHookEvent": {
- "description": "GenericWebHookEvent is the payload expected for a generic webhook post",
+ "io.openshift.authorization.v1.SelfSubjectRulesReviewSpec": {
+ "description": "SelfSubjectRulesReviewSpec adds information about how to conduct the check",
"type": "object",
+ "required": [
+ "scopes"
+ ],
"properties": {
- "dockerStrategyOptions": {
- "description": "DockerStrategyOptions contains additional docker-strategy specific options for the build",
- "$ref": "#/definitions/io.openshift.build.v1.DockerStrategyOptions"
- },
- "env": {
- "description": "env contains additional environment variables you want to pass into a builder container. ValueFrom is not supported.",
+ "scopes": {
+ "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil means \"use the scopes on this request\".",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
+ "type": "string",
+ "default": ""
}
- },
- "git": {
- "description": "git is the git information if the Type is BuildSourceGit",
- "$ref": "#/definitions/io.openshift.build.v1.GitInfo"
- },
- "type": {
- "description": "type is the type of source repository",
- "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "GenericWebHookEvent",
+ "Kind": "SelfSubjectRulesReviewSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.GitBuildSource": {
- "description": "GitBuildSource defines the parameters of a Git SCM",
+ "io.openshift.authorization.v1.ServiceAccountReference": {
+ "description": "ServiceAccountReference specifies a service account and namespace by their names.",
"type": "object",
"required": [
- "uri"
+ "name",
+ "namespace"
],
"properties": {
- "httpProxy": {
- "description": "httpProxy is a proxy used to reach the git repository over http",
- "type": "string"
- },
- "httpsProxy": {
- "description": "httpsProxy is a proxy used to reach the git repository over https",
- "type": "string"
- },
- "noProxy": {
- "description": "noProxy is the list of domains for which the proxy should not be used",
- "type": "string"
- },
- "ref": {
- "description": "ref is the branch/tag/ref to build.",
- "type": "string"
+ "name": {
+ "description": "Name is the name of the service account.",
+ "type": "string",
+ "default": ""
},
- "uri": {
- "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run",
+ "namespace": {
+ "description": "Namespace is the namespace of the service account. Service accounts from inside the whitelisted namespaces are allowed to be bound to roles. If Namespace is empty, then the namespace of the RoleBindingRestriction in which the ServiceAccountReference is embedded is used.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "GitBuildSource",
+ "Kind": "ServiceAccountReference",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.GitHubWebHookCause": {
- "description": "GitHubWebHookCause has information about a GitHub webhook that triggered a build.",
+ "io.openshift.authorization.v1.ServiceAccountRestriction": {
+ "description": "ServiceAccountRestriction matches a service account by a string match on either the service-account name or the name of the service account's namespace.",
"type": "object",
+ "required": [
+ "serviceaccounts",
+ "namespaces"
+ ],
"properties": {
- "revision": {
- "description": "revision is the git revision information of the trigger.",
- "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
+ "namespaces": {
+ "description": "Namespaces specifies a list of literal namespace names.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "secret": {
- "description": "secret is the obfuscated webhook secret that triggered a build.",
- "type": "string"
+ "serviceaccounts": {
+ "description": "ServiceAccounts specifies a list of literal service-account names.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.authorization.v1.ServiceAccountReference"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "GitHubWebHookCause",
+ "Kind": "ServiceAccountRestriction",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.GitInfo": {
- "description": "GitInfo is the aggregated git information for a generic webhook post",
+ "io.openshift.authorization.v1.SubjectAccessReview": {
+ "description": "SubjectAccessReview is an object for requesting information about whether a user or group can perform an action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "uri",
- "refs"
+ "namespace",
+ "verb",
+ "resourceAPIGroup",
+ "resourceAPIVersion",
+ "resource",
+ "resourceName",
+ "path",
+ "isNonResourceURL",
+ "user",
+ "groups",
+ "scopes"
],
"properties": {
- "author": {
- "description": "author is the author of a specific commit",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "commit": {
- "description": "commit is the commit hash identifying a specific commit",
+ "content": {
+ "description": "Content is the actual content of the request for create and update",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "groups": {
+ "description": "GroupsSlice is optional. Groups is the list of groups to which the User belongs.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "isNonResourceURL": {
+ "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)",
+ "type": "boolean",
+ "default": false
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "committer": {
- "description": "committer is the committer of a specific commit",
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "httpProxy": {
- "description": "httpProxy is a proxy used to reach the git repository over http",
- "type": "string"
+ "namespace": {
+ "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces",
+ "type": "string",
+ "default": ""
},
- "httpsProxy": {
- "description": "httpsProxy is a proxy used to reach the git repository over https",
- "type": "string"
+ "path": {
+ "description": "Path is the path of a non resource URL",
+ "type": "string",
+ "default": ""
},
- "message": {
- "description": "message is the description of a specific commit",
- "type": "string"
+ "resource": {
+ "description": "Resource is one of the existing resource types",
+ "type": "string",
+ "default": ""
},
- "noProxy": {
- "description": "noProxy is the list of domains for which the proxy should not be used",
- "type": "string"
+ "resourceAPIGroup": {
+ "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined",
+ "type": "string",
+ "default": ""
},
- "ref": {
- "description": "ref is the branch/tag/ref to build.",
- "type": "string"
+ "resourceAPIVersion": {
+ "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined",
+ "type": "string",
+ "default": ""
},
- "refs": {
- "description": "Refs is a list of GitRefs for the provided repo - generally sent when used from a post-receive hook. This field is optional and is used when sending multiple refs",
+ "resourceName": {
+ "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"",
+ "type": "string",
+ "default": ""
+ },
+ "scopes": {
+ "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil for a self-SAR, means \"use the scopes on this request\". Nil for a regular SAR, means the same as empty.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.GitRefInfo"
+ "type": "string",
+ "default": ""
}
},
- "uri": {
- "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run",
+ "user": {
+ "description": "User is optional. If both User and Groups are empty, the current authenticated user is used.",
"type": "string",
"default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
- "Version": "v1",
- "Kind": "GitInfo",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.build.v1.GitLabWebHookCause": {
- "description": "GitLabWebHookCause has information about a GitLab webhook that triggered a build.",
- "type": "object",
- "properties": {
- "revision": {
- "description": "Revision is the git source revision information of the trigger.",
- "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
},
- "secret": {
- "description": "Secret is the obfuscated webhook secret that triggered a build.",
- "type": "string"
+ "verb": {
+ "description": "Verb is one of: get, list, watch, create, update, delete",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "object",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "GitLabWebHookCause",
- "Scope": "Namespaced"
+ "Kind": "SubjectAccessReview",
+ "Scope": "Clustered"
}
},
- "io.openshift.build.v1.GitRefInfo": {
- "description": "GitRefInfo is a single ref",
+ "io.openshift.authorization.v1.SubjectAccessReviewResponse": {
+ "description": "SubjectAccessReviewResponse describes whether or not a user or group can perform an action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "uri"
+ "allowed"
],
"properties": {
- "author": {
- "description": "author is the author of a specific commit",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser"
- },
- "commit": {
- "description": "commit is the commit hash identifying a specific commit",
- "type": "string"
- },
- "committer": {
- "description": "committer is the committer of a specific commit",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser"
+ "allowed": {
+ "description": "Allowed is required. True if the action would be allowed, false otherwise.",
+ "type": "boolean",
+ "default": false
},
- "httpProxy": {
- "description": "httpProxy is a proxy used to reach the git repository over http",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "httpsProxy": {
- "description": "httpsProxy is a proxy used to reach the git repository over https",
+ "evaluationError": {
+ "description": "EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is most common when a bound role is missing, but enough roles are still present and bound to reason about the request.",
"type": "string"
},
- "message": {
- "description": "message is the description of a specific commit",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "noProxy": {
- "description": "noProxy is the list of domains for which the proxy should not be used",
+ "namespace": {
+ "description": "Namespace is the namespace used for the access review",
"type": "string"
},
- "ref": {
- "description": "ref is the branch/tag/ref to build.",
+ "reason": {
+ "description": "Reason is optional. It indicates why a request was allowed or denied.",
"type": "string"
- },
- "uri": {
- "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run",
- "type": "string",
- "default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "object",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "GitRefInfo",
+ "Kind": "SubjectAccessReviewResponse",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.GitSourceRevision": {
- "description": "GitSourceRevision is the commit information from a git source for a build",
+ "io.openshift.authorization.v1.SubjectRulesReview": {
+ "description": "SubjectRulesReview is a resource you can create to determine which actions another user can perform in a namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
- "author": {
- "description": "author is the author of a specific commit",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "commit": {
- "description": "commit is the commit hash identifying a specific commit",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "committer": {
- "description": "committer is the committer of a specific commit",
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "message": {
- "description": "message is the description of a specific commit",
- "type": "string"
+ "spec": {
+ "description": "Spec adds information about how to conduct the check",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.authorization.v1.SubjectRulesReviewSpec"
+ },
+ "status": {
+ "description": "Status is completed by the server to tell which permissions you have",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.authorization.v1.SubjectRulesReviewStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
+ "Type": "object",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "GitSourceRevision",
+ "Kind": "SubjectRulesReview",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.ImageChangeCause": {
- "description": "ImageChangeCause contains information about the image that triggered a build",
+ "io.openshift.authorization.v1.SubjectRulesReviewSpec": {
+ "description": "SubjectRulesReviewSpec adds information about how to conduct the check",
"type": "object",
+ "required": [
+ "user",
+ "groups",
+ "scopes"
+ ],
"properties": {
- "fromRef": {
- "description": "fromRef contains detailed information about an image that triggered a build.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "groups": {
+ "description": "Groups is optional. Groups is the list of groups to which the User belongs. At least one of User and Groups must be specified.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "imageID": {
- "description": "imageID is the ID of the image that triggered a new build.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
- "Version": "v1",
- "Kind": "ImageChangeCause",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.build.v1.ImageChangeTrigger": {
- "description": "ImageChangeTrigger allows builds to be triggered when an ImageStream changes",
- "type": "object",
- "properties": {
- "from": {
- "description": "from is a reference to an ImageStreamTag that will trigger a build when updated It is optional. If no From is specified, the From image from the build strategy will be used. Only one ImageChangeTrigger with an empty From reference is allowed in a build configuration.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "lastTriggeredImageID": {
- "description": "lastTriggeredImageID is used internally by the ImageChangeController to save last used image ID for build This field is deprecated and will be removed in a future release. Deprecated",
- "type": "string"
- },
- "paused": {
- "description": "paused is true if this trigger is temporarily disabled. Optional.",
- "type": "boolean"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
- "Version": "v1",
- "Kind": "ImageChangeTrigger",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.build.v1.ImageChangeTriggerStatus": {
- "description": "ImageChangeTriggerStatus tracks the latest resolved status of the associated ImageChangeTrigger policy specified in the BuildConfigSpec.Triggers struct.",
- "type": "object",
- "properties": {
- "from": {
- "description": "from is the ImageStreamTag that is the source of the trigger.",
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.ImageStreamTagReference"
- },
- "lastTriggerTime": {
- "description": "lastTriggerTime is the last time this particular ImageStreamTag triggered a Build to start. This field is only updated when this trigger specifically started a Build.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "scopes": {
+ "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\".",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "lastTriggeredImageID": {
- "description": "lastTriggeredImageID represents the sha/id of the ImageStreamTag when a Build for this BuildConfig was started. The lastTriggeredImageID is updated each time a Build for this BuildConfig is started, even if this ImageStreamTag is not the reason the Build is started.",
- "type": "string"
+ "user": {
+ "description": "User is optional. At least one of User and Groups must be specified.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "ImageChangeTriggerStatus",
+ "Kind": "SubjectRulesReviewSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.ImageLabel": {
- "description": "ImageLabel represents a label applied to the resulting image.",
+ "io.openshift.authorization.v1.SubjectRulesReviewStatus": {
+ "description": "SubjectRulesReviewStatus is contains the result of a rules check",
"type": "object",
"required": [
- "name"
+ "rules"
],
"properties": {
- "name": {
- "description": "name defines the name of the label. It must have non-zero length.",
- "type": "string",
- "default": ""
- },
- "value": {
- "description": "value defines the literal value of the label.",
+ "evaluationError": {
+ "description": "EvaluationError can appear in combination with Rules. It means some error happened during evaluation that may have prevented additional rules from being populated.",
"type": "string"
+ },
+ "rules": {
+ "description": "Rules is the list of rules (no particular sort) that are allowed for the subject",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.authorization.v1.PolicyRule"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "ImageLabel",
+ "Kind": "SubjectRulesReviewStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.ImageSource": {
- "description": "ImageSource is used to describe build source that will be extracted from an image or used during a multi stage build. A reference of type ImageStreamTag, ImageStreamImage or DockerImage may be used. A pull secret can be specified to pull the image from an external registry or override the default service account secret if pulling from the internal registry. Image sources can either be used to extract content from an image and place it into the build context along with the repository source, or used directly during a multi-stage container image build to allow content to be copied without overwriting the contents of the repository source (see the 'paths' and 'as' fields).",
+ "io.openshift.authorization.v1.UserRestriction": {
+ "description": "UserRestriction matches a user either by a string match on the user name, a string match on the name of a group to which the user belongs, or a label selector applied to the user labels.",
"type": "object",
"required": [
- "from"
+ "users",
+ "groups",
+ "labels"
],
"properties": {
- "as": {
- "description": "A list of image names that this source will be used in place of during a multi-stage container image build. For instance, a Dockerfile that uses \"COPY --from=nginx:latest\" will first check for an image source that has \"nginx:latest\" in this field before attempting to pull directly. If the Dockerfile does not reference an image source it is ignored. This field and paths may both be set, in which case the contents will be used twice.",
+ "groups": {
+ "description": "Groups specifies a list of literal group names.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "from": {
- "description": "from is a reference to an ImageStreamTag, ImageStreamImage, or DockerImage to copy source from.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "paths": {
- "description": "paths is a list of source and destination paths to copy from the image. This content will be copied into the build context prior to starting the build. If no paths are set, the build context will not be altered.",
+ "labels": {
+ "description": "Selectors specifies a list of label selectors over user labels.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.ImageSourcePath"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
}
},
- "pullSecret": {
- "description": "pullSecret is a reference to a secret to be used to pull the image from a registry If the image is pulled from the OpenShift registry, this field does not need to be set.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "users": {
+ "description": "Users specifies a list of literal user names.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "build.openshift.io",
+ "Group": "authorization.openshift.io",
"Version": "v1",
- "Kind": "ImageSource",
+ "Kind": "UserRestriction",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.ImageSourcePath": {
- "description": "ImageSourcePath describes a path to be copied from a source image and its destination within the build directory.",
+ "io.openshift.build.v1.BinaryBuildRequestOptions": {
+ "description": "BinaryBuildRequestOptions are the options required to fully speficy a binary build request\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "sourcePath",
- "destinationDir"
- ],
"properties": {
- "destinationDir": {
- "description": "destinationDir is the relative directory within the build directory where files copied from the image are placed.",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "sourcePath": {
- "description": "sourcePath is the absolute path of the file or directory inside the image to copy to the build directory. If the source path ends in /. then the content of the directory will be copied, but the directory itself will not be created at the destination.",
- "type": "string",
- "default": ""
+ "asFile": {
+ "description": "asFile determines if the binary should be created as a file within the source rather than extracted as an archive",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "revision.authorEmail": {
+ "description": "revision.authorEmail of the source control user",
+ "type": "string"
+ },
+ "revision.authorName": {
+ "description": "revision.authorName of the source control user",
+ "type": "string"
+ },
+ "revision.commit": {
+ "description": "revision.commit is the value identifying a specific commit",
+ "type": "string"
+ },
+ "revision.committerEmail": {
+ "description": "revision.committerEmail of the source control user",
+ "type": "string"
+ },
+ "revision.committerName": {
+ "description": "revision.committerName of the source control user",
+ "type": "string"
+ },
+ "revision.message": {
+ "description": "revision.message is the description of a specific commit",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "build.openshift.io",
"Version": "v1",
- "Kind": "ImageSourcePath",
+ "Kind": "BinaryBuildRequestOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.ImageStreamTagReference": {
- "description": "ImageStreamTagReference references the ImageStreamTag in an image change trigger by namespace and name.",
+ "io.openshift.build.v1.BinaryBuildSource": {
+ "description": "BinaryBuildSource describes a binary file to be used for the Docker and Source build strategies, where the file will be extracted and used as the build source.",
"type": "object",
"properties": {
- "name": {
- "description": "name is the name of the ImageStreamTag for an ImageChangeTrigger",
- "type": "string"
- },
- "namespace": {
- "description": "namespace is the namespace where the ImageStreamTag for an ImageChangeTrigger is located",
+ "asFile": {
+ "description": "asFile indicates that the provided binary input should be considered a single file within the build input. For example, specifying \"webapp.war\" would place the provided binary as `/webapp.war` for the builder. If left empty, the Docker and Source build strategies assume this file is a zip, tar, or tar.gz file and extract it as the source. The custom strategy receives this binary as standard input. This filename may not contain slashes or be '..' or '.'.",
"type": "string"
}
},
@@ -62139,28 +63005,20 @@
"Type": "nested",
"Group": "build.openshift.io",
"Version": "v1",
- "Kind": "ImageStreamTagReference",
+ "Kind": "BinaryBuildSource",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.JenkinsPipelineBuildStrategy": {
- "description": "JenkinsPipelineBuildStrategy holds parameters specific to a Jenkins Pipeline build. Deprecated: use OpenShift Pipelines",
+ "io.openshift.build.v1.BitbucketWebHookCause": {
+ "description": "BitbucketWebHookCause has information about a Bitbucket webhook that triggered a build.",
"type": "object",
"properties": {
- "env": {
- "description": "env contains additional environment variables you want to pass into a build pipeline.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
- }
- },
- "jenkinsfile": {
- "description": "Jenkinsfile defines the optional raw contents of a Jenkinsfile which defines a Jenkins pipeline build.",
- "type": "string"
+ "revision": {
+ "description": "Revision is the git source revision information of the trigger.",
+ "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
},
- "jenkinsfilePath": {
- "description": "JenkinsfilePath is the optional path of the Jenkinsfile that will be used to configure the pipeline relative to the root of the context (contextDir). If both JenkinsfilePath \u0026 Jenkinsfile are both not specified, this defaults to Jenkinsfile in the root of the specified contextDir.",
+ "secret": {
+ "description": "Secret is the obfuscated webhook secret that triggered a build.",
"type": "string"
}
},
@@ -62168,2520 +63026,2688 @@
"Type": "nested",
"Group": "build.openshift.io",
"Version": "v1",
- "Kind": "JenkinsPipelineBuildStrategy",
+ "Kind": "BitbucketWebHookCause",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.ProxyConfig": {
- "description": "ProxyConfig defines what proxies to use for an operation",
+ "io.openshift.build.v1.Build": {
+ "description": "Build encapsulates the inputs needed to produce a new deployable image, as well as the status of the execution and a reference to the Pod which executed the build.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"properties": {
- "httpProxy": {
- "description": "httpProxy is a proxy used to reach the git repository over http",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "httpsProxy": {
- "description": "httpsProxy is a proxy used to reach the git repository over https",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "noProxy": {
- "description": "noProxy is the list of domains for which the proxy should not be used",
- "type": "string"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec is all the inputs used to execute the build.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildSpec"
+ },
+ "status": {
+ "description": "status is the current status of the build.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "build.openshift.io",
"Version": "v1",
- "Kind": "ProxyConfig",
+ "Kind": "Build",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.SecretBuildSource": {
- "description": "SecretBuildSource describes a secret and its destination directory that will be used only at the build time. The content of the secret referenced here will be copied into the destination directory instead of mounting.",
+ "io.openshift.build.v1.BuildCondition": {
+ "description": "BuildCondition describes the state of a build at a certain point.",
"type": "object",
"required": [
- "secret"
+ "type",
+ "status"
],
"properties": {
- "destinationDir": {
- "description": "destinationDir is the directory where the files from the secret should be available for the build time. For the Source build strategy, these will be injected into a container where the assemble script runs. Later, when the script finishes, all files injected will be truncated to zero length. For the container image build strategy, these will be copied into the build directory, where the Dockerfile is located, so users can ADD or COPY them during container image build.",
+ "lastTransitionTime": {
+ "description": "The last time the condition transitioned from one status to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "lastUpdateTime": {
+ "description": "The last time this condition was updated.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "description": "A human readable message indicating details about the transition.",
"type": "string"
},
- "secret": {
- "description": "secret is a reference to an existing secret that you want to use in your build.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "reason": {
+ "description": "The reason for the condition's last transition.",
+ "type": "string"
+ },
+ "status": {
+ "description": "Status of the condition, one of True, False, Unknown.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "Type of build condition.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "build.openshift.io",
"Version": "v1",
- "Kind": "SecretBuildSource",
+ "Kind": "BuildCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.SecretLocalReference": {
- "description": "SecretLocalReference contains information that points to the local secret being used",
+ "io.openshift.build.v1.BuildConfig": {
+ "description": "Build configurations define a build process for new container images. There are three types of builds possible - a container image build using a Dockerfile, a Source-to-Image build that uses a specially prepared base image that accepts source code that it can make runnable, and a custom build that can run // arbitrary container images as a base and accept the build parameters. Builds run on the cluster and on completion are pushed to the container image registry specified in the \"output\" section. A build can be triggered via a webhook, when the base image changes, or when a user manually requests a new build be // created.\n\nEach build created by a build configuration is numbered and refers back to its parent configuration. Multiple builds can be triggered at once. Builds that do not have \"output\" set can be used to test code or run a verification build.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "name"
+ "spec"
],
"properties": {
- "name": {
- "description": "Name is the name of the resource in the same namespace being referenced",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec holds all the input necessary to produce a new build, and the conditions when to trigger them.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildConfigSpec"
+ },
+ "status": {
+ "description": "status holds any relevant information about a build config",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildConfigStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "build.openshift.io",
"Version": "v1",
- "Kind": "SecretLocalReference",
+ "Kind": "BuildConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.SecretSpec": {
- "description": "SecretSpec specifies a secret to be included in a build pod and its corresponding mount point",
+ "io.openshift.build.v1.BuildConfigList": {
+ "description": "BuildConfigList is a collection of BuildConfigs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "secretSource",
- "mountPath"
+ "items"
],
"properties": {
- "mountPath": {
- "description": "mountPath is the path at which to mount the secret",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "secretSource": {
- "description": "secretSource is a reference to the secret",
+ "items": {
+ "description": "items is a list of build configs",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildConfig"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "build.openshift.io",
"Version": "v1",
- "Kind": "SecretSpec",
+ "Kind": "BuildConfigList",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.SourceBuildStrategy": {
- "description": "SourceBuildStrategy defines input parameters specific to an Source build.",
+ "io.openshift.build.v1.BuildConfigSpec": {
+ "description": "BuildConfigSpec describes when and how builds are created",
"type": "object",
"required": [
- "from"
+ "strategy"
],
"properties": {
- "env": {
- "description": "env contains additional environment variables you want to pass into a builder container.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
- }
+ "completionDeadlineSeconds": {
+ "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer",
+ "type": "integer",
+ "format": "int64"
},
- "forcePull": {
- "description": "forcePull describes if the builder should pull the images from registry prior to building.",
+ "failedBuildsHistoryLimit": {
+ "description": "failedBuildsHistoryLimit is the number of old failed builds to retain. When a BuildConfig is created, the 5 most recent failed builds are retained unless this value is set. If removed after the BuildConfig has been created, all failed builds are retained.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "mountTrustedCA": {
+ "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.",
"type": "boolean"
},
- "from": {
- "description": "from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which the container image should be pulled",
+ "nodeSelector": {
+ "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "output": {
+ "description": "output describes the container image the Strategy should produce.",
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "$ref": "#/definitions/io.openshift.build.v1.BuildOutput"
},
- "incremental": {
- "description": "incremental flag forces the Source build to do incremental builds if true.",
- "type": "boolean"
+ "postCommit": {
+ "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildPostCommitSpec"
},
- "pullSecret": {
- "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "resources": {
+ "description": "resources computes resource requirements to execute the build.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
},
- "scripts": {
- "description": "scripts is the location of Source scripts",
+ "revision": {
+ "description": "revision is the information from the source for a specific repo snapshot. This is optional.",
+ "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
+ },
+ "runPolicy": {
+ "description": "RunPolicy describes how the new build created from this build configuration will be scheduled for execution. This is optional, if not specified we default to \"Serial\".",
"type": "string"
},
- "volumes": {
- "description": "volumes is a list of input volumes that can be mounted into the builds runtime environment. Only a subset of Kubernetes Volume sources are supported by builds. More info: https://kubernetes.io/docs/concepts/storage/volumes",
+ "serviceAccount": {
+ "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount",
+ "type": "string"
+ },
+ "source": {
+ "description": "source describes the SCM in use.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildSource"
+ },
+ "strategy": {
+ "description": "strategy defines how to perform a build.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildStrategy"
+ },
+ "successfulBuildsHistoryLimit": {
+ "description": "successfulBuildsHistoryLimit is the number of old successful builds to retain. When a BuildConfig is created, the 5 most recent successful builds are retained unless this value is set. If removed after the BuildConfig has been created, all successful builds are retained.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "triggers": {
+ "description": "triggers determine how new Builds can be launched from a BuildConfig. If no triggers are defined, a new build can only occur as a result of an explicit client build creation.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.BuildVolume"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "name",
- "x-kubernetes-patch-strategy": "merge"
+ "$ref": "#/definitions/io.openshift.build.v1.BuildTriggerPolicy"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "build.openshift.io",
"Version": "v1",
- "Kind": "SourceBuildStrategy",
+ "Kind": "BuildConfigSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.SourceControlUser": {
- "description": "SourceControlUser defines the identity of a user of source control",
+ "io.openshift.build.v1.BuildConfigStatus": {
+ "description": "BuildConfigStatus contains current state of the build config object.",
"type": "object",
+ "required": [
+ "lastVersion"
+ ],
"properties": {
- "email": {
- "description": "email of the source control user",
- "type": "string"
+ "imageChangeTriggers": {
+ "description": "ImageChangeTriggers captures the runtime state of any ImageChangeTrigger specified in the BuildConfigSpec, including the value reconciled by the OpenShift APIServer for the lastTriggeredImageID. There is a single entry in this array for each image change trigger in spec. Each trigger status references the ImageStreamTag that acts as the source of the trigger.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.ImageChangeTriggerStatus"
+ }
},
- "name": {
- "description": "name of the source control user",
- "type": "string"
+ "lastVersion": {
+ "description": "lastVersion is used to inform about number of last triggered build.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "build.openshift.io",
"Version": "v1",
- "Kind": "SourceControlUser",
+ "Kind": "BuildConfigStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.SourceRevision": {
- "description": "SourceRevision is the revision or commit information from the source for the build",
+ "io.openshift.build.v1.BuildList": {
+ "description": "BuildList is a collection of Builds.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "type"
+ "items"
],
"properties": {
- "git": {
- "description": "Git contains information about git-based build source",
- "$ref": "#/definitions/io.openshift.build.v1.GitSourceRevision"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "type": {
- "description": "type of the build source, may be one of 'Source', 'Dockerfile', 'Binary', or 'Images'",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
- "Version": "v1",
- "Kind": "SourceRevision",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.build.v1.SourceStrategyOptions": {
- "description": "SourceStrategyOptions contains extra strategy options for Source builds",
- "type": "object",
- "properties": {
- "incremental": {
- "description": "incremental overrides the source-strategy incremental option in the build config",
- "type": "boolean"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
- "Version": "v1",
- "Kind": "SourceStrategyOptions",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.build.v1.StageInfo": {
- "description": "StageInfo contains details about a build stage.",
- "type": "object",
- "properties": {
- "durationMilliseconds": {
- "description": "durationMilliseconds identifies how long the stage took to complete in milliseconds. Note: the duration of a stage can exceed the sum of the duration of the steps within the stage as not all actions are accounted for in explicit build steps.",
- "type": "integer",
- "format": "int64"
- },
- "name": {
- "description": "name is a unique identifier for each build stage that occurs.",
- "type": "string"
- },
- "startTime": {
- "description": "startTime is a timestamp representing the server time when this Stage started. It is represented in RFC3339 form and is in UTC.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "steps": {
- "description": "steps contains details about each step that occurs during a build stage including start time and duration in milliseconds.",
+ "items": {
+ "description": "items is a list of builds",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.StepInfo"
+ "$ref": "#/definitions/io.openshift.build.v1.Build"
}
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "build.openshift.io",
- "Version": "v1",
- "Kind": "StageInfo",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.build.v1.StepInfo": {
- "description": "StepInfo contains details about a build step.",
- "type": "object",
- "properties": {
- "durationMilliseconds": {
- "description": "durationMilliseconds identifies how long the step took to complete in milliseconds.",
- "type": "integer",
- "format": "int64"
},
- "name": {
- "description": "name is a unique identifier for each build step.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "startTime": {
- "description": "startTime is a timestamp representing the server time when this Step started. it is represented in RFC3339 form and is in UTC.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "build.openshift.io",
"Version": "v1",
- "Kind": "StepInfo",
+ "Kind": "BuildList",
"Scope": "Namespaced"
}
},
- "io.openshift.build.v1.WebHookTrigger": {
- "description": "WebHookTrigger is a trigger that gets invoked using a webhook type of post",
+ "io.openshift.build.v1.BuildLog": {
+ "description": "BuildLog is the (unused) resource associated with the build log redirector\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"properties": {
- "allowEnv": {
- "description": "allowEnv determines whether the webhook can set environment variables; can only be set to true for GenericWebHook.",
- "type": "boolean"
- },
- "secret": {
- "description": "secret used to validate requests. Deprecated: use SecretReference instead.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "secretReference": {
- "description": "secretReference is a reference to a secret in the same namespace, containing the value to be validated when the webhook is invoked. The secret being referenced must contain a key named \"WebHookSecretKey\", the value of which will be checked against the value supplied in the webhook invocation.",
- "$ref": "#/definitions/io.openshift.build.v1.SecretLocalReference"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "build.openshift.io",
"Version": "v1",
- "Kind": "WebHookTrigger",
+ "Kind": "BuildLog",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.AWSProviderSpec": {
- "description": "AWSProviderSpec contains the required information to create a user policy in AWS.",
+ "io.openshift.build.v1.BuildLogOptions": {
+ "description": "BuildLogOptions is the REST options for a build log\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "statementEntries"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
+ "container": {
+ "description": "cointainer for which to stream logs. Defaults to only container if there is one container in the pod.",
+ "type": "string"
+ },
+ "follow": {
+ "description": "follow if true indicates that the build log should be streamed until the build terminates.",
+ "type": "boolean"
+ },
+ "insecureSkipTLSVerifyBackend": {
+ "description": "insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to. This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet. If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).",
+ "type": "boolean"
+ },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "statementEntries": {
- "description": "StatementEntries contains a list of policy statements that should be associated with this credentials access key.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.cloudcredential.v1.StatementEntry"
- }
+ "limitBytes": {
+ "description": "limitBytes, If set, is the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.",
+ "type": "integer",
+ "format": "int64"
},
- "stsIAMRoleARN": {
- "description": "stsIAMRoleARN is the Amazon Resource Name (ARN) of an IAM Role which was created manually for the associated CredentialsRequest. The presence of an stsIAMRoleARN within the AWSProviderSpec initiates creation of a secret containing IAM Role details necessary for assuming the IAM Role via Amazon's Secure Token Service.",
- "type": "string"
+ "nowait": {
+ "description": "noWait if true causes the call to return immediately even if the build is not available yet. Otherwise the server will wait until the build has started.",
+ "type": "boolean"
+ },
+ "previous": {
+ "description": "previous returns previous build logs. Defaults to false.",
+ "type": "boolean"
+ },
+ "sinceSeconds": {
+ "description": "sinceSeconds is a relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "sinceTime": {
+ "description": "sinceTime is an RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "tailLines": {
+ "description": "tailLines, If set, is the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime",
+ "type": "integer",
+ "format": "int64"
+ },
+ "timestamps": {
+ "description": "timestamps, If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.",
+ "type": "boolean"
+ },
+ "version": {
+ "description": "version of the build for which to view logs.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "AWSProviderSpec",
+ "Kind": "BuildLogOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.AWSProviderStatus": {
- "description": "AWSProviderStatus containes the status of the credentials request in AWS.",
+ "io.openshift.build.v1.BuildOutput": {
+ "description": "BuildOutput is input to a build strategy and describes the container image that the strategy should produce.",
"type": "object",
- "required": [
- "user",
- "policy"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "imageLabels": {
+ "description": "imageLabels define a list of labels that are applied to the resulting image. If there are multiple labels with the same name then the last one in the list is used.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.ImageLabel"
+ }
},
- "policy": {
- "description": "Policy is the name of the policy attached to the user in AWS.",
- "type": "string",
- "default": ""
+ "pushSecret": {
+ "description": "PushSecret is the name of a Secret that would be used for setting up the authentication for executing the Docker push to authentication enabled Docker Registry (or Docker Hub).",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "user": {
- "description": "User is the name of the User created in AWS for these credentials.",
- "type": "string",
- "default": ""
+ "to": {
+ "description": "to defines an optional location to push the output of this build to. Kind must be one of 'ImageStreamTag' or 'DockerImage'. This value will be used to look up a container image repository to push to. In the case of an ImageStreamTag, the ImageStreamTag will be looked for in the namespace of the build unless Namespace is specified.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "AWSProviderStatus",
+ "Kind": "BuildOutput",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.AccessPolicy": {
- "description": "AccessPolicy is a definition of an IAM access policy",
+ "io.openshift.build.v1.BuildPostCommitSpec": {
+ "description": "A BuildPostCommitSpec holds a build post commit hook specification. The hook executes a command in a temporary container running the build output image, immediately after the last layer of the image is committed and before the image is pushed to a registry. The command is executed with the current working directory ($PWD) set to the image's WORKDIR.\n\nThe build will be marked as failed if the hook execution fails. It will fail if the script or command return a non-zero exit code, or if there is any other error related to starting the temporary container.\n\nThere are five different ways to configure the hook. As an example, all forms below are equivalent and will execute `rake test --verbose`.\n\n1. Shell script:\n\n\t \"postCommit\": {\n\t \"script\": \"rake test --verbose\",\n\t }\n\n\tThe above is a convenient form which is equivalent to:\n\n\t \"postCommit\": {\n\t \"command\": [\"/bin/sh\", \"-ic\"],\n\t \"args\": [\"rake test --verbose\"]\n\t }\n\n2. A command as the image entrypoint:\n\n\t \"postCommit\": {\n\t \"commit\": [\"rake\", \"test\", \"--verbose\"]\n\t }\n\n\tCommand overrides the image entrypoint in the exec form, as documented in\n\tDocker: https://docs.docker.com/engine/reference/builder/#entrypoint.\n\n3. Pass arguments to the default entrypoint:\n\n\t \"postCommit\": {\n\t\t\t \"args\": [\"rake\", \"test\", \"--verbose\"]\n\t\t }\n\n\t This form is only useful if the image entrypoint can handle arguments.\n\n4. Shell script with arguments:\n\n\t \"postCommit\": {\n\t \"script\": \"rake test $1\",\n\t \"args\": [\"--verbose\"]\n\t }\n\n\tThis form is useful if you need to pass arguments that would otherwise be\n\thard to quote properly in the shell script. In the script, $0 will be\n\t\"/bin/sh\" and $1, $2, etc, are the positional arguments from Args.\n\n5. Command with arguments:\n\n\t \"postCommit\": {\n\t \"command\": [\"rake\", \"test\"],\n\t \"args\": [\"--verbose\"]\n\t }\n\n\tThis form is equivalent to appending the arguments to the Command slice.\n\nIt is invalid to provide both Script and Command simultaneously. If none of the fields are specified, the hook is not executed.",
"type": "object",
- "required": [
- "attributes",
- "roles"
- ],
"properties": {
- "attributes": {
- "description": "Attributes identify the resources to which this policy applies",
+ "args": {
+ "description": "args is a list of arguments that are provided to either Command, Script or the container image's default entrypoint. The arguments are placed immediately after the command to be run.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.cloudcredential.v1.ResourceAttribute"
+ "type": "string",
+ "default": ""
}
},
- "roles": {
- "description": "Roles are the IAM roles assigned to this policy",
+ "command": {
+ "description": "command is the command to run. It may not be specified with Script. This might be needed if the image doesn't have `/bin/sh`, or if you do not want to use a shell. In all other cases, using Script might be more convenient.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
+ },
+ "script": {
+ "description": "script is a shell script to be run with `/bin/sh -ic`. It may not be specified with Command. Use Script when a shell script is appropriate to execute the post build hook, for example for running unit tests with `rake test`. If you need control over the image entrypoint, or if the image does not have `/bin/sh`, use Command and/or Args. The `-i` flag is needed to support CentOS and RHEL images that use Software Collections (SCL), in order to have the appropriate collections enabled in the shell. E.g., in the Ruby image, this is necessary to make `ruby`, `bundle` and other binaries available in the PATH.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "cloudcredential.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "AccessPolicy",
+ "Kind": "BuildPostCommitSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.AzureProviderSpec": {
- "description": "AzureProviderSpec contains the required information to create RBAC role bindings for Azure.",
+ "io.openshift.build.v1.BuildRequest": {
+ "description": "BuildRequest is the resource used to pass parameters to build generator\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "roleBindings"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "azureClientID": {
- "description": "The following fields are only required for Azure Workload Identity. AzureClientID is the ID of the specific application you created in Azure",
- "type": "string"
- },
- "azureRegion": {
- "description": "AzureRegion is the geographic region of the Azure service.",
- "type": "string"
- },
- "azureSubscriptionID": {
- "description": "Each Azure subscription has an ID associated with it, as does the tenant to which a subscription belongs. AzureSubscriptionID is the ID of the subscription.",
- "type": "string"
+ "binary": {
+ "description": "binary indicates a request to build from a binary provided to the builder",
+ "$ref": "#/definitions/io.openshift.build.v1.BinaryBuildSource"
},
- "azureTenantID": {
- "description": "AzureTenantID is the ID of the tenant to which the subscription belongs.",
- "type": "string"
+ "dockerStrategyOptions": {
+ "description": "DockerStrategyOptions contains additional docker-strategy specific options for the build",
+ "$ref": "#/definitions/io.openshift.build.v1.DockerStrategyOptions"
},
- "dataPermissions": {
- "description": "DataPermissions is the list of Azure data permissions required to create a more fine-grained custom role to satisfy the CredentialsRequest. The DataPermissions field may be provided in addition to RoleBindings. When both fields are specified, the user-assigned managed identity will have union of permissions defined from both DataPermissions and RoleBindings.",
+ "env": {
+ "description": "env contains additional environment variables you want to pass into a builder container.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
}
},
+ "from": {
+ "description": "from is the reference to the ImageStreamTag that triggered the build.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "permissions": {
- "description": "Permissions is the list of Azure permissions required to create a more fine-grained custom role to satisfy the CredentialsRequest. The Permissions field may be provided in addition to RoleBindings. When both fields are specified, the user-assigned managed identity will have union of permissions defined from both Permissions and RoleBindings.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "lastVersion": {
+ "description": "lastVersion (optional) is the LastVersion of the BuildConfig that was used to generate the build. If the BuildConfig in the generator doesn't match, a build will not be generated.",
+ "type": "integer",
+ "format": "int64"
},
- "roleBindings": {
- "description": "RoleBindings contains a list of roles that should be associated with the minted credential.",
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "revision": {
+ "description": "revision is the information from the source for a specific repo snapshot.",
+ "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
+ },
+ "sourceStrategyOptions": {
+ "description": "SourceStrategyOptions contains additional source-strategy specific options for the build",
+ "$ref": "#/definitions/io.openshift.build.v1.SourceStrategyOptions"
+ },
+ "triggeredBy": {
+ "description": "triggeredBy describes which triggers started the most recent update to the build configuration and contains information about those triggers.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.cloudcredential.v1.RoleBinding"
+ "$ref": "#/definitions/io.openshift.build.v1.BuildTriggerCause"
}
+ },
+ "triggeredByImage": {
+ "description": "triggeredByImage is the Image that triggered this build.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "AzureProviderSpec",
+ "Kind": "BuildRequest",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.AzureProviderStatus": {
- "description": "AzureProviderStatus contains the status of the credentials request in Azure.",
+ "io.openshift.build.v1.BuildSource": {
+ "description": "BuildSource is the SCM used for the build.",
"type": "object",
- "required": [
- "name",
- "appID",
- "secretLastResourceVersion"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "binary": {
+ "description": "binary builds accept a binary as their input. The binary is generally assumed to be a tar, gzipped tar, or zip file depending on the strategy. For container image builds, this is the build context and an optional Dockerfile may be specified to override any Dockerfile in the build context. For Source builds, this is assumed to be an archive as described above. For Source and container image builds, if binary.asFile is set the build will receive a directory with a single file. contextDir may be used when an archive is provided. Custom builds will receive this binary as input on STDIN.",
+ "$ref": "#/definitions/io.openshift.build.v1.BinaryBuildSource"
},
- "appID": {
- "description": "AppID is the application id of the service principal created in Azure for these credentials.",
- "type": "string",
- "default": ""
+ "configMaps": {
+ "description": "configMaps represents a list of configMaps and their destinations that will be used for the build.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.ConfigMapBuildSource"
+ }
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "contextDir": {
+ "description": "contextDir specifies the sub-directory where the source code for the application exists. This allows to have buildable sources in directory other than root of repository.",
"type": "string"
},
- "name": {
- "description": "ServicePrincipalName is the name of the service principal created in Azure for these credentials.",
- "type": "string",
- "default": ""
+ "dockerfile": {
+ "description": "dockerfile is the raw contents of a Dockerfile which should be built. When this option is specified, the FROM may be modified based on your strategy base image and additional ENV stanzas from your strategy environment will be added after the FROM, but before the rest of your Dockerfile stanzas. The Dockerfile source type may be used with other options like git - in those cases the Git repo will have any innate Dockerfile replaced in the context dir.",
+ "type": "string"
},
- "secretLastResourceVersion": {
- "description": "SecretLastResourceVersion is the resource version of the secret resource that was last synced. Used to determine if the object has changed and requires a sync.",
- "type": "string",
- "default": ""
+ "git": {
+ "description": "git contains optional information about git build source",
+ "$ref": "#/definitions/io.openshift.build.v1.GitBuildSource"
+ },
+ "images": {
+ "description": "images describes a set of images to be used to provide source for the build",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.ImageSource"
+ }
+ },
+ "secrets": {
+ "description": "secrets represents a list of secrets and their destinations that will be used only for the build.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.SecretBuildSource"
+ }
+ },
+ "sourceSecret": {
+ "description": "sourceSecret is the name of a Secret that would be used for setting up the authentication for cloning private repository. The secret contains valid credentials for remote repository, where the data's key represent the authentication method to be used and value is the base64 encoded credentials. Supported auth methods are: ssh-privatekey.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "type": {
+ "description": "type of build input to accept",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "AzureProviderStatus",
+ "Kind": "BuildSource",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.CredentialsRequest": {
- "description": "CredentialsRequest is the Schema for the credentialsrequests API",
+ "io.openshift.build.v1.BuildSpec": {
+ "description": "BuildSpec has the information to represent a build and also additional information about a build",
"type": "object",
"required": [
- "spec"
+ "strategy"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "completionDeadlineSeconds": {
+ "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer",
+ "type": "integer",
+ "format": "int64"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "mountTrustedCA": {
+ "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.",
+ "type": "boolean"
},
- "metadata": {
+ "nodeSelector": {
+ "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "output": {
+ "description": "output describes the container image the Strategy should produce.",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "$ref": "#/definitions/io.openshift.build.v1.BuildOutput"
},
- "spec": {
+ "postCommit": {
+ "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.",
"default": {},
- "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequestSpec"
+ "$ref": "#/definitions/io.openshift.build.v1.BuildPostCommitSpec"
},
- "status": {
+ "resources": {
+ "description": "resources computes resource requirements to execute the build.",
"default": {},
- "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequestStatus"
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
- "Version": "v1",
- "Kind": "CredentialsRequest",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.cloudcredential.v1.CredentialsRequestCondition": {
- "description": "CredentialsRequestCondition contains details for any of the conditions on a CredentialsRequest object",
- "type": "object",
- "required": [
- "type",
- "status"
- ],
- "properties": {
- "lastProbeTime": {
- "description": "LastProbeTime is the last time we probed the condition",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
},
- "lastTransitionTime": {
- "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "revision": {
+ "description": "revision is the information from the source for a specific repo snapshot. This is optional.",
+ "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
},
- "message": {
- "description": "Message is a human-readable message indicating details about the last transition",
+ "serviceAccount": {
+ "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount",
"type": "string"
},
- "reason": {
- "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition",
- "type": "string"
+ "source": {
+ "description": "source describes the SCM in use.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildSource"
},
- "status": {
- "description": "Status is the status of the condition",
- "type": "string",
- "default": ""
+ "strategy": {
+ "description": "strategy defines how to perform a build.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildStrategy"
},
- "type": {
- "description": "Type is the specific type of the condition",
- "type": "string",
- "default": ""
+ "triggeredBy": {
+ "description": "triggeredBy describes which triggers started the most recent update to the build configuration and contains information about those triggers.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildTriggerCause"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "cloudcredential.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "CredentialsRequestCondition",
+ "Kind": "BuildSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.CredentialsRequestList": {
- "description": "CredentialsRequestList contains a list of CredentialsRequest",
+ "io.openshift.build.v1.BuildStatus": {
+ "description": "BuildStatus contains the status of a build",
"type": "object",
"required": [
- "items"
+ "phase"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "cancelled": {
+ "description": "cancelled describes if a cancel event was triggered for the build.",
+ "type": "boolean"
},
- "items": {
+ "completionTimestamp": {
+ "description": "completionTimestamp is a timestamp representing the server time when this Build was finished, whether that build failed or succeeded. It reflects the time at which the Pod running the Build terminated. It is represented in RFC3339 form and is in UTC.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "conditions": {
+ "description": "Conditions represents the latest available observations of a build's current state.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequest"
- }
+ "$ref": "#/definitions/io.openshift.build.v1.BuildCondition"
+ },
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "config": {
+ "description": "config is an ObjectReference to the BuildConfig this Build is based on.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "duration": {
+ "description": "duration contains time.Duration object describing build time.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "logSnippet": {
+ "description": "logSnippet is the last few lines of the build log. This value is only set for builds that failed.",
"type": "string"
},
- "metadata": {
+ "message": {
+ "description": "message is a human-readable message indicating details about why the build has this status.",
+ "type": "string"
+ },
+ "output": {
+ "description": "output describes the container image the build has produced.",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "$ref": "#/definitions/io.openshift.build.v1.BuildStatusOutput"
+ },
+ "outputDockerImageReference": {
+ "description": "outputDockerImageReference contains a reference to the container image that will be built by this build. Its value is computed from Build.Spec.Output.To, and should include the registry address, so that it can be used to push and pull the image.",
+ "type": "string"
+ },
+ "phase": {
+ "description": "phase is the point in the build lifecycle. Possible values are \"New\", \"Pending\", \"Running\", \"Complete\", \"Failed\", \"Error\", and \"Cancelled\".",
+ "type": "string",
+ "default": ""
+ },
+ "reason": {
+ "description": "reason is a brief CamelCase string that describes any failure and is meant for machine parsing and tidy display in the CLI.",
+ "type": "string"
+ },
+ "stages": {
+ "description": "stages contains details about each stage that occurs during the build including start time, duration (in milliseconds), and the steps that occured within each stage.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.StageInfo"
+ }
+ },
+ "startTimestamp": {
+ "description": "startTimestamp is a timestamp representing the server time when this Build started running in a Pod. It is represented in RFC3339 form and is in UTC.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "CredentialsRequestList",
+ "Kind": "BuildStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.CredentialsRequestSpec": {
- "description": "CredentialsRequestSpec defines the desired state of CredentialsRequest",
+ "io.openshift.build.v1.BuildStatusOutput": {
+ "description": "BuildStatusOutput contains the status of the built image.",
"type": "object",
- "required": [
- "secretRef"
- ],
"properties": {
- "cloudTokenPath": {
- "description": "cloudTokenPath is the path where the Kubernetes ServiceAccount token (JSON Web Token) is mounted on the deployment for the workload requesting a credentials secret. The presence of this field in combination with fields such as spec.providerSpec.stsIAMRoleARN indicate that CCO should broker creation of a credentials secret containing fields necessary for token based authentication methods such as with the AWS Secure Token Service (STS).\n\ncloudTokenPath may also be used to specify the azure_federated_token_file path used in Azure configuration secrets generated by ccoctl. Defaults to \"/var/run/secrets/openshift/serviceaccount/token\".",
- "type": "string"
- },
- "providerSpec": {
- "description": "ProviderSpec contains the cloud provider specific credentials specification.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "secretRef": {
- "description": "SecretRef points to the secret where the credentials should be stored once generated.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "serviceAccountNames": {
- "description": "ServiceAccountNames contains a list of ServiceAccounts that will use permissions associated with this CredentialsRequest. This is not used by CCO, but the information is needed for being able to properly set up access control in the cloud provider when the ServiceAccounts are used as part of the cloud credentials flow.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "to": {
+ "description": "to describes the status of the built image being pushed to a registry.",
+ "$ref": "#/definitions/io.openshift.build.v1.BuildStatusOutputTo"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "cloudcredential.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "CredentialsRequestSpec",
+ "Kind": "BuildStatusOutput",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.CredentialsRequestStatus": {
- "description": "CredentialsRequestStatus defines the observed state of CredentialsRequest",
+ "io.openshift.build.v1.BuildStatusOutputTo": {
+ "description": "BuildStatusOutputTo describes the status of the built image with regards to image registry to which it was supposed to be pushed.",
"type": "object",
- "required": [
- "provisioned",
- "lastSyncGeneration"
- ],
"properties": {
- "conditions": {
- "description": "Conditions includes detailed status for the CredentialsRequest",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequestCondition"
- }
- },
- "lastSyncCloudCredsSecretResourceVersion": {
- "description": "LastSyncCloudCredsSecretResourceVersion is the resource version of the cloud credentials secret resource when the credentials request resource was last synced. Used to determine if the cloud credentials have been updated since the last sync.",
+ "imageDigest": {
+ "description": "imageDigest is the digest of the built container image. The digest uniquely identifies the image in the registry to which it was pushed.\n\nPlease note that this field may not always be set even if the push completes successfully - e.g. when the registry returns no digest or returns it in a format that the builder doesn't understand.",
"type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "build.openshift.io",
+ "Version": "v1",
+ "Kind": "BuildStatusOutputTo",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.build.v1.BuildStrategy": {
+ "description": "BuildStrategy contains the details of how to perform a build.",
+ "type": "object",
+ "properties": {
+ "customStrategy": {
+ "description": "customStrategy holds the parameters to the Custom build strategy",
+ "$ref": "#/definitions/io.openshift.build.v1.CustomBuildStrategy"
},
- "lastSyncGeneration": {
- "description": "LastSyncGeneration is the generation of the credentials request resource that was last synced. Used to determine if the object has changed and requires a sync.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "dockerStrategy": {
+ "description": "dockerStrategy holds the parameters to the container image build strategy.",
+ "$ref": "#/definitions/io.openshift.build.v1.DockerBuildStrategy"
},
- "lastSyncTimestamp": {
- "description": "LastSyncTimestamp is the time that the credentials were last synced.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "jenkinsPipelineStrategy": {
+ "description": "JenkinsPipelineStrategy holds the parameters to the Jenkins Pipeline build strategy. Deprecated: use OpenShift Pipelines",
+ "$ref": "#/definitions/io.openshift.build.v1.JenkinsPipelineBuildStrategy"
},
- "providerStatus": {
- "description": "ProviderStatus contains cloud provider specific status.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "sourceStrategy": {
+ "description": "sourceStrategy holds the parameters to the Source build strategy.",
+ "$ref": "#/definitions/io.openshift.build.v1.SourceBuildStrategy"
},
- "provisioned": {
- "description": "Provisioned is true once the credentials have been initially provisioned.",
- "type": "boolean",
- "default": false
+ "type": {
+ "description": "type is the kind of build strategy.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "cloudcredential.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "CredentialsRequestStatus",
+ "Kind": "BuildStrategy",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.GCPProviderSpec": {
- "description": "GCPProviderSpec contains the required information to create a service account with policy bindings in GCP.",
+ "io.openshift.build.v1.BuildTriggerCause": {
+ "description": "BuildTriggerCause holds information about a triggered build. It is used for displaying build trigger data for each build and build configuration in oc describe. It is also used to describe which triggers led to the most recent update in the build configuration.",
"type": "object",
- "required": [
- "predefinedRoles"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "bitbucketWebHook": {
+ "description": "BitbucketWebHook represents data for a Bitbucket webhook that fired a specific build.",
+ "$ref": "#/definitions/io.openshift.build.v1.BitbucketWebHookCause"
},
- "audience": {
- "description": "Audience that will be used with Workload Identity Federation. It should be formatted as follows: \"//iam.googleapis.com/projects/\u003cPROJECT_NUMBER\u003e/locations/global/workloadIdentityPools/\u003cPOOL_ID\u003e/providers/\u003cPROVIDER_ID\u003e\" For more information see https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#create-credential-config",
- "type": "string"
+ "genericWebHook": {
+ "description": "genericWebHook holds data about a builds generic webhook trigger.",
+ "$ref": "#/definitions/io.openshift.build.v1.GenericWebHookCause"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "githubWebHook": {
+ "description": "gitHubWebHook represents data for a GitHub webhook that fired a specific build.",
+ "$ref": "#/definitions/io.openshift.build.v1.GitHubWebHookCause"
},
- "permissions": {
- "description": "Permissions is the list of GCP permissions required to create a more fine-grained custom role to satisfy the CredentialsRequest. The Permissions field may be provided in addition to PredefinedRoles. When both fields are specified, the service account will have union of permissions defined from both Permissions and PredefinedRoles.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "gitlabWebHook": {
+ "description": "GitLabWebHook represents data for a GitLab webhook that fired a specific build.",
+ "$ref": "#/definitions/io.openshift.build.v1.GitLabWebHookCause"
},
- "predefinedRoles": {
- "description": "PredefinedRoles is the list of GCP pre-defined roles that the CredentialsRequest requires.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "imageChangeBuild": {
+ "description": "imageChangeBuild stores information about an imagechange event that triggered a new build.",
+ "$ref": "#/definitions/io.openshift.build.v1.ImageChangeCause"
},
- "serviceAccountEmail": {
- "description": "ServiceAccountEmail that will be impersonated during Workload Identity Federation.",
+ "message": {
+ "description": "message is used to store a human readable message for why the build was triggered. E.g.: \"Manually triggered by user\", \"Configuration change\",etc.",
"type": "string"
- },
- "skipServiceCheck": {
- "description": "SkipServiceCheck can be set to true to skip the check whether the requested roles or permissions have the necessary services enabled",
- "type": "boolean"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "GCPProviderSpec",
+ "Kind": "BuildTriggerCause",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.GCPProviderStatus": {
- "description": "GCPProviderStatus contains the status of the GCP credentials request.",
+ "io.openshift.build.v1.BuildTriggerPolicy": {
+ "description": "BuildTriggerPolicy describes a policy for a single trigger that results in a new Build.",
"type": "object",
"required": [
- "serviceAccountID"
+ "type"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "bitbucket": {
+ "description": "BitbucketWebHook contains the parameters for a Bitbucket webhook type of trigger",
+ "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "generic": {
+ "description": "generic contains the parameters for a Generic webhook type of trigger",
+ "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger"
},
- "roleID": {
- "description": "RoleID is the ID of the custom role created in GCP for the requested permissions apart from permissions granted by the pre-defined roles. RoleID is set by the Cloud Credential Operator controllers and should not be set manually.",
- "type": "string"
+ "github": {
+ "description": "github contains the parameters for a GitHub webhook type of trigger",
+ "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger"
},
- "serviceAccountID": {
- "description": "ServiceAccountID is the ID of the service account created in GCP for the requested credentials.",
+ "gitlab": {
+ "description": "GitLabWebHook contains the parameters for a GitLab webhook type of trigger",
+ "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger"
+ },
+ "imageChange": {
+ "description": "imageChange contains parameters for an ImageChange type of trigger",
+ "$ref": "#/definitions/io.openshift.build.v1.ImageChangeTrigger"
+ },
+ "type": {
+ "description": "type is the type of build trigger. Valid values:\n\n- GitHub GitHubWebHookBuildTriggerType represents a trigger that launches builds on GitHub webhook invocations\n\n- Generic GenericWebHookBuildTriggerType represents a trigger that launches builds on generic webhook invocations\n\n- GitLab GitLabWebHookBuildTriggerType represents a trigger that launches builds on GitLab webhook invocations\n\n- Bitbucket BitbucketWebHookBuildTriggerType represents a trigger that launches builds on Bitbucket webhook invocations\n\n- ImageChange ImageChangeBuildTriggerType represents a trigger that launches builds on availability of a new version of an image\n\n- ConfigChange ConfigChangeBuildTriggerType will trigger a build on an initial build config creation WARNING: In the future the behavior will change to trigger a build on any config change",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "GCPProviderStatus",
+ "Kind": "BuildTriggerPolicy",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.IBMCloudPowerVSProviderSpec": {
- "description": "IBMCloudPowerVSProviderSpec is the specification of the credentials request in IBM Cloud Power VS.",
+ "io.openshift.build.v1.BuildVolume": {
+ "description": "BuildVolume describes a volume that is made available to build pods, such that it can be mounted into buildah's runtime environment. Only a subset of Kubernetes Volume sources are supported.",
"type": "object",
"required": [
- "policies"
+ "name",
+ "source",
+ "mounts"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "policies": {
- "description": "Policies are a list of access policies to create for the generated credentials",
+ "mounts": {
+ "description": "mounts represents the location of the volume in the image build container",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.cloudcredential.v1.AccessPolicy"
- }
+ "$ref": "#/definitions/io.openshift.build.v1.BuildVolumeMount"
+ },
+ "x-kubernetes-list-map-keys": [
+ "destinationPath"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "destinationPath",
+ "x-kubernetes-patch-strategy": "merge"
+ },
+ "name": {
+ "description": "name is a unique identifier for this BuildVolume. It must conform to the Kubernetes DNS label standard and be unique within the pod. Names that collide with those added by the build controller will result in a failed build with an error message detailing which name caused the error. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names",
+ "type": "string",
+ "default": ""
+ },
+ "source": {
+ "description": "source represents the location and type of the mounted volume.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildVolumeSource"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "IBMCloudPowerVSProviderSpec",
+ "Kind": "BuildVolume",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.IBMCloudPowerVSProviderStatus": {
- "description": "IBMCloudPowerVSProviderStatus contains the status of the IBM Cloud Power VS credentials request.",
+ "io.openshift.build.v1.BuildVolumeMount": {
+ "description": "BuildVolumeMount describes the mounting of a Volume within buildah's runtime environment.",
"type": "object",
+ "required": [
+ "destinationPath"
+ ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "destinationPath": {
+ "description": "destinationPath is the path within the buildah runtime environment at which the volume should be mounted. The transient mount within the build image and the backing volume will both be mounted read only. Must be an absolute path, must not contain '..' or ':', and must not collide with a destination path generated by the builder process Paths that collide with those added by the build controller will result in a failed build with an error message detailing which path caused the error.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "IBMCloudPowerVSProviderStatus",
+ "Kind": "BuildVolumeMount",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.IBMCloudProviderSpec": {
- "description": "IBMCloudProviderSpec is the specification of the credentials request in IBM Cloud.",
+ "io.openshift.build.v1.BuildVolumeSource": {
+ "description": "BuildVolumeSource represents the source of a volume to mount Only one of its supported types may be specified at any given time.",
"type": "object",
"required": [
- "policies"
+ "type"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "configMap": {
+ "description": "configMap represents a ConfigMap that should populate this volume",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapVolumeSource"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "csi": {
+ "description": "csi represents ephemeral storage provided by external CSI drivers which support this capability",
+ "$ref": "#/definitions/io.k8s.api.core.v1.CSIVolumeSource"
},
- "policies": {
- "description": "Policies are a list of access policies to create for the generated credentials",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.cloudcredential.v1.AccessPolicy"
- }
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
- "Version": "v1",
- "Kind": "IBMCloudProviderSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.cloudcredential.v1.IBMCloudProviderStatus": {
- "description": "IBMCloudProviderStatus contains the status of the IBM Cloud credentials request.",
- "type": "object",
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "secret": {
+ "description": "secret represents a Secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretVolumeSource"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "type": {
+ "description": "type is the BuildVolumeSourceType for the volume source. Type must match the populated volume source. Valid types are: Secret, ConfigMap",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "IBMCloudProviderStatus",
+ "Kind": "BuildVolumeSource",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.KubevirtProviderSpec": {
- "description": "KubevirtProviderSpec the specification of the credentials request in Kubevirt.",
+ "io.openshift.build.v1.CommonSpec": {
+ "description": "CommonSpec encapsulates all the inputs necessary to represent a build.",
"type": "object",
+ "required": [
+ "strategy"
+ ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "completionDeadlineSeconds": {
+ "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer",
+ "type": "integer",
+ "format": "int64"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "mountTrustedCA": {
+ "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.",
+ "type": "boolean"
+ },
+ "nodeSelector": {
+ "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "output": {
+ "description": "output describes the container image the Strategy should produce.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildOutput"
+ },
+ "postCommit": {
+ "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildPostCommitSpec"
+ },
+ "resources": {
+ "description": "resources computes resource requirements to execute the build.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
+ },
+ "revision": {
+ "description": "revision is the information from the source for a specific repo snapshot. This is optional.",
+ "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
+ },
+ "serviceAccount": {
+ "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount",
"type": "string"
+ },
+ "source": {
+ "description": "source describes the SCM in use.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildSource"
+ },
+ "strategy": {
+ "description": "strategy defines how to perform a build.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildStrategy"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "KubevirtProviderSpec",
+ "Kind": "CommonSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.KubevirtProviderStatus": {
- "description": "KubevirtProviderSpec contains the status of the credentials request in Kubevirt.",
+ "io.openshift.build.v1.CommonWebHookCause": {
+ "description": "CommonWebHookCause factors out the identical format of these webhook causes into struct so we can share it in the specific causes; it is too late for GitHub and Generic but we can leverage this pattern with GitLab and Bitbucket.",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "revision": {
+ "description": "Revision is the git source revision information of the trigger.",
+ "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "secret": {
+ "description": "Secret is the obfuscated webhook secret that triggered a build.",
"type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "KubevirtProviderStatus",
+ "Kind": "CommonWebHookCause",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.NutanixProviderSpec": {
- "description": "NutanixProviderSpec the specification of the credentials request in Nutanix.",
+ "io.openshift.build.v1.ConfigMapBuildSource": {
+ "description": "ConfigMapBuildSource describes a configmap and its destination directory that will be used only at the build time. The content of the configmap referenced here will be copied into the destination directory instead of mounting.",
"type": "object",
+ "required": [
+ "configMap"
+ ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "configMap": {
+ "description": "configMap is a reference to an existing configmap that you want to use in your build.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "destinationDir": {
+ "description": "destinationDir is the directory where the files from the configmap should be available for the build time. For the Source build strategy, these will be injected into a container where the assemble script runs. For the container image build strategy, these will be copied into the build directory, where the Dockerfile is located, so users can ADD or COPY them during container image build.",
"type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "NutanixProviderSpec",
+ "Kind": "ConfigMapBuildSource",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.NutanixProviderStatus": {
- "description": "NutanixProviderStatus contains the status of the credentials request in Nutanix.",
+ "io.openshift.build.v1.CustomBuildStrategy": {
+ "description": "CustomBuildStrategy defines input parameters specific to Custom build.",
"type": "object",
+ "required": [
+ "from"
+ ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "buildAPIVersion": {
+ "description": "buildAPIVersion is the requested API version for the Build object serialized and passed to the custom builder",
"type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- }
+ "env": {
+ "description": "env contains additional environment variables you want to pass into a builder container.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
+ }
+ },
+ "exposeDockerSocket": {
+ "description": "exposeDockerSocket will allow running Docker commands (and build container images) from inside the container.",
+ "type": "boolean"
+ },
+ "forcePull": {
+ "description": "forcePull describes if the controller should configure the build pod to always pull the images for the builder or only pull if it is not present locally",
+ "type": "boolean"
+ },
+ "from": {
+ "description": "from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which the container image should be pulled",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "pullSecret": {
+ "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "secrets": {
+ "description": "secrets is a list of additional secrets that will be included in the build pod",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.SecretSpec"
+ }
+ }
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "NutanixProviderStatus",
+ "Kind": "CustomBuildStrategy",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.OpenStackProviderSpec": {
- "description": "OpenStackProviderSpec the specification of the credentials request in OpenStack.",
+ "io.openshift.build.v1.DockerBuildStrategy": {
+ "description": "DockerBuildStrategy defines input parameters specific to container image build.",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "buildArgs": {
+ "description": "buildArgs contains build arguments that will be resolved in the Dockerfile. See https://docs.docker.com/engine/reference/builder/#/arg for more details. NOTE: Only the 'name' and 'value' fields are supported. Any settings on the 'valueFrom' field are ignored.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
+ }
+ },
+ "dockerfilePath": {
+ "description": "dockerfilePath is the path of the Dockerfile that will be used to build the container image, relative to the root of the context (contextDir). Defaults to `Dockerfile` if unset.",
"type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "env": {
+ "description": "env contains additional environment variables you want to pass into a builder container.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
+ }
+ },
+ "forcePull": {
+ "description": "forcePull describes if the builder should pull the images from registry prior to building.",
+ "type": "boolean"
+ },
+ "from": {
+ "description": "from is a reference to an DockerImage, ImageStreamTag, or ImageStreamImage which overrides the FROM image in the Dockerfile for the build. If the Dockerfile uses multi-stage builds, this will replace the image in the last FROM directive of the file.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "imageOptimizationPolicy": {
+ "description": "imageOptimizationPolicy describes what optimizations the system can use when building images to reduce the final size or time spent building the image. The default policy is 'None' which means the final build image will be equivalent to an image created by the container image build API. The experimental policy 'SkipLayers' will avoid commiting new layers in between each image step, and will fail if the Dockerfile cannot provide compatibility with the 'None' policy. An additional experimental policy 'SkipLayersAndWarn' is the same as 'SkipLayers' but simply warns if compatibility cannot be preserved.",
"type": "string"
+ },
+ "noCache": {
+ "description": "noCache if set to true indicates that the container image build must be executed with the --no-cache=true flag",
+ "type": "boolean"
+ },
+ "pullSecret": {
+ "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "volumes": {
+ "description": "volumes is a list of input volumes that can be mounted into the builds runtime environment. Only a subset of Kubernetes Volume sources are supported by builds. More info: https://kubernetes.io/docs/concepts/storage/volumes",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildVolume"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "name",
+ "x-kubernetes-patch-strategy": "merge"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "OpenStackProviderSpec",
+ "Kind": "DockerBuildStrategy",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.OpenStackProviderStatus": {
- "description": "OpenStackProviderStatus contains the status of the credentials request in OpenStack.",
+ "io.openshift.build.v1.DockerStrategyOptions": {
+ "description": "DockerStrategyOptions contains extra strategy options for container image builds",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "buildArgs": {
+ "description": "Args contains any build arguments that are to be passed to Docker. See https://docs.docker.com/engine/reference/builder/#/arg for more details",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
+ }
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "noCache": {
+ "description": "noCache overrides the docker-strategy noCache option in the build config",
+ "type": "boolean"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "OpenStackProviderStatus",
+ "Kind": "DockerStrategyOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.OvirtProviderSpec": {
- "description": "OvirtProviderSpec the specification of the credentials request in Ovirt.",
+ "io.openshift.build.v1.GenericWebHookCause": {
+ "description": "GenericWebHookCause holds information about a generic WebHook that triggered a build.",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "revision": {
+ "description": "revision is an optional field that stores the git source revision information of the generic webhook trigger when it is available.",
+ "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "secret": {
+ "description": "secret is the obfuscated webhook secret that triggered a build.",
"type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "OvirtProviderSpec",
+ "Kind": "GenericWebHookCause",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.OvirtProviderStatus": {
- "description": "OvirtProviderStatus contains the status of the credentials request in Ovirt.",
+ "io.openshift.build.v1.GenericWebHookEvent": {
+ "description": "GenericWebHookEvent is the payload expected for a generic webhook post",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "dockerStrategyOptions": {
+ "description": "DockerStrategyOptions contains additional docker-strategy specific options for the build",
+ "$ref": "#/definitions/io.openshift.build.v1.DockerStrategyOptions"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "env": {
+ "description": "env contains additional environment variables you want to pass into a builder container. ValueFrom is not supported.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
+ }
+ },
+ "git": {
+ "description": "git is the git information if the Type is BuildSourceGit",
+ "$ref": "#/definitions/io.openshift.build.v1.GitInfo"
+ },
+ "type": {
+ "description": "type is the type of source repository",
"type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "OvirtProviderStatus",
+ "Kind": "GenericWebHookEvent",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.ProviderCodec": {
- "description": "ProviderCodec is a runtime codec for providers.",
+ "io.openshift.build.v1.GitBuildSource": {
+ "description": "GitBuildSource defines the parameters of a Git SCM",
"type": "object",
"required": [
- "encoder",
- "decoder"
+ "uri"
],
"properties": {
- "decoder": {
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Decoder"
+ "httpProxy": {
+ "description": "httpProxy is a proxy used to reach the git repository over http",
+ "type": "string"
},
- "encoder": {
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Encoder"
+ "httpsProxy": {
+ "description": "httpsProxy is a proxy used to reach the git repository over https",
+ "type": "string"
+ },
+ "noProxy": {
+ "description": "noProxy is the list of domains for which the proxy should not be used",
+ "type": "string"
+ },
+ "ref": {
+ "description": "ref is the branch/tag/ref to build.",
+ "type": "string"
+ },
+ "uri": {
+ "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "cloudcredential.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "ProviderCodec",
+ "Kind": "GitBuildSource",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.ResourceAttribute": {
- "description": "ResourceAttribute is an attribute associated with a resource.",
+ "io.openshift.build.v1.GitHubWebHookCause": {
+ "description": "GitHubWebHookCause has information about a GitHub webhook that triggered a build.",
+ "type": "object",
+ "properties": {
+ "revision": {
+ "description": "revision is the git revision information of the trigger.",
+ "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
+ },
+ "secret": {
+ "description": "secret is the obfuscated webhook secret that triggered a build.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "build.openshift.io",
+ "Version": "v1",
+ "Kind": "GitHubWebHookCause",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.build.v1.GitInfo": {
+ "description": "GitInfo is the aggregated git information for a generic webhook post",
"type": "object",
"required": [
- "name",
- "value"
+ "uri",
+ "refs"
],
"properties": {
- "name": {
- "description": "Name is the name of an attribute.",
- "type": "string",
- "default": ""
+ "author": {
+ "description": "author is the author of a specific commit",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser"
},
- "operator": {
- "description": "Operator is the operator of an attribute.",
+ "commit": {
+ "description": "commit is the commit hash identifying a specific commit",
"type": "string"
},
- "value": {
- "description": "Value is the value of an attribute.",
+ "committer": {
+ "description": "committer is the committer of a specific commit",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser"
+ },
+ "httpProxy": {
+ "description": "httpProxy is a proxy used to reach the git repository over http",
+ "type": "string"
+ },
+ "httpsProxy": {
+ "description": "httpsProxy is a proxy used to reach the git repository over https",
+ "type": "string"
+ },
+ "message": {
+ "description": "message is the description of a specific commit",
+ "type": "string"
+ },
+ "noProxy": {
+ "description": "noProxy is the list of domains for which the proxy should not be used",
+ "type": "string"
+ },
+ "ref": {
+ "description": "ref is the branch/tag/ref to build.",
+ "type": "string"
+ },
+ "refs": {
+ "description": "Refs is a list of GitRefs for the provided repo - generally sent when used from a post-receive hook. This field is optional and is used when sending multiple refs",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.GitRefInfo"
+ }
+ },
+ "uri": {
+ "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "cloudcredential.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "ResourceAttribute",
+ "Kind": "GitInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.RoleBinding": {
- "description": "RoleBinding models part of the Azure RBAC Role Binding",
+ "io.openshift.build.v1.GitLabWebHookCause": {
+ "description": "GitLabWebHookCause has information about a GitLab webhook that triggered a build.",
"type": "object",
- "required": [
- "role"
- ],
"properties": {
- "role": {
- "description": "Role defines a set of permissions that should be associated with the minted credential.",
- "type": "string",
- "default": ""
+ "revision": {
+ "description": "Revision is the git source revision information of the trigger.",
+ "$ref": "#/definitions/io.openshift.build.v1.SourceRevision"
+ },
+ "secret": {
+ "description": "Secret is the obfuscated webhook secret that triggered a build.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "cloudcredential.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "RoleBinding",
+ "Kind": "GitLabWebHookCause",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.StatementEntry": {
- "description": "StatementEntry models an AWS policy statement entry.",
+ "io.openshift.build.v1.GitRefInfo": {
+ "description": "GitRefInfo is a single ref",
"type": "object",
"required": [
- "effect",
- "action",
- "resource"
+ "uri"
],
"properties": {
- "action": {
- "description": "Action describes the particular AWS service actions that should be allowed or denied. (i.e. ec2:StartInstances, iam:ChangePassword)",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "author": {
+ "description": "author is the author of a specific commit",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser"
},
- "effect": {
- "description": "Effect indicates if this policy statement is to Allow or Deny.",
- "type": "string",
- "default": ""
+ "commit": {
+ "description": "commit is the commit hash identifying a specific commit",
+ "type": "string"
},
- "policyCondition": {
- "description": "PolicyCondition specifies under which condition StatementEntry will apply",
- "type": "object",
- "additionalProperties": {
- "type": "object",
- "additionalProperties": {
- "type": "object"
- }
- }
+ "committer": {
+ "description": "committer is the committer of a specific commit",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser"
},
- "resource": {
- "description": "Resource specifies the object(s) this statement should apply to. (or \"*\" for all)",
+ "httpProxy": {
+ "description": "httpProxy is a proxy used to reach the git repository over http",
+ "type": "string"
+ },
+ "httpsProxy": {
+ "description": "httpsProxy is a proxy used to reach the git repository over https",
+ "type": "string"
+ },
+ "message": {
+ "description": "message is the description of a specific commit",
+ "type": "string"
+ },
+ "noProxy": {
+ "description": "noProxy is the list of domains for which the proxy should not be used",
+ "type": "string"
+ },
+ "ref": {
+ "description": "ref is the branch/tag/ref to build.",
+ "type": "string"
+ },
+ "uri": {
+ "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "cloudcredential.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "StatementEntry",
+ "Kind": "GitRefInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.VSpherePermission": {
- "description": "VSpherePermission captures the details of the privileges being requested for the list of entities.",
+ "io.openshift.build.v1.GitSourceRevision": {
+ "description": "GitSourceRevision is the commit information from a git source for a build",
"type": "object",
- "required": [
- "privileges"
- ],
"properties": {
- "privileges": {
- "description": "Privileges is the list of access being requested.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "author": {
+ "description": "author is the author of a specific commit",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser"
+ },
+ "commit": {
+ "description": "commit is the commit hash identifying a specific commit",
+ "type": "string"
+ },
+ "committer": {
+ "description": "committer is the committer of a specific commit",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser"
+ },
+ "message": {
+ "description": "message is the description of a specific commit",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "cloudcredential.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "VSpherePermission",
+ "Kind": "GitSourceRevision",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.VSphereProviderSpec": {
- "description": "VSphereProviderSpec contains the required information to create RBAC role bindings for VSphere.",
+ "io.openshift.build.v1.ImageChangeCause": {
+ "description": "ImageChangeCause contains information about the image that triggered a build",
"type": "object",
- "required": [
- "permissions"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "fromRef": {
+ "description": "fromRef contains detailed information about an image that triggered a build.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "imageID": {
+ "description": "imageID is the ID of the image that triggered a new build.",
"type": "string"
- },
- "permissions": {
- "description": "Permissions contains a list of groups of privileges that are being requested.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.cloudcredential.v1.VSpherePermission"
- }
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "VSphereProviderSpec",
+ "Kind": "ImageChangeCause",
"Scope": "Namespaced"
}
},
- "io.openshift.cloudcredential.v1.VSphereProviderStatus": {
- "description": "VSphereProviderStatus contains the status of the credentials request in VSphere.",
+ "io.openshift.build.v1.ImageChangeTrigger": {
+ "description": "ImageChangeTrigger allows builds to be triggered when an ImageStream changes",
"type": "object",
- "required": [
- "secretLastResourceVersion"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "from": {
+ "description": "from is a reference to an ImageStreamTag that will trigger a build when updated It is optional. If no From is specified, the From image from the build strategy will be used. Only one ImageChangeTrigger with an empty From reference is allowed in a build configuration.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "lastTriggeredImageID": {
+ "description": "lastTriggeredImageID is used internally by the ImageChangeController to save last used image ID for build This field is deprecated and will be removed in a future release. Deprecated",
"type": "string"
},
- "secretLastResourceVersion": {
- "description": "SecretLastResourceVersion is the resource version of the secret resource that was last synced. Used to determine if the object has changed and requires a sync.",
- "type": "string",
- "default": ""
+ "paused": {
+ "description": "paused is true if this trigger is temporarily disabled. Optional.",
+ "type": "boolean"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "cloudcredential.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "VSphereProviderStatus",
+ "Kind": "ImageChangeTrigger",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.AggregatorConfig": {
- "description": "AggregatorConfig holds information required to make the aggregator function.",
+ "io.openshift.build.v1.ImageChangeTriggerStatus": {
+ "description": "ImageChangeTriggerStatus tracks the latest resolved status of the associated ImageChangeTrigger policy specified in the BuildConfigSpec.Triggers struct.",
"type": "object",
- "required": [
- "proxyClientInfo"
- ],
"properties": {
- "proxyClientInfo": {
- "description": "proxyClientInfo specifies the client cert/key to use when proxying to aggregated API servers",
+ "from": {
+ "description": "from is the ImageStreamTag that is the source of the trigger.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.CertInfo"
+ "$ref": "#/definitions/io.openshift.build.v1.ImageStreamTagReference"
+ },
+ "lastTriggerTime": {
+ "description": "lastTriggerTime is the last time this particular ImageStreamTag triggered a Build to start. This field is only updated when this trigger specifically started a Build.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "lastTriggeredImageID": {
+ "description": "lastTriggeredImageID represents the sha/id of the ImageStreamTag when a Build for this BuildConfig was started. The lastTriggeredImageID is updated each time a Build for this BuildConfig is started, even if this ImageStreamTag is not the reason the Build is started.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "AggregatorConfig",
+ "Kind": "ImageChangeTriggerStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.KubeAPIServerConfig": {
- "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.build.v1.ImageLabel": {
+ "description": "ImageLabel represents a label applied to the resulting image.",
"type": "object",
"required": [
- "servingInfo",
- "corsAllowedOrigins",
- "auditConfig",
- "storageConfig",
- "admission",
- "kubeClientConfig",
- "authConfig",
- "aggregatorConfig",
- "kubeletClientInfo",
- "servicesSubnet",
- "servicesNodePortRange",
- "consolePublicURL",
- "userAgentMatchingConfig",
- "imagePolicyConfig",
- "projectConfig",
- "serviceAccountPublicKeyFiles",
- "oauthConfig",
- "apiServerArguments"
+ "name"
],
"properties": {
- "admission": {
- "description": "admissionConfig holds information about how to configure admission.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig"
- },
- "aggregatorConfig": {
- "description": "aggregatorConfig has options for configuring the aggregator component of the API server.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.AggregatorConfig"
- },
- "apiServerArguments": {
- "type": "object",
- "additionalProperties": {
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- }
- },
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "auditConfig": {
- "description": "auditConfig describes how to configure audit information",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AuditConfig"
- },
- "authConfig": {
- "description": "authConfig configures authentication options in addition to the standard oauth token and client certificate authenticators",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.MasterAuthConfig"
- },
- "consolePublicURL": {
- "description": "DEPRECATED: consolePublicURL has been deprecated and setting it has no effect.",
+ "name": {
+ "description": "name defines the name of the label. It must have non-zero length.",
"type": "string",
"default": ""
},
- "corsAllowedOrigins": {
- "description": "corsAllowedOrigins",
+ "value": {
+ "description": "value defines the literal value of the label.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "build.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageLabel",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.build.v1.ImageSource": {
+ "description": "ImageSource is used to describe build source that will be extracted from an image or used during a multi stage build. A reference of type ImageStreamTag, ImageStreamImage or DockerImage may be used. A pull secret can be specified to pull the image from an external registry or override the default service account secret if pulling from the internal registry. Image sources can either be used to extract content from an image and place it into the build context along with the repository source, or used directly during a multi-stage container image build to allow content to be copied without overwriting the contents of the repository source (see the 'paths' and 'as' fields).",
+ "type": "object",
+ "required": [
+ "from"
+ ],
+ "properties": {
+ "as": {
+ "description": "A list of image names that this source will be used in place of during a multi-stage container image build. For instance, a Dockerfile that uses \"COPY --from=nginx:latest\" will first check for an image source that has \"nginx:latest\" in this field before attempting to pull directly. If the Dockerfile does not reference an image source it is ignored. This field and paths may both be set, in which case the contents will be used twice.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "imagePolicyConfig": {
- "description": "imagePolicyConfig feeds the image policy admission plugin",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeAPIServerImagePolicyConfig"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "kubeClientConfig": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig"
- },
- "kubeletClientInfo": {
- "description": "kubeletClientInfo contains information about how to connect to kubelets",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeletConnectionInfo"
- },
- "oauthConfig": {
- "description": "oauthConfig, if present start the /oauth endpoint in this process",
- "$ref": "#/definitions/io.openshift.config.osin.v1.OAuthConfig"
- },
- "projectConfig": {
- "description": "projectConfig feeds an admission plugin",
+ "from": {
+ "description": "from is a reference to an ImageStreamTag, ImageStreamImage, or DockerImage to copy source from.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeAPIServerProjectConfig"
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
},
- "serviceAccountPublicKeyFiles": {
- "description": "serviceAccountPublicKeyFiles is a list of files, each containing a PEM-encoded public RSA key. (If any file contains a private key, the public portion of the key is used) The list of public keys is used to verify presented service account tokens. Each key is tried in order until the list is exhausted or verification succeeds. If no keys are specified, no service account authentication will be available.",
+ "paths": {
+ "description": "paths is a list of source and destination paths to copy from the image. This content will be copied into the build context prior to starting the build. If no paths are set, the build context will not be altered.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.ImageSourcePath"
}
},
- "servicesNodePortRange": {
- "description": "servicesNodePortRange is the range to use for assigning service public ports on a host.",
- "type": "string",
- "default": ""
- },
- "servicesSubnet": {
- "description": "servicesSubnet is the subnet to use for assigning service IPs",
- "type": "string",
- "default": ""
- },
- "servingInfo": {
- "description": "servingInfo describes how to start serving",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
- },
- "storageConfig": {
- "description": "storageConfig contains information about how to use",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig"
- },
- "userAgentMatchingConfig": {
- "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.UserAgentMatchingConfig"
+ "pullSecret": {
+ "description": "pullSecret is a reference to a secret to be used to pull the image from a registry If the image is pulled from the OpenShift registry, this field does not need to be set.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "KubeAPIServerConfig",
+ "Kind": "ImageSource",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.KubeAPIServerImagePolicyConfig": {
+ "io.openshift.build.v1.ImageSourcePath": {
+ "description": "ImageSourcePath describes a path to be copied from a source image and its destination within the build directory.",
"type": "object",
"required": [
- "internalRegistryHostname",
- "externalRegistryHostnames"
+ "sourcePath",
+ "destinationDir"
],
"properties": {
- "externalRegistryHostnames": {
- "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "destinationDir": {
+ "description": "destinationDir is the relative directory within the build directory where files copied from the image are placed.",
+ "type": "string",
+ "default": ""
},
- "internalRegistryHostname": {
- "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.",
+ "sourcePath": {
+ "description": "sourcePath is the absolute path of the file or directory inside the image to copy to the build directory. If the source path ends in /. then the content of the directory will be copied, but the directory itself will not be created at the destination.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "KubeAPIServerImagePolicyConfig",
+ "Kind": "ImageSourcePath",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.KubeAPIServerProjectConfig": {
+ "io.openshift.build.v1.ImageStreamTagReference": {
+ "description": "ImageStreamTagReference references the ImageStreamTag in an image change trigger by namespace and name.",
"type": "object",
- "required": [
- "defaultNodeSelector"
- ],
"properties": {
- "defaultNodeSelector": {
- "description": "defaultNodeSelector holds default project node label selector",
- "type": "string",
- "default": ""
+ "name": {
+ "description": "name is the name of the ImageStreamTag for an ImageChangeTrigger",
+ "type": "string"
+ },
+ "namespace": {
+ "description": "namespace is the namespace where the ImageStreamTag for an ImageChangeTrigger is located",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "KubeAPIServerProjectConfig",
+ "Kind": "ImageStreamTagReference",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.KubeControllerManagerConfig": {
- "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.build.v1.JenkinsPipelineBuildStrategy": {
+ "description": "JenkinsPipelineBuildStrategy holds parameters specific to a Jenkins Pipeline build. Deprecated: use OpenShift Pipelines",
"type": "object",
- "required": [
- "serviceServingCert",
- "projectConfig",
- "extendedArguments"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "extendedArguments": {
- "description": "extendedArguments is used to configure the kube-controller-manager",
- "type": "object",
- "additionalProperties": {
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "env": {
+ "description": "env contains additional environment variables you want to pass into a build pipeline.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "jenkinsfile": {
+ "description": "Jenkinsfile defines the optional raw contents of a Jenkinsfile which defines a Jenkins pipeline build.",
"type": "string"
},
- "projectConfig": {
- "description": "projectConfig is an optimization for the daemonset controller",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeControllerManagerProjectConfig"
+ "jenkinsfilePath": {
+ "description": "JenkinsfilePath is the optional path of the Jenkinsfile that will be used to configure the pipeline relative to the root of the context (contextDir). If both JenkinsfilePath \u0026 Jenkinsfile are both not specified, this defaults to Jenkinsfile in the root of the specified contextDir.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "build.openshift.io",
+ "Version": "v1",
+ "Kind": "JenkinsPipelineBuildStrategy",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.build.v1.ProxyConfig": {
+ "description": "ProxyConfig defines what proxies to use for an operation",
+ "type": "object",
+ "properties": {
+ "httpProxy": {
+ "description": "httpProxy is a proxy used to reach the git repository over http",
+ "type": "string"
},
- "serviceServingCert": {
- "description": "serviceServingCert provides support for the old alpha service serving cert signer CA bundle",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.ServiceServingCert"
+ "httpsProxy": {
+ "description": "httpsProxy is a proxy used to reach the git repository over https",
+ "type": "string"
+ },
+ "noProxy": {
+ "description": "noProxy is the list of domains for which the proxy should not be used",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Type": "nested",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "KubeControllerManagerConfig",
+ "Kind": "ProxyConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.KubeControllerManagerProjectConfig": {
+ "io.openshift.build.v1.SecretBuildSource": {
+ "description": "SecretBuildSource describes a secret and its destination directory that will be used only at the build time. The content of the secret referenced here will be copied into the destination directory instead of mounting.",
"type": "object",
"required": [
- "defaultNodeSelector"
+ "secret"
],
"properties": {
- "defaultNodeSelector": {
- "description": "defaultNodeSelector holds default project node label selector",
- "type": "string",
- "default": ""
+ "destinationDir": {
+ "description": "destinationDir is the directory where the files from the secret should be available for the build time. For the Source build strategy, these will be injected into a container where the assemble script runs. Later, when the script finishes, all files injected will be truncated to zero length. For the container image build strategy, these will be copied into the build directory, where the Dockerfile is located, so users can ADD or COPY them during container image build.",
+ "type": "string"
+ },
+ "secret": {
+ "description": "secret is a reference to an existing secret that you want to use in your build.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "KubeControllerManagerProjectConfig",
+ "Kind": "SecretBuildSource",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.KubeletConnectionInfo": {
- "description": "KubeletConnectionInfo holds information necessary for connecting to a kubelet",
+ "io.openshift.build.v1.SecretLocalReference": {
+ "description": "SecretLocalReference contains information that points to the local secret being used",
"type": "object",
"required": [
- "port",
- "ca",
- "certFile",
- "keyFile"
+ "name"
],
"properties": {
- "ca": {
- "description": "ca is the CA for verifying TLS connections to kubelets",
- "type": "string",
- "default": ""
- },
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
- "type": "string",
- "default": ""
- },
- "keyFile": {
- "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "name": {
+ "description": "Name is the name of the resource in the same namespace being referenced",
"type": "string",
"default": ""
- },
- "port": {
- "description": "port is the port to connect to kubelets on",
- "type": "integer",
- "format": "int64",
- "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "KubeletConnectionInfo",
+ "Kind": "SecretLocalReference",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.MasterAuthConfig": {
- "description": "MasterAuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators",
+ "io.openshift.build.v1.SecretSpec": {
+ "description": "SecretSpec specifies a secret to be included in a build pod and its corresponding mount point",
"type": "object",
"required": [
- "requestHeader",
- "webhookTokenAuthenticators",
- "oauthMetadataFile"
+ "secretSource",
+ "mountPath"
],
"properties": {
- "oauthMetadataFile": {
- "description": "oauthMetadataFile is a path to a file containing the discovery endpoint for OAuth 2.0 Authorization Server Metadata for an external OAuth server. See IETF Draft: // https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This option is mutually exclusive with OAuthConfig",
+ "mountPath": {
+ "description": "mountPath is the path at which to mount the secret",
"type": "string",
"default": ""
},
- "requestHeader": {
- "description": "requestHeader holds options for setting up a front proxy against the API. It is optional.",
- "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.RequestHeaderAuthenticationOptions"
- },
- "webhookTokenAuthenticators": {
- "description": "webhookTokenAuthenticators, if present configures remote token reviewers",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.WebhookTokenAuthenticator"
- }
+ "secretSource": {
+ "description": "secretSource is a reference to the secret",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "MasterAuthConfig",
+ "Kind": "SecretSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.RequestHeaderAuthenticationOptions": {
- "description": "RequestHeaderAuthenticationOptions provides options for setting up a front proxy against the entire API instead of against the /oauth endpoint.",
+ "io.openshift.build.v1.SourceBuildStrategy": {
+ "description": "SourceBuildStrategy defines input parameters specific to an Source build.",
"type": "object",
"required": [
- "clientCA",
- "clientCommonNames",
- "usernameHeaders",
- "groupHeaders",
- "extraHeaderPrefixes"
+ "from"
],
"properties": {
- "clientCA": {
- "description": "clientCA is a file with the trusted signer certs. It is required.",
- "type": "string",
- "default": ""
- },
- "clientCommonNames": {
- "description": "clientCommonNames is a required list of common names to require a match from.",
+ "env": {
+ "description": "env contains additional environment variables you want to pass into a builder container.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
}
},
- "extraHeaderPrefixes": {
- "description": "extraHeaderPrefixes is the set of request header prefixes to inspect for user extra. X-Remote-Extra- is suggested.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "forcePull": {
+ "description": "forcePull describes if the builder should pull the images from registry prior to building.",
+ "type": "boolean"
},
- "groupHeaders": {
- "description": "groupHeaders is the set of headers to check for group information. All are unioned.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "from": {
+ "description": "from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which the container image should be pulled",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
},
- "usernameHeaders": {
- "description": "usernameHeaders is the list of headers to check for user information. First hit wins.",
+ "incremental": {
+ "description": "incremental flag forces the Source build to do incremental builds if true.",
+ "type": "boolean"
+ },
+ "pullSecret": {
+ "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "scripts": {
+ "description": "scripts is the location of Source scripts",
+ "type": "string"
+ },
+ "volumes": {
+ "description": "volumes is a list of input volumes that can be mounted into the builds runtime environment. Only a subset of Kubernetes Volume sources are supported by builds. More info: https://kubernetes.io/docs/concepts/storage/volumes",
"type": "array",
"items": {
- "type": "string",
- "default": ""
- }
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.BuildVolume"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "name",
+ "x-kubernetes-patch-strategy": "merge"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "RequestHeaderAuthenticationOptions",
+ "Kind": "SourceBuildStrategy",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.ServiceServingCert": {
- "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.",
+ "io.openshift.build.v1.SourceControlUser": {
+ "description": "SourceControlUser defines the identity of a user of source control",
"type": "object",
- "required": [
- "certFile"
- ],
"properties": {
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
- "type": "string",
- "default": ""
+ "email": {
+ "description": "email of the source control user",
+ "type": "string"
+ },
+ "name": {
+ "description": "name of the source control user",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "ServiceServingCert",
+ "Kind": "SourceControlUser",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.UserAgentDenyRule": {
- "description": "UserAgentDenyRule adds a rejection message that can be used to help a user figure out how to get an approved client",
+ "io.openshift.build.v1.SourceRevision": {
+ "description": "SourceRevision is the revision or commit information from the source for the build",
"type": "object",
"required": [
- "regex",
- "httpVerbs",
- "rejectionMessage"
+ "type"
],
"properties": {
- "httpVerbs": {
- "description": "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "regex": {
- "description": "regex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f",
- "type": "string",
- "default": ""
+ "git": {
+ "description": "Git contains information about git-based build source",
+ "$ref": "#/definitions/io.openshift.build.v1.GitSourceRevision"
},
- "rejectionMessage": {
- "description": "RejectionMessage is the message shown when rejecting a client. If it is not a set, the default message is used.",
+ "type": {
+ "description": "type of the build source, may be one of 'Source', 'Dockerfile', 'Binary', or 'Images'",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "UserAgentDenyRule",
+ "Kind": "SourceRevision",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.UserAgentMatchRule": {
- "description": "UserAgentMatchRule describes how to match a given request based on User-Agent and HTTPVerb",
+ "io.openshift.build.v1.SourceStrategyOptions": {
+ "description": "SourceStrategyOptions contains extra strategy options for Source builds",
"type": "object",
- "required": [
- "regex",
- "httpVerbs"
- ],
"properties": {
- "httpVerbs": {
- "description": "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "regex": {
- "description": "regex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f",
- "type": "string",
- "default": ""
+ "incremental": {
+ "description": "incremental overrides the source-strategy incremental option in the build config",
+ "type": "boolean"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "UserAgentMatchRule",
+ "Kind": "SourceStrategyOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.UserAgentMatchingConfig": {
- "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!",
+ "io.openshift.build.v1.StageInfo": {
+ "description": "StageInfo contains details about a build stage.",
"type": "object",
- "required": [
- "requiredClients",
- "deniedClients",
- "defaultRejectionMessage"
- ],
"properties": {
- "defaultRejectionMessage": {
- "description": "defaultRejectionMessage is the message shown when rejecting a client. If it is not a set, a generic message is given.",
- "type": "string",
- "default": ""
+ "durationMilliseconds": {
+ "description": "durationMilliseconds identifies how long the stage took to complete in milliseconds. Note: the duration of a stage can exceed the sum of the duration of the steps within the stage as not all actions are accounted for in explicit build steps.",
+ "type": "integer",
+ "format": "int64"
},
- "deniedClients": {
- "description": "deniedClients if this list is non-empty, then a User-Agent must not match any of the UserAgentRegexes",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.UserAgentDenyRule"
- }
+ "name": {
+ "description": "name is a unique identifier for each build stage that occurs.",
+ "type": "string"
},
- "requiredClients": {
- "description": "requiredClients if this list is non-empty, then a User-Agent must match one of the UserAgentRegexes to be allowed",
+ "startTime": {
+ "description": "startTime is a timestamp representing the server time when this Stage started. It is represented in RFC3339 form and is in UTC.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "steps": {
+ "description": "steps contains details about each step that occurs during a build stage including start time and duration in milliseconds.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.UserAgentMatchRule"
+ "$ref": "#/definitions/io.openshift.build.v1.StepInfo"
}
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "UserAgentMatchingConfig",
+ "Kind": "StageInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.kubecontrolplane.v1.WebhookTokenAuthenticator": {
- "description": "WebhookTokenAuthenticators holds the necessary configuation options for external token authenticators",
+ "io.openshift.build.v1.StepInfo": {
+ "description": "StepInfo contains details about a build step.",
"type": "object",
- "required": [
- "configFile",
- "cacheTTL"
- ],
"properties": {
- "cacheTTL": {
- "description": "cacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get a default timeout of 2 minutes. If zero (e.g. \"0m\"), caching is disabled",
- "type": "string",
- "default": ""
+ "durationMilliseconds": {
+ "description": "durationMilliseconds identifies how long the step took to complete in milliseconds.",
+ "type": "integer",
+ "format": "int64"
},
- "configFile": {
- "description": "configFile is a path to a Kubeconfig file with the webhook configuration",
- "type": "string",
- "default": ""
+ "name": {
+ "description": "name is a unique identifier for each build step.",
+ "type": "string"
+ },
+ "startTime": {
+ "description": "startTime is a timestamp representing the server time when this Step started. it is represented in RFC3339 form and is in UTC.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "kubecontrolplane.config.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "WebhookTokenAuthenticator",
+ "Kind": "StepInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.ActiveDirectoryConfig": {
- "description": "ActiveDirectoryConfig holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the Active Directory schema",
+ "io.openshift.build.v1.WebHookTrigger": {
+ "description": "WebHookTrigger is a trigger that gets invoked using a webhook type of post",
"type": "object",
- "required": [
- "usersQuery",
- "userNameAttributes",
- "groupMembershipAttributes"
- ],
"properties": {
- "groupMembershipAttributes": {
- "description": "GroupMembershipAttributes defines which attributes on an LDAP user entry will be interpreted as the groups it is a member of",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "allowEnv": {
+ "description": "allowEnv determines whether the webhook can set environment variables; can only be set to true for GenericWebHook.",
+ "type": "boolean"
},
- "userNameAttributes": {
- "description": "UserNameAttributes defines which attributes on an LDAP user entry will be interpreted as its OpenShift user name.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "secret": {
+ "description": "secret used to validate requests. Deprecated: use SecretReference instead.",
+ "type": "string"
},
- "usersQuery": {
- "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery"
+ "secretReference": {
+ "description": "secretReference is a reference to a secret in the same namespace, containing the value to be validated when the webhook is invoked. The secret being referenced must contain a key named \"WebHookSecretKey\", the value of which will be checked against the value supplied in the webhook invocation.",
+ "$ref": "#/definitions/io.openshift.build.v1.SecretLocalReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Group": "build.openshift.io",
"Version": "v1",
- "Kind": "ActiveDirectoryConfig",
+ "Kind": "WebHookTrigger",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.AdmissionConfig": {
- "description": "AdmissionConfig holds the necessary configuration options for admission",
+ "io.openshift.cloudcredential.v1.AWSProviderSpec": {
+ "description": "AWSProviderSpec contains the required information to create a user policy in AWS.",
"type": "object",
"required": [
- "pluginConfig"
+ "statementEntries"
],
"properties": {
- "pluginConfig": {
- "description": "PluginConfig allows specifying a configuration file per admission control plugin",
- "type": "object",
- "additionalProperties": {
- "$ref": "#/definitions/io.openshift.config.legacy.v1.AdmissionPluginConfig"
- }
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "pluginOrderOverride": {
- "description": "PluginOrderOverride is a list of admission control plugin names that will be installed on the master. Order is significant. If empty, a default list of plugins is used.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "statementEntries": {
+ "description": "StatementEntries contains a list of policy statements that should be associated with this credentials access key.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.cloudcredential.v1.StatementEntry"
}
+ },
+ "stsIAMRoleARN": {
+ "description": "stsIAMRoleARN is the Amazon Resource Name (ARN) of an IAM Role which was created manually for the associated CredentialsRequest. The presence of an stsIAMRoleARN within the AWSProviderSpec initiates creation of a secret containing IAM Role details necessary for assuming the IAM Role via Amazon's Secure Token Service.",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "AdmissionConfig",
+ "Kind": "AWSProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.AdmissionPluginConfig": {
- "description": "AdmissionPluginConfig holds the necessary configuration options for admission plugins",
+ "io.openshift.cloudcredential.v1.AWSProviderStatus": {
+ "description": "AWSProviderStatus containes the status of the credentials request in AWS.",
"type": "object",
"required": [
- "location",
- "configuration"
+ "user",
+ "policy"
],
"properties": {
- "configuration": {
- "description": "Configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "location": {
- "description": "Location is the path to a configuration file that contains the plugin's configuration",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "policy": {
+ "description": "Policy is the name of the policy attached to the user in AWS.",
+ "type": "string",
+ "default": ""
+ },
+ "user": {
+ "description": "User is the name of the User created in AWS for these credentials.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "AdmissionPluginConfig",
+ "Kind": "AWSProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.AggregatorConfig": {
- "description": "AggregatorConfig holds information required to make the aggregator function.",
+ "io.openshift.cloudcredential.v1.AccessPolicy": {
+ "description": "AccessPolicy is a definition of an IAM access policy",
"type": "object",
"required": [
- "proxyClientInfo"
+ "attributes",
+ "roles"
],
"properties": {
- "proxyClientInfo": {
- "description": "ProxyClientInfo specifies the client cert/key to use when proxying to aggregated API servers",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.CertInfo"
+ "attributes": {
+ "description": "Attributes identify the resources to which this policy applies",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.cloudcredential.v1.ResourceAttribute"
+ }
+ },
+ "roles": {
+ "description": "Roles are the IAM roles assigned to this policy",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "AggregatorConfig",
+ "Kind": "AccessPolicy",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.AllowAllPasswordIdentityProvider": {
- "description": "AllowAllPasswordIdentityProvider provides identities for users authenticating using non-empty passwords\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.cloudcredential.v1.AzureProviderSpec": {
+ "description": "AzureProviderSpec contains the required information to create RBAC role bindings for Azure.",
"type": "object",
+ "required": [
+ "roleBindings"
+ ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
+ "azureClientID": {
+ "description": "The following fields are only required for Azure Workload Identity. AzureClientID is the ID of the specific application you created in Azure",
+ "type": "string"
+ },
+ "azureRegion": {
+ "description": "AzureRegion is the geographic region of the Azure service.",
+ "type": "string"
+ },
+ "azureSubscriptionID": {
+ "description": "Each Azure subscription has an ID associated with it, as does the tenant to which a subscription belongs. AzureSubscriptionID is the ID of the subscription.",
+ "type": "string"
+ },
+ "azureTenantID": {
+ "description": "AzureTenantID is the ID of the tenant to which the subscription belongs.",
+ "type": "string"
+ },
+ "dataPermissions": {
+ "description": "DataPermissions is the list of Azure data permissions required to create a more fine-grained custom role to satisfy the CredentialsRequest. The DataPermissions field may be provided in addition to RoleBindings. When both fields are specified, the user-assigned managed identity will have union of permissions defined from both DataPermissions and RoleBindings.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "permissions": {
+ "description": "Permissions is the list of Azure permissions required to create a more fine-grained custom role to satisfy the CredentialsRequest. The Permissions field may be provided in addition to RoleBindings. When both fields are specified, the user-assigned managed identity will have union of permissions defined from both Permissions and RoleBindings.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "roleBindings": {
+ "description": "RoleBindings contains a list of roles that should be associated with the minted credential.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.cloudcredential.v1.RoleBinding"
+ }
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "legacy.config.openshift.io",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "AllowAllPasswordIdentityProvider",
+ "Kind": "AzureProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.AuditConfig": {
- "description": "AuditConfig holds configuration for the audit capabilities",
+ "io.openshift.cloudcredential.v1.AzureProviderStatus": {
+ "description": "AzureProviderStatus contains the status of the credentials request in Azure.",
"type": "object",
"required": [
- "enabled",
- "auditFilePath",
- "maximumFileRetentionDays",
- "maximumRetainedFiles",
- "maximumFileSizeMegabytes",
- "policyFile",
- "policyConfiguration",
- "logFormat",
- "webHookKubeConfig",
- "webHookMode"
+ "name",
+ "appID",
+ "secretLastResourceVersion"
],
"properties": {
- "auditFilePath": {
- "description": "All requests coming to the apiserver will be logged to this file.",
- "type": "string",
- "default": ""
- },
- "enabled": {
- "description": "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.",
- "type": "boolean",
- "default": false
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "logFormat": {
- "description": "Format of saved audits (legacy or json).",
+ "appID": {
+ "description": "AppID is the application id of the service principal created in Azure for these credentials.",
"type": "string",
"default": ""
},
- "maximumFileRetentionDays": {
- "description": "Maximum number of days to retain old log files based on the timestamp encoded in their filename.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "maximumFileSizeMegabytes": {
- "description": "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "maximumRetainedFiles": {
- "description": "Maximum number of old log files to retain.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "policyConfiguration": {
- "description": "PolicyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "policyFile": {
- "description": "PolicyFile is a path to the file that defines the audit policy configuration.",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "webHookKubeConfig": {
- "description": "Path to a .kubeconfig formatted file that defines the audit webhook configuration.",
+ "name": {
+ "description": "ServicePrincipalName is the name of the service principal created in Azure for these credentials.",
"type": "string",
"default": ""
},
- "webHookMode": {
- "description": "Strategy for sending audit events (block or batch).",
+ "secretLastResourceVersion": {
+ "description": "SecretLastResourceVersion is the resource version of the secret resource that was last synced. Used to determine if the object has changed and requires a sync.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "AuditConfig",
+ "Kind": "AzureProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.AugmentedActiveDirectoryConfig": {
- "description": "AugmentedActiveDirectoryConfig holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the augmented Active Directory schema",
+ "io.openshift.cloudcredential.v1.CredentialsRequest": {
+ "description": "CredentialsRequest is the Schema for the credentialsrequests API",
"type": "object",
"required": [
- "usersQuery",
- "userNameAttributes",
- "groupMembershipAttributes",
- "groupsQuery",
- "groupUIDAttribute",
- "groupNameAttributes"
+ "spec"
],
"properties": {
- "groupMembershipAttributes": {
- "description": "GroupMembershipAttributes defines which attributes on an LDAP user entry will be interpreted as the groups it is a member of",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "groupNameAttributes": {
- "description": "GroupNameAttributes defines which attributes on an LDAP group entry will be interpreted as its name to use for an OpenShift group",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "groupUIDAttribute": {
- "description": "GroupUIDAttributes defines which attribute on an LDAP group entry will be interpreted as its unique identifier. (ldapGroupUID)",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "groupsQuery": {
- "description": "AllGroupsQuery holds the template for an LDAP query that returns group entries.",
+ "metadata": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "userNameAttributes": {
- "description": "UserNameAttributes defines which attributes on an LDAP user entry will be interpreted as its OpenShift user name.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequestSpec"
},
- "usersQuery": {
- "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.",
+ "status": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery"
+ "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequestStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "AugmentedActiveDirectoryConfig",
+ "Kind": "CredentialsRequest",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.BasicAuthPasswordIdentityProvider": {
- "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.cloudcredential.v1.CredentialsRequestCondition": {
+ "description": "CredentialsRequestCondition contains details for any of the conditions on a CredentialsRequest object",
"type": "object",
"required": [
- "url",
- "ca",
- "certFile",
- "keyFile"
+ "type",
+ "status"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "lastProbeTime": {
+ "description": "LastProbeTime is the last time we probed the condition",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "ca": {
- "description": "CA is the CA for verifying TLS connections",
- "type": "string",
- "default": ""
+ "lastTransitionTime": {
+ "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
- "type": "string",
- "default": ""
+ "message": {
+ "description": "Message is a human-readable message indicating details about the last transition",
+ "type": "string"
},
- "keyFile": {
- "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "reason": {
+ "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition",
+ "type": "string"
+ },
+ "status": {
+ "description": "Status is the status of the condition",
"type": "string",
"default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "url": {
- "description": "URL is the remote URL to connect to",
+ "type": {
+ "description": "Type is the specific type of the condition",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "legacy.config.openshift.io",
+ "Type": "nested",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "BasicAuthPasswordIdentityProvider",
+ "Kind": "CredentialsRequestCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.BuildDefaultsConfig": {
- "description": "BuildDefaultsConfig controls the default information for Builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.cloudcredential.v1.CredentialsRequestList": {
+ "description": "CredentialsRequestList contains a list of CredentialsRequest",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "annotations": {
- "description": "annotations are annotations that will be added to the build pod",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "env": {
- "description": "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
- }
- },
- "gitHTTPProxy": {
- "description": "gitHTTPProxy is the location of the HTTPProxy for Git source",
- "type": "string"
- },
- "gitHTTPSProxy": {
- "description": "gitHTTPSProxy is the location of the HTTPSProxy for Git source",
- "type": "string"
- },
- "gitNoProxy": {
- "description": "gitNoProxy is the list of domains for which the proxy should not be used",
- "type": "string"
- },
- "imageLabels": {
- "description": "imageLabels is a list of labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.",
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.build.v1.ImageLabel"
+ "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequest"
}
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "nodeSelector": {
- "description": "nodeSelector is a selector which must be true for the build pod to fit on a node",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "resources": {
- "description": "resources defines resource requirements to execute the build.",
+ "metadata": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
- },
- "sourceStrategyDefaults": {
- "description": "sourceStrategyDefaults are default values that apply to builds using the source strategy.",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.SourceStrategyDefaultsConfig"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "legacy.config.openshift.io",
- "Version": "v1",
- "Kind": "BuildDefaultsConfig",
+ "Type": "list",
+ "Group": "cloudcredential.openshift.io",
+ "Version": "v1",
+ "Kind": "CredentialsRequestList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.BuildOverridesConfig": {
- "description": "BuildOverridesConfig controls override settings for builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.cloudcredential.v1.CredentialsRequestSpec": {
+ "description": "CredentialsRequestSpec defines the desired state of CredentialsRequest",
"type": "object",
"required": [
- "forcePull"
+ "secretRef"
],
"properties": {
- "annotations": {
- "description": "annotations are annotations that will be added to the build pod",
- "type": "object",
- "additionalProperties": {
+ "cloudTokenPath": {
+ "description": "cloudTokenPath is the path where the Kubernetes ServiceAccount token (JSON Web Token) is mounted on the deployment for the workload requesting a credentials secret. The presence of this field in combination with fields such as spec.providerSpec.stsIAMRoleARN indicate that CCO should broker creation of a credentials secret containing fields necessary for token based authentication methods such as with the AWS Secure Token Service (STS).\n\ncloudTokenPath may also be used to specify the azure_federated_token_file path used in Azure configuration secrets generated by ccoctl. Defaults to \"/var/run/secrets/openshift/serviceaccount/token\".",
+ "type": "string"
+ },
+ "providerSpec": {
+ "description": "ProviderSpec contains the cloud provider specific credentials specification.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "secretRef": {
+ "description": "SecretRef points to the secret where the credentials should be stored once generated.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "serviceAccountNames": {
+ "description": "ServiceAccountNames contains a list of ServiceAccounts that will use permissions associated with this CredentialsRequest. This is not used by CCO, but the information is needed for being able to properly set up access control in the cloud provider when the ServiceAccounts are used as part of the cloud credentials flow.",
+ "type": "array",
+ "items": {
"type": "string",
"default": ""
}
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "cloudcredential.openshift.io",
+ "Version": "v1",
+ "Kind": "CredentialsRequestSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.cloudcredential.v1.CredentialsRequestStatus": {
+ "description": "CredentialsRequestStatus defines the observed state of CredentialsRequest",
+ "type": "object",
+ "required": [
+ "provisioned",
+ "lastSyncGeneration"
+ ],
+ "properties": {
+ "conditions": {
+ "description": "Conditions includes detailed status for the CredentialsRequest",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequestCondition"
+ }
},
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "lastSyncCloudCredsSecretResourceVersion": {
+ "description": "LastSyncCloudCredsSecretResourceVersion is the resource version of the cloud credentials secret resource when the credentials request resource was last synced. Used to determine if the cloud credentials have been updated since the last sync.",
"type": "string"
},
- "forcePull": {
- "description": "forcePull indicates whether the build strategy should always be set to ForcePull=true",
+ "lastSyncGeneration": {
+ "description": "LastSyncGeneration is the generation of the credentials request resource that was last synced. Used to determine if the object has changed and requires a sync.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "lastSyncTimestamp": {
+ "description": "LastSyncTimestamp is the time that the credentials were last synced.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "providerStatus": {
+ "description": "ProviderStatus contains cloud provider specific status.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "provisioned": {
+ "description": "Provisioned is true once the credentials have been initially provisioned.",
"type": "boolean",
"default": false
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "cloudcredential.openshift.io",
+ "Version": "v1",
+ "Kind": "CredentialsRequestStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.cloudcredential.v1.GCPProviderSpec": {
+ "description": "GCPProviderSpec contains the required information to create a service account with policy bindings in GCP.",
+ "type": "object",
+ "required": [
+ "predefinedRoles"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "imageLabels": {
- "description": "imageLabels is a list of labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.ImageLabel"
- }
+ "audience": {
+ "description": "Audience that will be used with Workload Identity Federation. It should be formatted as follows: \"//iam.googleapis.com/projects/\u003cPROJECT_NUMBER\u003e/locations/global/workloadIdentityPools/\u003cPOOL_ID\u003e/providers/\u003cPROVIDER_ID\u003e\" For more information see https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#create-credential-config",
+ "type": "string"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "nodeSelector": {
- "description": "nodeSelector is a selector which must be true for the build pod to fit on a node",
- "type": "object",
- "additionalProperties": {
+ "permissions": {
+ "description": "Permissions is the list of GCP permissions required to create a more fine-grained custom role to satisfy the CredentialsRequest. The Permissions field may be provided in addition to PredefinedRoles. When both fields are specified, the service account will have union of permissions defined from both Permissions and PredefinedRoles.",
+ "type": "array",
+ "items": {
"type": "string",
"default": ""
}
},
- "tolerations": {
- "description": "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.",
+ "predefinedRoles": {
+ "description": "PredefinedRoles is the list of GCP pre-defined roles that the CredentialsRequest requires.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
+ "type": "string",
+ "default": ""
}
+ },
+ "serviceAccountEmail": {
+ "description": "ServiceAccountEmail that will be impersonated during Workload Identity Federation.",
+ "type": "string"
+ },
+ "skipServiceCheck": {
+ "description": "SkipServiceCheck can be set to true to skip the check whether the requested roles or permissions have the necessary services enabled",
+ "type": "boolean"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "legacy.config.openshift.io",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "BuildOverridesConfig",
+ "Kind": "GCPProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.CertInfo": {
- "description": "CertInfo relates a certificate with a private key",
+ "io.openshift.cloudcredential.v1.GCPProviderStatus": {
+ "description": "GCPProviderStatus contains the status of the GCP credentials request.",
"type": "object",
"required": [
- "certFile",
- "keyFile"
+ "serviceAccountID"
],
"properties": {
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "keyFile": {
- "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "roleID": {
+ "description": "RoleID is the ID of the custom role created in GCP for the requested permissions apart from permissions granted by the pre-defined roles. RoleID is set by the Cloud Credential Operator controllers and should not be set manually.",
+ "type": "string"
+ },
+ "serviceAccountID": {
+ "description": "ServiceAccountID is the ID of the service account created in GCP for the requested credentials.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "CertInfo",
+ "Kind": "GCPProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.ClientConnectionOverrides": {
- "description": "ClientConnectionOverrides are a set of overrides to the default client connection settings.",
+ "io.openshift.cloudcredential.v1.IBMCloudPowerVSProviderSpec": {
+ "description": "IBMCloudPowerVSProviderSpec is the specification of the credentials request in IBM Cloud Power VS.",
"type": "object",
"required": [
- "acceptContentTypes",
- "contentType",
- "qps",
- "burst"
+ "policies"
],
"properties": {
- "acceptContentTypes": {
- "description": "AcceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.",
- "type": "string",
- "default": ""
- },
- "burst": {
- "description": "Burst allows extra queries to accumulate when a client is exceeding its rate.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "contentType": {
- "description": "ContentType is the content type used when sending data to the server from this client.",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "qps": {
- "description": "QPS controls the number of queries per second allowed for this connection.",
- "type": "number",
- "format": "float",
- "default": 0
+ "policies": {
+ "description": "Policies are a list of access policies to create for the generated credentials",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.cloudcredential.v1.AccessPolicy"
+ }
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "ClientConnectionOverrides",
+ "Kind": "IBMCloudPowerVSProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.ClusterNetworkEntry": {
- "description": "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.",
+ "io.openshift.cloudcredential.v1.IBMCloudPowerVSProviderStatus": {
+ "description": "IBMCloudPowerVSProviderStatus contains the status of the IBM Cloud Power VS credentials request.",
"type": "object",
- "required": [
- "cidr",
- "hostSubnetLength"
- ],
"properties": {
- "cidr": {
- "description": "CIDR defines the total range of a cluster networks address space.",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "hostSubnetLength": {
- "description": "HostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pod.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "ClusterNetworkEntry",
+ "Kind": "IBMCloudPowerVSProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.ControllerConfig": {
- "description": "ControllerConfig holds configuration values for controllers",
+ "io.openshift.cloudcredential.v1.IBMCloudProviderSpec": {
+ "description": "IBMCloudProviderSpec is the specification of the credentials request in IBM Cloud.",
"type": "object",
"required": [
- "controllers",
- "election",
- "serviceServingCert"
+ "policies"
],
"properties": {
- "controllers": {
- "description": "Controllers is a list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller \"+ named 'foo', '-foo' disables the controller named 'foo'. Defaults to \"*\".",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "policies": {
+ "description": "Policies are a list of access policies to create for the generated credentials",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.cloudcredential.v1.AccessPolicy"
}
- },
- "election": {
- "description": "Election defines the configuration for electing a controller instance to make changes to the cluster. If unspecified, the ControllerTTL value is checked to determine whether the legacy direct etcd election code will be used.",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ControllerElectionConfig"
- },
- "serviceServingCert": {
- "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ServiceServingCert"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "ControllerConfig",
+ "Kind": "IBMCloudProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.ControllerElectionConfig": {
- "description": "ControllerElectionConfig contains configuration values for deciding how a controller will be elected to act as leader.",
+ "io.openshift.cloudcredential.v1.IBMCloudProviderStatus": {
+ "description": "IBMCloudProviderStatus contains the status of the IBM Cloud credentials request.",
"type": "object",
- "required": [
- "lockName",
- "lockNamespace",
- "lockResource"
- ],
"properties": {
- "lockName": {
- "description": "LockName is the resource name used to act as the lock for determining which controller instance should lead.",
- "type": "string",
- "default": ""
- },
- "lockNamespace": {
- "description": "LockNamespace is the resource namespace used to act as the lock for determining which controller instance should lead. It defaults to \"kube-system\"",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "lockResource": {
- "description": "LockResource is the group and resource name to use to coordinate for the controller lock. If unset, defaults to \"configmaps\".",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.GroupResource"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "ControllerElectionConfig",
+ "Kind": "IBMCloudProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.DNSConfig": {
- "description": "DNSConfig holds the necessary configuration options for DNS",
+ "io.openshift.cloudcredential.v1.KubevirtProviderSpec": {
+ "description": "KubevirtProviderSpec the specification of the credentials request in Kubevirt.",
"type": "object",
- "required": [
- "bindAddress",
- "bindNetwork",
- "allowRecursiveQueries"
- ],
"properties": {
- "allowRecursiveQueries": {
- "description": "AllowRecursiveQueries allows the DNS server on the master to answer queries recursively. Note that open resolvers can be used for DNS amplification attacks and the master DNS should not be made accessible to public networks.",
- "type": "boolean",
- "default": false
- },
- "bindAddress": {
- "description": "BindAddress is the ip:port to serve DNS on",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "bindNetwork": {
- "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "DNSConfig",
+ "Kind": "KubevirtProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.DefaultAdmissionConfig": {
- "description": "DefaultAdmissionConfig can be used to enable or disable various admission plugins. When this type is present as the `configuration` object under `pluginConfig` and *if* the admission plugin supports it, this will cause an \"off by default\" admission plugin to be enabled\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.cloudcredential.v1.KubevirtProviderStatus": {
+ "description": "KubevirtProviderSpec contains the status of the credentials request in Kubevirt.",
"type": "object",
- "required": [
- "disable"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "disable": {
- "description": "Disable turns off an admission plugin that is enabled by default.",
- "type": "boolean",
- "default": false
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
@@ -64689,14 +65715,14 @@
},
"x-fabric8-info": {
"Type": "object",
- "Group": "legacy.config.openshift.io",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "DefaultAdmissionConfig",
+ "Kind": "KubevirtProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.DenyAllPasswordIdentityProvider": {
- "description": "DenyAllPasswordIdentityProvider provides no identities for users\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.cloudcredential.v1.NutanixProviderSpec": {
+ "description": "NutanixProviderSpec the specification of the credentials request in Nutanix.",
"type": "object",
"properties": {
"apiVersion": {
@@ -64710,728 +65736,601 @@
},
"x-fabric8-info": {
"Type": "object",
- "Group": "legacy.config.openshift.io",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "DenyAllPasswordIdentityProvider",
+ "Kind": "NutanixProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.DockerConfig": {
- "description": "DockerConfig holds Docker related configuration options.",
+ "io.openshift.cloudcredential.v1.NutanixProviderStatus": {
+ "description": "NutanixProviderStatus contains the status of the credentials request in Nutanix.",
"type": "object",
- "required": [
- "execHandlerName",
- "dockerShimSocket",
- "dockerShimRootDirectory"
- ],
"properties": {
- "dockerShimRootDirectory": {
- "description": "DockershimRootDirectory is the dockershim root directory.",
- "type": "string",
- "default": ""
- },
- "dockerShimSocket": {
- "description": "DockerShimSocket is the location of the dockershim socket the kubelet uses. Currently unix socket is supported on Linux, and tcp is supported on windows. Examples:'unix:///var/run/dockershim.sock', 'tcp://localhost:3735'",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "execHandlerName": {
- "description": "ExecHandlerName is the name of the handler to use for executing commands in containers.",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "DockerConfig",
+ "Kind": "NutanixProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.EtcdConfig": {
- "description": "EtcdConfig holds the necessary configuration options for connecting with an etcd database",
+ "io.openshift.cloudcredential.v1.OpenStackProviderSpec": {
+ "description": "OpenStackProviderSpec the specification of the credentials request in OpenStack.",
"type": "object",
- "required": [
- "servingInfo",
- "address",
- "peerServingInfo",
- "peerAddress",
- "storageDirectory"
- ],
"properties": {
- "address": {
- "description": "Address is the advertised host:port for client connections to etcd",
- "type": "string",
- "default": ""
- },
- "peerAddress": {
- "description": "PeerAddress is the advertised host:port for peer connections to etcd",
- "type": "string",
- "default": ""
- },
- "peerServingInfo": {
- "description": "PeerServingInfo describes how to start serving the etcd peer",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ServingInfo"
- },
- "servingInfo": {
- "description": "ServingInfo describes how to start serving the etcd master",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ServingInfo"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "storageDirectory": {
- "description": "StorageDir is the path to the etcd storage directory",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "EtcdConfig",
+ "Kind": "OpenStackProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.EtcdConnectionInfo": {
- "description": "EtcdConnectionInfo holds information necessary for connecting to an etcd server",
+ "io.openshift.cloudcredential.v1.OpenStackProviderStatus": {
+ "description": "OpenStackProviderStatus contains the status of the credentials request in OpenStack.",
"type": "object",
- "required": [
- "urls",
- "ca",
- "certFile",
- "keyFile"
- ],
"properties": {
- "ca": {
- "description": "CA is a file containing trusted roots for the etcd server certificates",
- "type": "string",
- "default": ""
- },
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
- "type": "string",
- "default": ""
- },
- "keyFile": {
- "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "urls": {
- "description": "URLs are the URLs for etcd",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "EtcdConnectionInfo",
+ "Kind": "OpenStackProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.EtcdStorageConfig": {
- "description": "EtcdStorageConfig holds the necessary configuration options for the etcd storage underlying OpenShift and Kubernetes",
+ "io.openshift.cloudcredential.v1.OvirtProviderSpec": {
+ "description": "OvirtProviderSpec the specification of the credentials request in Ovirt.",
"type": "object",
- "required": [
- "kubernetesStorageVersion",
- "kubernetesStoragePrefix",
- "openShiftStorageVersion",
- "openShiftStoragePrefix"
- ],
"properties": {
- "kubernetesStoragePrefix": {
- "description": "KubernetesStoragePrefix is the path within etcd that the Kubernetes resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located. The default value is 'kubernetes.io'.",
- "type": "string",
- "default": ""
- },
- "kubernetesStorageVersion": {
- "description": "KubernetesStorageVersion is the API version that Kube resources in etcd should be serialized to. This value should *not* be advanced until all clients in the cluster that read from etcd have code that allows them to read the new version.",
- "type": "string",
- "default": ""
- },
- "openShiftStoragePrefix": {
- "description": "OpenShiftStoragePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located. The default value is 'openshift.io'.",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "openShiftStorageVersion": {
- "description": "OpenShiftStorageVersion is the API version that OS resources in etcd should be serialized to. This value should *not* be advanced until all clients in the cluster that read from etcd have code that allows them to read the new version.",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "EtcdStorageConfig",
+ "Kind": "OvirtProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.GitHubIdentityProvider": {
- "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.cloudcredential.v1.OvirtProviderStatus": {
+ "description": "OvirtProviderStatus contains the status of the credentials request in Ovirt.",
"type": "object",
- "required": [
- "clientID",
- "clientSecret",
- "organizations",
- "teams",
- "hostname",
- "ca"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "ca": {
- "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value.",
- "type": "string",
- "default": ""
- },
- "clientID": {
- "description": "ClientID is the oauth client ID",
- "type": "string",
- "default": ""
- },
- "clientSecret": {
- "description": "ClientSecret is the oauth client secret",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource"
- },
- "hostname": {
- "description": "Hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value that is configured at /setup/settings#hostname.",
- "type": "string",
- "default": ""
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
- },
- "organizations": {
- "description": "Organizations optionally restricts which organizations are allowed to log in",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "teams": {
- "description": "Teams optionally restricts which teams are allowed to log in. Format is \u003corg\u003e/\u003cteam\u003e.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "legacy.config.openshift.io",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "GitHubIdentityProvider",
+ "Kind": "OvirtProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.GitLabIdentityProvider": {
- "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.cloudcredential.v1.ProviderCodec": {
+ "description": "ProviderCodec is a runtime codec for providers.",
"type": "object",
"required": [
- "ca",
- "url",
- "clientID",
- "clientSecret"
+ "encoder",
+ "decoder"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "ca": {
- "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
- "type": "string",
- "default": ""
- },
- "clientID": {
- "description": "ClientID is the oauth client ID",
- "type": "string",
- "default": ""
- },
- "clientSecret": {
- "description": "ClientSecret is the oauth client secret",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "legacy": {
- "description": "Legacy determines if OAuth2 or OIDC should be used If true, OAuth2 is used If false, OIDC is used If nil and the URL's host is gitlab.com, OIDC is used Otherwise, OAuth2 is used In a future release, nil will default to using OIDC Eventually this flag will be removed and only OIDC will be used",
- "type": "boolean"
+ "decoder": {
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Decoder"
},
- "url": {
- "description": "URL is the oauth server base URL",
- "type": "string",
- "default": ""
+ "encoder": {
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Encoder"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "legacy.config.openshift.io",
+ "Type": "nested",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "GitLabIdentityProvider",
+ "Kind": "ProviderCodec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.GoogleIdentityProvider": {
- "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.cloudcredential.v1.ResourceAttribute": {
+ "description": "ResourceAttribute is an attribute associated with a resource.",
"type": "object",
"required": [
- "clientID",
- "clientSecret",
- "hostedDomain"
+ "name",
+ "value"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "clientID": {
- "description": "ClientID is the oauth client ID",
+ "name": {
+ "description": "Name is the name of an attribute.",
"type": "string",
"default": ""
},
- "clientSecret": {
- "description": "ClientSecret is the oauth client secret",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource"
+ "operator": {
+ "description": "Operator is the operator of an attribute.",
+ "type": "string"
},
- "hostedDomain": {
- "description": "HostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to",
+ "value": {
+ "description": "Value is the value of an attribute.",
"type": "string",
"default": ""
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "legacy.config.openshift.io",
+ "Type": "nested",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "GoogleIdentityProvider",
+ "Kind": "ResourceAttribute",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.GrantConfig": {
- "description": "GrantConfig holds the necessary configuration options for grant handlers",
+ "io.openshift.cloudcredential.v1.RoleBinding": {
+ "description": "RoleBinding models part of the Azure RBAC Role Binding",
"type": "object",
"required": [
- "method",
- "serviceAccountMethod"
+ "role"
],
"properties": {
- "method": {
- "description": "Method determines the default strategy to use when an OAuth client requests a grant. This method will be used only if the specific OAuth client doesn't provide a strategy of their own. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients\n - deny: always denies grant requests, useful for black-listed clients",
- "type": "string",
- "default": ""
- },
- "serviceAccountMethod": {
- "description": "ServiceAccountMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt",
+ "role": {
+ "description": "Role defines a set of permissions that should be associated with the minted credential.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "GrantConfig",
+ "Kind": "RoleBinding",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.GroupResource": {
- "description": "GroupResource points to a resource by its name and API group.",
+ "io.openshift.cloudcredential.v1.StatementEntry": {
+ "description": "StatementEntry models an AWS policy statement entry.",
"type": "object",
"required": [
- "group",
+ "effect",
+ "action",
"resource"
],
"properties": {
- "group": {
- "description": "Group is the name of an API group",
+ "action": {
+ "description": "Action describes the particular AWS service actions that should be allowed or denied. (i.e. ec2:StartInstances, iam:ChangePassword)",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "effect": {
+ "description": "Effect indicates if this policy statement is to Allow or Deny.",
"type": "string",
"default": ""
},
+ "policyCondition": {
+ "description": "PolicyCondition specifies under which condition StatementEntry will apply",
+ "type": "object",
+ "additionalProperties": {
+ "type": "object",
+ "additionalProperties": {
+ "type": "object"
+ }
+ }
+ },
"resource": {
- "description": "Resource is the name of a resource.",
+ "description": "Resource specifies the object(s) this statement should apply to. (or \"*\" for all)",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "GroupResource",
+ "Kind": "StatementEntry",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.HTPasswdPasswordIdentityProvider": {
- "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.cloudcredential.v1.VSpherePermission": {
+ "description": "VSpherePermission captures the details of the privileges being requested for the list of entities.",
"type": "object",
"required": [
- "file"
+ "privileges"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "file": {
- "description": "File is a reference to your htpasswd file",
- "type": "string",
- "default": ""
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "privileges": {
+ "description": "Privileges is the list of access being requested.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "legacy.config.openshift.io",
+ "Type": "nested",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "HTPasswdPasswordIdentityProvider",
+ "Kind": "VSpherePermission",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.HTTPServingInfo": {
- "description": "HTTPServingInfo holds configuration for serving HTTP",
+ "io.openshift.cloudcredential.v1.VSphereProviderSpec": {
+ "description": "VSphereProviderSpec contains the required information to create RBAC role bindings for VSphere.",
"type": "object",
"required": [
- "bindAddress",
- "bindNetwork",
- "certFile",
- "keyFile",
- "clientCA",
- "namedCertificates",
- "maxRequestsInFlight",
- "requestTimeoutSeconds"
+ "permissions"
],
"properties": {
- "bindAddress": {
- "description": "BindAddress is the ip:port to serve on",
- "type": "string",
- "default": ""
- },
- "bindNetwork": {
- "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"",
- "type": "string",
- "default": ""
- },
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
- "type": "string",
- "default": ""
- },
- "cipherSuites": {
- "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "clientCA": {
- "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates",
- "type": "string",
- "default": ""
- },
- "keyFile": {
- "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
- "type": "string",
- "default": ""
- },
- "maxRequestsInFlight": {
- "description": "MaxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "minTLSVersion": {
- "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "namedCertificates": {
- "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames",
+ "permissions": {
+ "description": "Permissions contains a list of groups of privileges that are being requested.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.NamedCertificate"
+ "$ref": "#/definitions/io.openshift.cloudcredential.v1.VSpherePermission"
}
- },
- "requestTimeoutSeconds": {
- "description": "RequestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.",
- "type": "integer",
- "format": "int32",
- "default": 0
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "HTTPServingInfo",
+ "Kind": "VSphereProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.IdentityProvider": {
- "description": "IdentityProvider provides identities for users authenticating using credentials",
+ "io.openshift.cloudcredential.v1.VSphereProviderStatus": {
+ "description": "VSphereProviderStatus contains the status of the credentials request in VSphere.",
"type": "object",
"required": [
- "name",
- "challenge",
- "login",
- "mappingMethod",
- "provider"
+ "secretLastResourceVersion"
],
"properties": {
- "challenge": {
- "description": "UseAsChallenger indicates whether to issue WWW-Authenticate challenges for this provider",
- "type": "boolean",
- "default": false
- },
- "login": {
- "description": "UseAsLogin indicates whether to use this identity provider for unauthenticated browsers to login against",
- "type": "boolean",
- "default": false
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "mappingMethod": {
- "description": "MappingMethod determines how identities from this provider are mapped to users",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "name": {
- "description": "Name is used to qualify the identities returned by this provider",
+ "secretLastResourceVersion": {
+ "description": "SecretLastResourceVersion is the resource version of the secret resource that was last synced. Used to determine if the object has changed and requires a sync.",
"type": "string",
"default": ""
- },
- "provider": {
- "description": "Provider contains the information about how to set up a specific identity provider",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Type": "object",
+ "Group": "cloudcredential.openshift.io",
"Version": "v1",
- "Kind": "IdentityProvider",
+ "Kind": "VSphereProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.ImageConfig": {
- "description": "ImageConfig holds the necessary configuration options for building image names for system components",
+ "io.openshift.config.kubecontrolplane.v1.AggregatorConfig": {
+ "description": "AggregatorConfig holds information required to make the aggregator function.",
"type": "object",
"required": [
- "format",
- "latest"
+ "proxyClientInfo"
],
"properties": {
- "format": {
- "description": "Format is the format of the name to be built for the system component",
- "type": "string",
- "default": ""
- },
- "latest": {
- "description": "Latest determines if the latest tag will be pulled from the registry",
- "type": "boolean",
- "default": false
+ "proxyClientInfo": {
+ "description": "proxyClientInfo specifies the client cert/key to use when proxying to aggregated API servers",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.CertInfo"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Group": "kubecontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "ImageConfig",
+ "Kind": "AggregatorConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.ImagePolicyConfig": {
- "description": "ImagePolicyConfig holds the necessary configuration options for limits and behavior for importing images",
+ "io.openshift.config.kubecontrolplane.v1.KubeAPIServerConfig": {
+ "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "maxImagesBulkImportedPerRepository",
- "disableScheduledImport",
- "scheduledImageImportMinimumIntervalSeconds",
- "maxScheduledImageImportsPerMinute"
+ "servingInfo",
+ "corsAllowedOrigins",
+ "auditConfig",
+ "storageConfig",
+ "admission",
+ "kubeClientConfig",
+ "authConfig",
+ "aggregatorConfig",
+ "kubeletClientInfo",
+ "servicesSubnet",
+ "servicesNodePortRange",
+ "consolePublicURL",
+ "userAgentMatchingConfig",
+ "imagePolicyConfig",
+ "projectConfig",
+ "serviceAccountPublicKeyFiles",
+ "oauthConfig",
+ "apiServerArguments"
],
"properties": {
- "additionalTrustedCA": {
- "description": "AdditionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted during imagestream import.",
+ "admission": {
+ "description": "admissionConfig holds information about how to configure admission.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig"
+ },
+ "aggregatorConfig": {
+ "description": "aggregatorConfig has options for configuring the aggregator component of the API server.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.AggregatorConfig"
+ },
+ "apiServerArguments": {
+ "type": "object",
+ "additionalProperties": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "allowedRegistriesForImport": {
- "description": "AllowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.",
+ "auditConfig": {
+ "description": "auditConfig describes how to configure audit information",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.AuditConfig"
+ },
+ "authConfig": {
+ "description": "authConfig configures authentication options in addition to the standard oauth token and client certificate authenticators",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.MasterAuthConfig"
+ },
+ "consolePublicURL": {
+ "description": "DEPRECATED: consolePublicURL has been deprecated and setting it has no effect.",
+ "type": "string",
+ "default": ""
+ },
+ "corsAllowedOrigins": {
+ "description": "corsAllowedOrigins",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.RegistryLocation"
+ "type": "string",
+ "default": ""
}
},
- "disableScheduledImport": {
- "description": "DisableScheduledImport allows scheduled background import of images to be disabled.",
- "type": "boolean",
- "default": false
+ "imagePolicyConfig": {
+ "description": "imagePolicyConfig feeds the image policy admission plugin",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeAPIServerImagePolicyConfig"
},
- "externalRegistryHostname": {
- "description": "ExternalRegistryHostname sets the hostname for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "internalRegistryHostname": {
- "description": "InternalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.",
- "type": "string"
+ "kubeClientConfig": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig"
},
- "maxImagesBulkImportedPerRepository": {
- "description": "MaxImagesBulkImportedPerRepository controls the number of images that are imported when a user does a bulk import of a container repository. This number defaults to 50 to prevent users from importing large numbers of images accidentally. Set -1 for no limit.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "kubeletClientInfo": {
+ "description": "kubeletClientInfo contains information about how to connect to kubelets",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeletConnectionInfo"
},
- "maxScheduledImageImportsPerMinute": {
- "description": "MaxScheduledImageImportsPerMinute is the maximum number of scheduled image streams that will be imported in the background per minute. The default value is 60. Set to -1 for unlimited.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "oauthConfig": {
+ "description": "oauthConfig, if present start the /oauth endpoint in this process",
+ "$ref": "#/definitions/io.openshift.config.osin.v1.OAuthConfig"
},
- "scheduledImageImportMinimumIntervalSeconds": {
- "description": "ScheduledImageImportMinimumIntervalSeconds is the minimum number of seconds that can elapse between when image streams scheduled for background import are checked against the upstream repository. The default value is 15 minutes.",
- "type": "integer",
- "format": "int32",
- "default": 0
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
- "Version": "v1",
- "Kind": "ImagePolicyConfig",
+ "projectConfig": {
+ "description": "projectConfig feeds an admission plugin",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeAPIServerProjectConfig"
+ },
+ "serviceAccountPublicKeyFiles": {
+ "description": "serviceAccountPublicKeyFiles is a list of files, each containing a PEM-encoded public RSA key. (If any file contains a private key, the public portion of the key is used) The list of public keys is used to verify presented service account tokens. Each key is tried in order until the list is exhausted or verification succeeds. If no keys are specified, no service account authentication will be available.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "servicesNodePortRange": {
+ "description": "servicesNodePortRange is the range to use for assigning service public ports on a host.",
+ "type": "string",
+ "default": ""
+ },
+ "servicesSubnet": {
+ "description": "servicesSubnet is the subnet to use for assigning service IPs",
+ "type": "string",
+ "default": ""
+ },
+ "servingInfo": {
+ "description": "servingInfo describes how to start serving",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
+ },
+ "storageConfig": {
+ "description": "storageConfig contains information about how to use",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig"
+ },
+ "userAgentMatchingConfig": {
+ "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.UserAgentMatchingConfig"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "kubecontrolplane.config.openshift.io",
+ "Version": "v1",
+ "Kind": "KubeAPIServerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.JenkinsPipelineConfig": {
- "description": "JenkinsPipelineConfig holds configuration for the Jenkins pipeline strategy",
+ "io.openshift.config.kubecontrolplane.v1.KubeAPIServerImagePolicyConfig": {
"type": "object",
"required": [
- "autoProvisionEnabled",
- "templateNamespace",
- "templateName",
- "serviceName",
- "parameters"
+ "internalRegistryHostname",
+ "externalRegistryHostnames"
],
"properties": {
- "autoProvisionEnabled": {
- "description": "AutoProvisionEnabled determines whether a Jenkins server will be spawned from the provided template when the first build config in the project with type JenkinsPipeline is created. When not specified this option defaults to true.",
- "type": "boolean"
- },
- "parameters": {
- "description": "Parameters specifies a set of optional parameters to the Jenkins template.",
- "type": "object",
- "additionalProperties": {
+ "externalRegistryHostnames": {
+ "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.",
+ "type": "array",
+ "items": {
"type": "string",
"default": ""
}
},
- "serviceName": {
- "description": "ServiceName is the name of the Jenkins service OpenShift uses to detect whether a Jenkins pipeline handler has already been installed in a project. This value *must* match a service name in the provided template.",
- "type": "string",
- "default": ""
- },
- "templateName": {
- "description": "TemplateName is the name of the default Jenkins template",
+ "internalRegistryHostname": {
+ "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.",
"type": "string",
"default": ""
- },
- "templateNamespace": {
- "description": "TemplateNamespace contains the namespace name where the Jenkins template is stored",
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "kubecontrolplane.config.openshift.io",
+ "Version": "v1",
+ "Kind": "KubeAPIServerImagePolicyConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.kubecontrolplane.v1.KubeAPIServerProjectConfig": {
+ "type": "object",
+ "required": [
+ "defaultNodeSelector"
+ ],
+ "properties": {
+ "defaultNodeSelector": {
+ "description": "defaultNodeSelector holds default project node label selector",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Group": "kubecontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "JenkinsPipelineConfig",
+ "Kind": "KubeAPIServerProjectConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.KeystonePasswordIdentityProvider": {
- "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.kubecontrolplane.v1.KubeControllerManagerConfig": {
+ "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "url",
- "ca",
- "certFile",
- "keyFile",
- "domainName",
- "useKeystoneIdentity"
+ "serviceServingCert",
+ "projectConfig",
+ "extendedArguments"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "ca": {
- "description": "CA is the CA for verifying TLS connections",
- "type": "string",
- "default": ""
- },
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
- "type": "string",
- "default": ""
- },
- "domainName": {
- "description": "Domain Name is required for keystone v3",
- "type": "string",
- "default": ""
- },
- "keyFile": {
- "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
- "type": "string",
- "default": ""
+ "extendedArguments": {
+ "description": "extendedArguments is used to configure the kube-controller-manager",
+ "type": "object",
+ "additionalProperties": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "url": {
- "description": "URL is the remote URL to connect to",
- "type": "string",
- "default": ""
+ "projectConfig": {
+ "description": "projectConfig is an optimization for the daemonset controller",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeControllerManagerProjectConfig"
},
- "useKeystoneIdentity": {
- "description": "UseKeystoneIdentity flag indicates that user should be authenticated by keystone ID, not by username",
- "type": "boolean",
- "default": false
+ "serviceServingCert": {
+ "description": "serviceServingCert provides support for the old alpha service serving cert signer CA bundle",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.ServiceServingCert"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "legacy.config.openshift.io",
+ "Group": "kubecontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "KeystonePasswordIdentityProvider",
+ "Kind": "KubeControllerManagerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.KubeletConnectionInfo": {
+ "io.openshift.config.kubecontrolplane.v1.KubeControllerManagerProjectConfig": {
+ "type": "object",
+ "required": [
+ "defaultNodeSelector"
+ ],
+ "properties": {
+ "defaultNodeSelector": {
+ "description": "defaultNodeSelector holds default project node label selector",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "kubecontrolplane.config.openshift.io",
+ "Version": "v1",
+ "Kind": "KubeControllerManagerProjectConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.kubecontrolplane.v1.KubeletConnectionInfo": {
"description": "KubeletConnectionInfo holds information necessary for connecting to a kubelet",
"type": "object",
"required": [
@@ -65442,7 +66341,7 @@
],
"properties": {
"ca": {
- "description": "CA is the CA for verifying TLS connections to kubelets",
+ "description": "ca is the CA for verifying TLS connections to kubelets",
"type": "string",
"default": ""
},
@@ -65457,171 +66356,97 @@
"default": ""
},
"port": {
- "description": "Port is the port to connect to kubelets on",
+ "description": "port is the port to connect to kubelets on",
"type": "integer",
- "format": "int32",
+ "format": "int64",
"default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Group": "kubecontrolplane.config.openshift.io",
"Version": "v1",
"Kind": "KubeletConnectionInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.KubernetesMasterConfig": {
- "description": "KubernetesMasterConfig holds the necessary configuration options for the Kubernetes master",
+ "io.openshift.config.kubecontrolplane.v1.MasterAuthConfig": {
+ "description": "MasterAuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators",
"type": "object",
"required": [
- "apiLevels",
- "disabledAPIGroupVersions",
- "masterIP",
- "masterEndpointReconcileTTL",
- "servicesSubnet",
- "servicesNodePortRange",
- "schedulerConfigFile",
- "podEvictionTimeout",
- "proxyClientInfo",
- "apiServerArguments",
- "controllerArguments",
- "schedulerArguments"
+ "requestHeader",
+ "webhookTokenAuthenticators",
+ "oauthMetadataFile"
],
"properties": {
- "apiLevels": {
- "description": "APILevels is a list of API levels that should be enabled on startup: v1 as examples",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "apiServerArguments": {
- "description": "APIServerArguments are key value pairs that will be passed directly to the Kube apiserver that match the apiservers's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.",
- "type": "object",
- "additionalProperties": {
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- }
- },
- "controllerArguments": {
- "description": "ControllerArguments are key value pairs that will be passed directly to the Kube controller manager that match the controller manager's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.",
- "type": "object",
- "additionalProperties": {
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- }
- },
- "disabledAPIGroupVersions": {
- "description": "DisabledAPIGroupVersions is a map of groups to the versions (or *) that should be disabled.",
- "type": "object",
- "additionalProperties": {
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- }
- },
- "masterEndpointReconcileTTL": {
- "description": "MasterEndpointReconcileTTL sets the time to live in seconds of an endpoint record recorded by each master. The endpoints are checked at an interval that is 2/3 of this value and this value defaults to 15s if unset. In very large clusters, this value may be increased to reduce the possibility that the master endpoint record expires (due to other load on the etcd server) and causes masters to drop in and out of the kubernetes service record. It is not recommended to set this value below 15s.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "masterIP": {
- "description": "MasterIP is the public IP address of kubernetes stuff. If empty, the first result from net.InterfaceAddrs will be used.",
- "type": "string",
- "default": ""
- },
- "podEvictionTimeout": {
- "description": "PodEvictionTimeout controls grace period for deleting pods on failed nodes. It takes valid time duration string. If empty, you get the default pod eviction timeout.",
+ "oauthMetadataFile": {
+ "description": "oauthMetadataFile is a path to a file containing the discovery endpoint for OAuth 2.0 Authorization Server Metadata for an external OAuth server. See IETF Draft: // https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This option is mutually exclusive with OAuthConfig",
"type": "string",
"default": ""
},
- "proxyClientInfo": {
- "description": "ProxyClientInfo specifies the client cert/key to use when proxying to pods",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.CertInfo"
+ "requestHeader": {
+ "description": "requestHeader holds options for setting up a front proxy against the API. It is optional.",
+ "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.RequestHeaderAuthenticationOptions"
},
- "schedulerArguments": {
- "description": "SchedulerArguments are key value pairs that will be passed directly to the Kube scheduler that match the scheduler's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.",
- "type": "object",
- "additionalProperties": {
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "webhookTokenAuthenticators": {
+ "description": "webhookTokenAuthenticators, if present configures remote token reviewers",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.WebhookTokenAuthenticator"
}
- },
- "schedulerConfigFile": {
- "description": "SchedulerConfigFile points to a file that describes how to set up the scheduler. If empty, you get the default scheduling rules.",
- "type": "string",
- "default": ""
- },
- "servicesNodePortRange": {
- "description": "ServicesNodePortRange is the range to use for assigning service public ports on a host.",
- "type": "string",
- "default": ""
- },
- "servicesSubnet": {
- "description": "ServicesSubnet is the subnet to use for assigning service IPs",
- "type": "string",
- "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Group": "kubecontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "KubernetesMasterConfig",
+ "Kind": "MasterAuthConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.LDAPAttributeMapping": {
- "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields",
+ "io.openshift.config.kubecontrolplane.v1.RequestHeaderAuthenticationOptions": {
+ "description": "RequestHeaderAuthenticationOptions provides options for setting up a front proxy against the entire API instead of against the /oauth endpoint.",
"type": "object",
"required": [
- "id",
- "preferredUsername",
- "name",
- "email"
+ "clientCA",
+ "clientCommonNames",
+ "usernameHeaders",
+ "groupHeaders",
+ "extraHeaderPrefixes"
],
"properties": {
- "email": {
- "description": "Email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity",
+ "clientCA": {
+ "description": "clientCA is a file with the trusted signer certs. It is required.",
+ "type": "string",
+ "default": ""
+ },
+ "clientCommonNames": {
+ "description": "clientCommonNames is a required list of common names to require a match from.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "id": {
- "description": "ID is the list of attributes whose values should be used as the user ID. Required. LDAP standard identity attribute is \"dn\"",
+ "extraHeaderPrefixes": {
+ "description": "extraHeaderPrefixes is the set of request header prefixes to inspect for user extra. X-Remote-Extra- is suggested.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "name": {
- "description": "Name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"",
+ "groupHeaders": {
+ "description": "groupHeaders is the set of headers to check for group information. All are unioned.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "preferredUsername": {
- "description": "PreferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"",
+ "usernameHeaders": {
+ "description": "usernameHeaders is the list of headers to check for user information. First hit wins.",
"type": "array",
"items": {
"type": "string",
@@ -65631,240 +66456,224 @@
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Group": "kubecontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "LDAPAttributeMapping",
+ "Kind": "RequestHeaderAuthenticationOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.LDAPPasswordIdentityProvider": {
- "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.kubecontrolplane.v1.ServiceServingCert": {
+ "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.",
"type": "object",
"required": [
- "url",
- "bindDN",
- "bindPassword",
- "insecure",
- "ca",
- "attributes"
+ "certFile"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "attributes": {
- "description": "Attributes maps LDAP attributes to identities",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPAttributeMapping"
- },
- "bindDN": {
- "description": "BindDN is an optional DN to bind with during the search phase.",
- "type": "string",
- "default": ""
- },
- "bindPassword": {
- "description": "BindPassword is an optional password to bind with during the search phase.",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource"
- },
- "ca": {
- "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
- "type": "string",
- "default": ""
- },
- "insecure": {
- "description": "Insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830",
- "type": "boolean",
- "default": false
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "url": {
- "description": "URL is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is\n ldap://host:port/basedn?attribute?scope?filter",
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "legacy.config.openshift.io",
+ "Type": "nested",
+ "Group": "kubecontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "LDAPPasswordIdentityProvider",
+ "Kind": "ServiceServingCert",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.LDAPQuery": {
- "description": "LDAPQuery holds the options necessary to build an LDAP query",
+ "io.openshift.config.kubecontrolplane.v1.UserAgentDenyRule": {
+ "description": "UserAgentDenyRule adds a rejection message that can be used to help a user figure out how to get an approved client",
"type": "object",
"required": [
- "baseDN",
- "scope",
- "derefAliases",
- "timeout",
- "filter",
- "pageSize"
+ "regex",
+ "httpVerbs",
+ "rejectionMessage"
],
"properties": {
- "baseDN": {
- "description": "The DN of the branch of the directory where all searches should start from",
- "type": "string",
- "default": ""
+ "httpVerbs": {
+ "description": "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "derefAliases": {
- "description": "The (optional) behavior of the search with regards to alisases. Can be: never: never dereference aliases, search: only dereference in searching, base: only dereference in finding the base object, always: always dereference Defaults to always dereferencing if not set",
+ "regex": {
+ "description": "regex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f",
"type": "string",
"default": ""
},
- "filter": {
- "description": "Filter is a valid LDAP search filter that retrieves all relevant entries from the LDAP server with the base DN",
+ "rejectionMessage": {
+ "description": "RejectionMessage is the message shown when rejecting a client. If it is not a set, the default message is used.",
"type": "string",
"default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "kubecontrolplane.config.openshift.io",
+ "Version": "v1",
+ "Kind": "UserAgentDenyRule",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.kubecontrolplane.v1.UserAgentMatchRule": {
+ "description": "UserAgentMatchRule describes how to match a given request based on User-Agent and HTTPVerb",
+ "type": "object",
+ "required": [
+ "regex",
+ "httpVerbs"
+ ],
+ "properties": {
+ "httpVerbs": {
+ "description": "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "pageSize": {
- "description": "PageSize is the maximum preferred page size, measured in LDAP entries. A page size of 0 means no paging will be done.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "scope": {
- "description": "The (optional) scope of the search. Can be: base: only the base object, one: all object on the base level, sub: the entire subtree Defaults to the entire subtree if not set",
+ "regex": {
+ "description": "regex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f",
"type": "string",
"default": ""
- },
- "timeout": {
- "description": "TimeLimit holds the limit of time in seconds that any request to the server can remain outstanding before the wait for a response is given up. If this is 0, no client-side limit is imposed",
- "type": "integer",
- "format": "int32",
- "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "legacy.config.openshift.io",
+ "Group": "kubecontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "LDAPQuery",
+ "Kind": "UserAgentMatchRule",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.LDAPSyncConfig": {
- "description": "LDAPSyncConfig holds the necessary configuration options to define an LDAP group sync\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.kubecontrolplane.v1.UserAgentMatchingConfig": {
+ "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!",
"type": "object",
"required": [
- "url",
- "bindDN",
- "bindPassword",
- "insecure",
- "ca",
- "groupUIDNameMapping"
+ "requiredClients",
+ "deniedClients",
+ "defaultRejectionMessage"
],
"properties": {
- "activeDirectory": {
- "description": "ActiveDirectoryConfig holds the configuration for extracting data from an LDAP server set up in a fashion similar to that used in Active Directory: first-class user entries, with group membership determined by a multi-valued attribute on members listing groups they are a member of",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ActiveDirectoryConfig"
- },
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "augmentedActiveDirectory": {
- "description": "AugmentedActiveDirectoryConfig holds the configuration for extracting data from an LDAP server set up in a fashion similar to that used in Active Directory as described above, with one addition: first-class group entries exist and are used to hold metadata but not group membership",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.AugmentedActiveDirectoryConfig"
- },
- "bindDN": {
- "description": "BindDN is an optional DN to bind to the LDAP server with",
+ "defaultRejectionMessage": {
+ "description": "defaultRejectionMessage is the message shown when rejecting a client. If it is not a set, a generic message is given.",
"type": "string",
"default": ""
},
- "bindPassword": {
- "description": "BindPassword is an optional password to bind with during the search phase.",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource"
- },
- "ca": {
- "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
- "type": "string",
- "default": ""
- },
- "groupUIDNameMapping": {
- "description": "LDAPGroupUIDToOpenShiftGroupNameMapping is an optional direct mapping of LDAP group UIDs to OpenShift Group names",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
+ "deniedClients": {
+ "description": "deniedClients if this list is non-empty, then a User-Agent must not match any of the UserAgentRegexes",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.UserAgentDenyRule"
}
},
- "insecure": {
- "description": "Insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830",
- "type": "boolean",
- "default": false
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "rfc2307": {
- "description": "RFC2307Config holds the configuration for extracting data from an LDAP server set up in a fashion similar to RFC2307: first-class group and user entries, with group membership determined by a multi-valued attribute on the group entry listing its members",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.RFC2307Config"
+ "requiredClients": {
+ "description": "requiredClients if this list is non-empty, then a User-Agent must match one of the UserAgentRegexes to be allowed",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.UserAgentMatchRule"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "kubecontrolplane.config.openshift.io",
+ "Version": "v1",
+ "Kind": "UserAgentMatchingConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.kubecontrolplane.v1.WebhookTokenAuthenticator": {
+ "description": "WebhookTokenAuthenticators holds the necessary configuation options for external token authenticators",
+ "type": "object",
+ "required": [
+ "configFile",
+ "cacheTTL"
+ ],
+ "properties": {
+ "cacheTTL": {
+ "description": "cacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get a default timeout of 2 minutes. If zero (e.g. \"0m\"), caching is disabled",
+ "type": "string",
+ "default": ""
},
- "url": {
- "description": "Host is the scheme, host and port of the LDAP server to connect to: scheme://host:port",
+ "configFile": {
+ "description": "configFile is a path to a Kubeconfig file with the webhook configuration",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "legacy.config.openshift.io",
+ "Type": "nested",
+ "Group": "kubecontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "LDAPSyncConfig",
+ "Kind": "WebhookTokenAuthenticator",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.LocalQuota": {
- "description": "LocalQuota contains options for controlling local volume quota on the node.",
+ "io.openshift.config.legacy.v1.ActiveDirectoryConfig": {
+ "description": "ActiveDirectoryConfig holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the Active Directory schema",
"type": "object",
"required": [
- "perFSGroup"
+ "usersQuery",
+ "userNameAttributes",
+ "groupMembershipAttributes"
],
"properties": {
- "perFSGroup": {
- "description": "FSGroup can be specified to enable a quota on local storage use per unique FSGroup ID. At present this is only implemented for emptyDir volumes, and if the underlying volumeDirectory is on an XFS filesystem.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
+ "groupMembershipAttributes": {
+ "description": "GroupMembershipAttributes defines which attributes on an LDAP user entry will be interpreted as the groups it is a member of",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "userNameAttributes": {
+ "description": "UserNameAttributes defines which attributes on an LDAP user entry will be interpreted as its OpenShift user name.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "usersQuery": {
+ "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "LocalQuota",
+ "Kind": "ActiveDirectoryConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.MasterAuthConfig": {
- "description": "MasterAuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators",
+ "io.openshift.config.legacy.v1.AdmissionConfig": {
+ "description": "AdmissionConfig holds the necessary configuration options for admission",
"type": "object",
"required": [
- "requestHeader",
- "webhookTokenAuthenticators",
- "oauthMetadataFile"
+ "pluginConfig"
],
"properties": {
- "oauthMetadataFile": {
- "description": "OAuthMetadataFile is a path to a file containing the discovery endpoint for OAuth 2.0 Authorization Server Metadata for an external OAuth server. See IETF Draft: // https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This option is mutually exclusive with OAuthConfig",
- "type": "string",
- "default": ""
- },
- "requestHeader": {
- "description": "RequestHeader holds options for setting up a front proxy against the API. It is optional.",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.RequestHeaderAuthenticationOptions"
+ "pluginConfig": {
+ "description": "PluginConfig allows specifying a configuration file per admission control plugin",
+ "type": "object",
+ "additionalProperties": {
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.AdmissionPluginConfig"
+ }
},
- "webhookTokenAuthenticators": {
- "description": "WebhookTokenAuthnConfig, if present configures remote token reviewers",
+ "pluginOrderOverride": {
+ "description": "PluginOrderOverride is a list of admission control plugin names that will be installed on the master. Order is significant. If empty, a default list of plugins is used.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.WebhookTokenAuthenticator"
+ "type": "string",
+ "default": ""
}
}
},
@@ -65872,24 +66681,24 @@
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "MasterAuthConfig",
+ "Kind": "AdmissionConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.MasterClients": {
- "description": "MasterClients holds references to `.kubeconfig` files that qualify master clients for OpenShift and Kubernetes",
+ "io.openshift.config.legacy.v1.AdmissionPluginConfig": {
+ "description": "AdmissionPluginConfig holds the necessary configuration options for admission plugins",
"type": "object",
"required": [
- "openshiftLoopbackKubeConfig",
- "openshiftLoopbackClientConnectionOverrides"
+ "location",
+ "configuration"
],
"properties": {
- "openshiftLoopbackClientConnectionOverrides": {
- "description": "OpenShiftLoopbackClientConnectionOverrides specifies client overrides for system components to loop back to this master.",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ClientConnectionOverrides"
+ "configuration": {
+ "description": "Configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
},
- "openshiftLoopbackKubeConfig": {
- "description": "OpenShiftLoopbackKubeConfig is a .kubeconfig filename for system components to loopback to this master",
+ "location": {
+ "description": "Location is the path to a configuration file that contains the plugin's configuration",
"type": "string",
"default": ""
}
@@ -65898,292 +66707,208 @@
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "MasterClients",
+ "Kind": "AdmissionPluginConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.MasterConfig": {
- "description": "MasterConfig holds the necessary configuration options for the OpenShift master\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.AggregatorConfig": {
+ "description": "AggregatorConfig holds information required to make the aggregator function.",
"type": "object",
"required": [
- "servingInfo",
- "authConfig",
- "aggregatorConfig",
- "corsAllowedOrigins",
- "apiLevels",
- "masterPublicURL",
- "controllers",
- "admissionConfig",
- "controllerConfig",
- "etcdStorageConfig",
- "etcdClientInfo",
- "kubeletClientInfo",
- "kubernetesMasterConfig",
- "etcdConfig",
- "oauthConfig",
- "dnsConfig",
- "serviceAccountConfig",
- "masterClients",
- "imageConfig",
- "imagePolicyConfig",
- "policyConfig",
- "projectConfig",
- "routingConfig",
- "networkConfig",
- "volumeConfig",
- "jenkinsPipelineConfig",
- "auditConfig"
+ "proxyClientInfo"
],
"properties": {
- "admissionConfig": {
- "description": "AdmissionConfig contains admission control plugin configuration.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.AdmissionConfig"
- },
- "aggregatorConfig": {
- "description": "AggregatorConfig has options for configuring the aggregator component of the API server.",
+ "proxyClientInfo": {
+ "description": "ProxyClientInfo specifies the client cert/key to use when proxying to aggregated API servers",
"default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.AggregatorConfig"
- },
- "apiLevels": {
- "description": "APILevels is a list of API levels that should be enabled on startup: v1 as examples",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.CertInfo"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
+ "Version": "v1",
+ "Kind": "AggregatorConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.legacy.v1.AllowAllPasswordIdentityProvider": {
+ "description": "AllowAllPasswordIdentityProvider provides identities for users authenticating using non-empty passwords\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "auditConfig": {
- "description": "AuditConfig holds information related to auditing capabilities.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.AuditConfig"
- },
- "authConfig": {
- "description": "AuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterAuthConfig"
- },
- "controllerConfig": {
- "description": "ControllerConfig holds configuration values for controllers",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ControllerConfig"
- },
- "controllers": {
- "description": "Controllers is a list of the controllers that should be started. If set to \"none\", no controllers will start automatically. The default value is \"*\" which will start all controllers. When using \"*\", you may exclude controllers by prepending a \"-\" in front of their name. No other values are recognized at this time.",
- "type": "string",
- "default": ""
- },
- "corsAllowedOrigins": {
- "description": "CORSAllowedOrigins",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "dnsConfig": {
- "description": "DNSConfig, if present start the DNS server in this process",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.DNSConfig"
- },
- "etcdClientInfo": {
- "description": "EtcdClientInfo contains information about how to connect to etcd",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.EtcdConnectionInfo"
- },
- "etcdConfig": {
- "description": "EtcdConfig, if present start etcd in this process",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.EtcdConfig"
- },
- "etcdStorageConfig": {
- "description": "EtcdStorageConfig contains information about how API resources are stored in Etcd. These values are only relevant when etcd is the backing store for the cluster.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.EtcdStorageConfig"
- },
- "imageConfig": {
- "description": "ImageConfig holds options that describe how to build image names for system components",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ImageConfig"
- },
- "imagePolicyConfig": {
- "description": "ImagePolicyConfig controls limits and behavior for importing images",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ImagePolicyConfig"
- },
- "jenkinsPipelineConfig": {
- "description": "JenkinsPipelineConfig holds information about the default Jenkins template used for JenkinsPipeline build strategy.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.JenkinsPipelineConfig"
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
- },
- "kubeletClientInfo": {
- "description": "KubeletClientInfo contains information about how to connect to kubelets",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.KubeletConnectionInfo"
- },
- "kubernetesMasterConfig": {
- "description": "KubernetesMasterConfig, if present start the kubernetes master in this process",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.KubernetesMasterConfig"
- },
- "masterClients": {
- "description": "MasterClients holds all the client connection information for controllers and other system components",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterClients"
- },
- "masterPublicURL": {
- "description": "MasterPublicURL is how clients can access the OpenShift API server",
- "type": "string",
- "default": ""
- },
- "networkConfig": {
- "description": "NetworkConfig to be passed to the compiled in network plugin",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterNetworkConfig"
- },
- "oauthConfig": {
- "description": "OAuthConfig, if present start the /oauth endpoint in this process",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.OAuthConfig"
- },
- "policyConfig": {
- "description": "PolicyConfig holds information about where to locate critical pieces of bootstrapping policy",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.PolicyConfig"
- },
- "projectConfig": {
- "description": "ProjectConfig holds information about project creation and defaults",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ProjectConfig"
- },
- "routingConfig": {
- "description": "RoutingConfig holds information about routing and route generation",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.RoutingConfig"
- },
- "serviceAccountConfig": {
- "description": "ServiceAccountConfig holds options related to service accounts",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ServiceAccountConfig"
- },
- "servingInfo": {
- "description": "ServingInfo describes how to start serving",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.HTTPServingInfo"
- },
- "volumeConfig": {
- "description": "MasterVolumeConfig contains options for configuring volume plugins in the master node.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterVolumeConfig"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "MasterConfig",
+ "Kind": "AllowAllPasswordIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.MasterNetworkConfig": {
- "description": "MasterNetworkConfig to be passed to the compiled in network plugin",
+ "io.openshift.config.legacy.v1.AuditConfig": {
+ "description": "AuditConfig holds configuration for the audit capabilities",
"type": "object",
"required": [
- "networkPluginName",
- "clusterNetworks",
- "serviceNetworkCIDR",
- "externalIPNetworkCIDRs",
- "ingressIPNetworkCIDR"
+ "enabled",
+ "auditFilePath",
+ "maximumFileRetentionDays",
+ "maximumRetainedFiles",
+ "maximumFileSizeMegabytes",
+ "policyFile",
+ "policyConfiguration",
+ "logFormat",
+ "webHookKubeConfig",
+ "webHookMode"
],
"properties": {
- "clusterNetworkCIDR": {
- "description": "ClusterNetworkCIDR is the CIDR string to specify the global overlay network's L3 space. Deprecated, but maintained for backwards compatibility, use ClusterNetworks instead.",
- "type": "string"
+ "auditFilePath": {
+ "description": "All requests coming to the apiserver will be logged to this file.",
+ "type": "string",
+ "default": ""
},
- "clusterNetworks": {
- "description": "ClusterNetworks is a list of ClusterNetwork objects that defines the global overlay network's L3 space by specifying a set of CIDR and netmasks that the SDN can allocate addressed from. If this is specified, then ClusterNetworkCIDR and HostSubnetLength may not be set.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ClusterNetworkEntry"
- }
+ "enabled": {
+ "description": "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.",
+ "type": "boolean",
+ "default": false
},
- "externalIPNetworkCIDRs": {
- "description": "ExternalIPNetworkCIDRs controls what values are acceptable for the service external IP field. If empty, no externalIP may be set. It may contain a list of CIDRs which are checked for access. If a CIDR is prefixed with !, IPs in that CIDR will be rejected. Rejections will be applied first, then the IP checked against one of the allowed CIDRs. You should ensure this range does not overlap with your nodes, pods, or service CIDRs for security reasons.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "logFormat": {
+ "description": "Format of saved audits (legacy or json).",
+ "type": "string",
+ "default": ""
},
- "hostSubnetLength": {
- "description": "HostSubnetLength is the number of bits to allocate to each host's subnet e.g. 8 would mean a /24 network on the host. Deprecated, but maintained for backwards compatibility, use ClusterNetworks instead.",
+ "maximumFileRetentionDays": {
+ "description": "Maximum number of days to retain old log files based on the timestamp encoded in their filename.",
"type": "integer",
- "format": "int64"
+ "format": "int32",
+ "default": 0
},
- "ingressIPNetworkCIDR": {
- "description": "IngressIPNetworkCIDR controls the range to assign ingress ips from for services of type LoadBalancer on bare metal. If empty, ingress ips will not be assigned. It may contain a single CIDR that will be allocated from. For security reasons, you should ensure that this range does not overlap with the CIDRs reserved for external ips, nodes, pods, or services.",
+ "maximumFileSizeMegabytes": {
+ "description": "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "maximumRetainedFiles": {
+ "description": "Maximum number of old log files to retain.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "policyConfiguration": {
+ "description": "PolicyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "policyFile": {
+ "description": "PolicyFile is a path to the file that defines the audit policy configuration.",
"type": "string",
"default": ""
},
- "networkPluginName": {
- "description": "NetworkPluginName is the name of the network plugin to use",
+ "webHookKubeConfig": {
+ "description": "Path to a .kubeconfig formatted file that defines the audit webhook configuration.",
"type": "string",
"default": ""
},
- "serviceNetworkCIDR": {
- "description": "ServiceNetwork is the CIDR string to specify the service networks",
+ "webHookMode": {
+ "description": "Strategy for sending audit events (block or batch).",
"type": "string",
"default": ""
- },
- "vxlanPort": {
- "description": "VXLANPort is the VXLAN port used by the cluster defaults. If it is not set, 4789 is the default value",
- "type": "integer",
- "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "MasterNetworkConfig",
+ "Kind": "AuditConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.MasterVolumeConfig": {
- "description": "MasterVolumeConfig contains options for configuring volume plugins in the master node.",
+ "io.openshift.config.legacy.v1.AugmentedActiveDirectoryConfig": {
+ "description": "AugmentedActiveDirectoryConfig holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the augmented Active Directory schema",
"type": "object",
"required": [
- "dynamicProvisioningEnabled"
+ "usersQuery",
+ "userNameAttributes",
+ "groupMembershipAttributes",
+ "groupsQuery",
+ "groupUIDAttribute",
+ "groupNameAttributes"
],
"properties": {
- "dynamicProvisioningEnabled": {
- "description": "DynamicProvisioningEnabled is a boolean that toggles dynamic provisioning off when false, defaults to true",
- "type": "boolean"
+ "groupMembershipAttributes": {
+ "description": "GroupMembershipAttributes defines which attributes on an LDAP user entry will be interpreted as the groups it is a member of",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "groupNameAttributes": {
+ "description": "GroupNameAttributes defines which attributes on an LDAP group entry will be interpreted as its name to use for an OpenShift group",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "groupUIDAttribute": {
+ "description": "GroupUIDAttributes defines which attribute on an LDAP group entry will be interpreted as its unique identifier. (ldapGroupUID)",
+ "type": "string",
+ "default": ""
+ },
+ "groupsQuery": {
+ "description": "AllGroupsQuery holds the template for an LDAP query that returns group entries.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery"
+ },
+ "userNameAttributes": {
+ "description": "UserNameAttributes defines which attributes on an LDAP user entry will be interpreted as its OpenShift user name.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "usersQuery": {
+ "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "MasterVolumeConfig",
+ "Kind": "AugmentedActiveDirectoryConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.NamedCertificate": {
- "description": "NamedCertificate specifies a certificate/key, and the names it should be served for",
+ "io.openshift.config.legacy.v1.BasicAuthPasswordIdentityProvider": {
+ "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "names",
+ "url",
+ "ca",
"certFile",
"keyFile"
],
"properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "ca": {
+ "description": "CA is the CA for verifying TLS connections",
+ "type": "string",
+ "default": ""
+ },
"certFile": {
"description": "CertFile is a file containing a PEM-encoded certificate",
"type": "string",
@@ -66194,560 +66919,427 @@
"type": "string",
"default": ""
},
- "names": {
- "description": "Names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
- "Version": "v1",
- "Kind": "NamedCertificate",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.legacy.v1.NodeAuthConfig": {
- "description": "NodeAuthConfig holds authn/authz configuration options",
- "type": "object",
- "required": [
- "authenticationCacheTTL",
- "authenticationCacheSize",
- "authorizationCacheTTL",
- "authorizationCacheSize"
- ],
- "properties": {
- "authenticationCacheSize": {
- "description": "AuthenticationCacheSize indicates how many authentication results should be cached. If 0, the default cache size is used.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "authenticationCacheTTL": {
- "description": "AuthenticationCacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get the default timeout. If zero (e.g. \"0m\"), caching is disabled",
- "type": "string",
- "default": ""
- },
- "authorizationCacheSize": {
- "description": "AuthorizationCacheSize indicates how many authorization results should be cached. If 0, the default cache size is used.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "authorizationCacheTTL": {
- "description": "AuthorizationCacheTTL indicates how long an authorization result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get the default timeout. If zero (e.g. \"0m\"), caching is disabled",
+ "url": {
+ "description": "URL is the remote URL to connect to",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "NodeAuthConfig",
+ "Kind": "BasicAuthPasswordIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.NodeConfig": {
- "description": "NodeConfig is the fully specified config starting an OpenShift node\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.BuildDefaultsConfig": {
+ "description": "BuildDefaultsConfig controls the default information for Builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
- "required": [
- "nodeName",
- "nodeIP",
- "servingInfo",
- "masterKubeConfig",
- "masterClientConnectionOverrides",
- "dnsDomain",
- "dnsIP",
- "dnsBindAddress",
- "dnsNameservers",
- "dnsRecursiveResolvConf",
- "networkConfig",
- "volumeDirectory",
- "imageConfig",
- "allowDisabledDocker",
- "podManifestConfig",
- "authConfig",
- "dockerConfig",
- "iptablesSyncPeriod",
- "enableUnidling",
- "volumeConfig"
- ],
"properties": {
- "allowDisabledDocker": {
- "description": "AllowDisabledDocker if true, the Kubelet will ignore errors from Docker. This means that a node can start on a machine that doesn't have docker started.",
- "type": "boolean",
- "default": false
+ "annotations": {
+ "description": "annotations are annotations that will be added to the build pod",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
},
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "authConfig": {
- "description": "AuthConfig holds authn/authz configuration options",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.NodeAuthConfig"
- },
- "dnsBindAddress": {
- "description": "DNSBindAddress is the ip:port to serve DNS on. If this is not set, the DNS server will not be started. Because most DNS resolvers will only listen on port 53, if you select an alternative port you will need a DNS proxy like dnsmasq to answer queries for containers. A common configuration is dnsmasq configured on a node IP listening on 53 and delegating queries for dnsDomain to this process, while sending other queries to the host environments nameservers.",
- "type": "string",
- "default": ""
- },
- "dnsDomain": {
- "description": "DNSDomain holds the domain suffix that will be used for the DNS search path inside each container. Defaults to 'cluster.local'.",
- "type": "string",
- "default": ""
- },
- "dnsIP": {
- "description": "DNSIP is the IP address that pods will use to access cluster DNS. Defaults to the service IP of the Kubernetes master. This IP must be listening on port 53 for compatibility with libc resolvers (which cannot be configured to resolve names from any other port). When running more complex local DNS configurations, this is often set to the local address of a DNS proxy like dnsmasq, which then will consult either the local DNS (see dnsBindAddress) or the master DNS.",
- "type": "string",
- "default": ""
- },
- "dnsNameservers": {
- "description": "DNSNameservers is a list of ip:port values of recursive nameservers to forward queries to when running a local DNS server if dnsBindAddress is set. If this value is empty, the DNS server will default to the nameservers listed in /etc/resolv.conf. If you have configured dnsmasq or another DNS proxy on the system, this value should be set to the upstream nameservers dnsmasq resolves with.",
+ "env": {
+ "description": "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
}
},
- "dnsRecursiveResolvConf": {
- "description": "DNSRecursiveResolvConf is a path to a resolv.conf file that contains settings for an upstream server. Only the nameservers and port fields are used. The file must exist and parse correctly. It adds extra nameservers to DNSNameservers if set.",
- "type": "string",
- "default": ""
- },
- "dockerConfig": {
- "description": "DockerConfig holds Docker related configuration options.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.DockerConfig"
+ "gitHTTPProxy": {
+ "description": "gitHTTPProxy is the location of the HTTPProxy for Git source",
+ "type": "string"
},
- "enableUnidling": {
- "description": "EnableUnidling controls whether or not the hybrid unidling proxy will be set up",
- "type": "boolean"
+ "gitHTTPSProxy": {
+ "description": "gitHTTPSProxy is the location of the HTTPSProxy for Git source",
+ "type": "string"
},
- "imageConfig": {
- "description": "ImageConfig holds options that describe how to build image names for system components",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ImageConfig"
+ "gitNoProxy": {
+ "description": "gitNoProxy is the list of domains for which the proxy should not be used",
+ "type": "string"
},
- "iptablesSyncPeriod": {
- "description": "IPTablesSyncPeriod is how often iptable rules are refreshed",
- "type": "string",
- "default": ""
+ "imageLabels": {
+ "description": "imageLabels is a list of labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.ImageLabel"
+ }
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "kubeletArguments": {
- "description": "KubeletArguments are key value pairs that will be passed directly to the Kubelet that match the Kubelet's command line arguments. These are not migrated or validated, so if you use them they may become invalid. These values override other settings in NodeConfig which may cause invalid configurations.",
+ "nodeSelector": {
+ "description": "nodeSelector is a selector which must be true for the build pod to fit on a node",
"type": "object",
"additionalProperties": {
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "type": "string",
+ "default": ""
}
},
- "masterClientConnectionOverrides": {
- "description": "MasterClientConnectionOverrides provides overrides to the client connection used to connect to the master.",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ClientConnectionOverrides"
- },
- "masterKubeConfig": {
- "description": "MasterKubeConfig is a filename for the .kubeconfig file that describes how to connect this node to the master",
- "type": "string",
- "default": ""
- },
- "networkConfig": {
- "description": "NetworkConfig provides network options for the node",
+ "resources": {
+ "description": "resources defines resource requirements to execute the build.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.NodeNetworkConfig"
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
},
- "networkPluginName": {
- "description": "Deprecated and maintained for backward compatibility, use NetworkConfig.NetworkPluginName instead",
+ "sourceStrategyDefaults": {
+ "description": "sourceStrategyDefaults are default values that apply to builds using the source strategy.",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.SourceStrategyDefaultsConfig"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "legacy.config.openshift.io",
+ "Version": "v1",
+ "Kind": "BuildDefaultsConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.legacy.v1.BuildOverridesConfig": {
+ "description": "BuildOverridesConfig controls override settings for builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "forcePull"
+ ],
+ "properties": {
+ "annotations": {
+ "description": "annotations are annotations that will be added to the build pod",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "nodeIP": {
- "description": "Node may have multiple IPs, specify the IP to use for pod traffic routing If not specified, network parse/lookup on the nodeName is performed and the first non-loopback address is used",
- "type": "string",
- "default": ""
+ "forcePull": {
+ "description": "forcePull indicates whether the build strategy should always be set to ForcePull=true",
+ "type": "boolean",
+ "default": false
},
- "nodeName": {
- "description": "NodeName is the value used to identify this particular node in the cluster. If possible, this should be your fully qualified hostname. If you're describing a set of static nodes to the master, this value must match one of the values in the list",
- "type": "string",
- "default": ""
+ "imageLabels": {
+ "description": "imageLabels is a list of labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.ImageLabel"
+ }
},
- "podManifestConfig": {
- "description": "PodManifestConfig holds the configuration for enabling the Kubelet to create pods based from a manifest file(s) placed locally on the node",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.PodManifestConfig"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "proxyArguments": {
- "description": "ProxyArguments are key value pairs that will be passed directly to the Proxy that match the Proxy's command line arguments. These are not migrated or validated, so if you use them they may become invalid. These values override other settings in NodeConfig which may cause invalid configurations.",
+ "nodeSelector": {
+ "description": "nodeSelector is a selector which must be true for the build pod to fit on a node",
"type": "object",
"additionalProperties": {
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "type": "string",
+ "default": ""
}
},
- "servingInfo": {
- "description": "ServingInfo describes how to start serving",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.ServingInfo"
- },
- "volumeConfig": {
- "description": "VolumeConfig contains options for configuring volumes on the node.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.NodeVolumeConfig"
+ "tolerations": {
+ "description": "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "legacy.config.openshift.io",
+ "Version": "v1",
+ "Kind": "BuildOverridesConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.legacy.v1.CertInfo": {
+ "description": "CertInfo relates a certificate with a private key",
+ "type": "object",
+ "required": [
+ "certFile",
+ "keyFile"
+ ],
+ "properties": {
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
+ "type": "string",
+ "default": ""
},
- "volumeDirectory": {
- "description": "VolumeDirectory is the directory that volumes will be stored under",
+ "keyFile": {
+ "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "NodeConfig",
+ "Kind": "CertInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.NodeNetworkConfig": {
- "description": "NodeNetworkConfig provides network options for the node",
+ "io.openshift.config.legacy.v1.ClientConnectionOverrides": {
+ "description": "ClientConnectionOverrides are a set of overrides to the default client connection settings.",
"type": "object",
"required": [
- "networkPluginName",
- "mtu"
+ "acceptContentTypes",
+ "contentType",
+ "qps",
+ "burst"
],
"properties": {
- "mtu": {
- "description": "Maximum transmission unit for the network packets",
+ "acceptContentTypes": {
+ "description": "AcceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.",
+ "type": "string",
+ "default": ""
+ },
+ "burst": {
+ "description": "Burst allows extra queries to accumulate when a client is exceeding its rate.",
"type": "integer",
- "format": "int64",
+ "format": "int32",
"default": 0
},
- "networkPluginName": {
- "description": "NetworkPluginName is a string specifying the networking plugin",
+ "contentType": {
+ "description": "ContentType is the content type used when sending data to the server from this client.",
"type": "string",
"default": ""
+ },
+ "qps": {
+ "description": "QPS controls the number of queries per second allowed for this connection.",
+ "type": "number",
+ "format": "float",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "NodeNetworkConfig",
+ "Kind": "ClientConnectionOverrides",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.NodeVolumeConfig": {
- "description": "NodeVolumeConfig contains options for configuring volumes on the node.",
+ "io.openshift.config.legacy.v1.ClusterNetworkEntry": {
+ "description": "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.",
"type": "object",
"required": [
- "localQuota"
+ "cidr",
+ "hostSubnetLength"
],
"properties": {
- "localQuota": {
- "description": "LocalQuota contains options for controlling local volume quota on the node.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.LocalQuota"
+ "cidr": {
+ "description": "CIDR defines the total range of a cluster networks address space.",
+ "type": "string",
+ "default": ""
+ },
+ "hostSubnetLength": {
+ "description": "HostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pod.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "NodeVolumeConfig",
+ "Kind": "ClusterNetworkEntry",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.OAuthConfig": {
- "description": "OAuthConfig holds the necessary configuration options for OAuth authentication",
+ "io.openshift.config.legacy.v1.ControllerConfig": {
+ "description": "ControllerConfig holds configuration values for controllers",
"type": "object",
"required": [
- "masterCA",
- "masterURL",
- "masterPublicURL",
- "assetPublicURL",
- "alwaysShowProviderSelection",
- "identityProviders",
- "grantConfig",
- "sessionConfig",
- "tokenConfig",
- "templates"
+ "controllers",
+ "election",
+ "serviceServingCert"
],
"properties": {
- "alwaysShowProviderSelection": {
- "description": "AlwaysShowProviderSelection will force the provider selection page to render even when there is only a single provider.",
- "type": "boolean",
- "default": false
- },
- "assetPublicURL": {
- "description": "AssetPublicURL is used for building valid client redirect URLs for external access",
- "type": "string",
- "default": ""
- },
- "grantConfig": {
- "description": "GrantConfig describes how to handle grants",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.GrantConfig"
- },
- "identityProviders": {
- "description": "IdentityProviders is an ordered list of ways for a user to identify themselves",
+ "controllers": {
+ "description": "Controllers is a list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller \"+ named 'foo', '-foo' disables the controller named 'foo'. Defaults to \"*\".",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.IdentityProvider"
+ "type": "string",
+ "default": ""
}
},
- "masterCA": {
- "description": "MasterCA is the CA for verifying the TLS connection back to the MasterURL.",
- "type": "string"
- },
- "masterPublicURL": {
- "description": "MasterPublicURL is used for building valid client redirect URLs for internal and external access",
- "type": "string",
- "default": ""
- },
- "masterURL": {
- "description": "MasterURL is used for making server-to-server calls to exchange authorization codes for access tokens",
- "type": "string",
- "default": ""
- },
- "sessionConfig": {
- "description": "SessionConfig hold information about configuring sessions.",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.SessionConfig"
- },
- "templates": {
- "description": "Templates allow you to customize pages like the login page.",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.OAuthTemplates"
+ "election": {
+ "description": "Election defines the configuration for electing a controller instance to make changes to the cluster. If unspecified, the ControllerTTL value is checked to determine whether the legacy direct etcd election code will be used.",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ControllerElectionConfig"
},
- "tokenConfig": {
- "description": "TokenConfig contains options for authorization and access tokens",
+ "serviceServingCert": {
+ "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.TokenConfig"
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ServiceServingCert"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "OAuthConfig",
+ "Kind": "ControllerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.OAuthTemplates": {
- "description": "OAuthTemplates allow for customization of pages like the login page",
+ "io.openshift.config.legacy.v1.ControllerElectionConfig": {
+ "description": "ControllerElectionConfig contains configuration values for deciding how a controller will be elected to act as leader.",
"type": "object",
"required": [
- "login",
- "providerSelection",
- "error"
+ "lockName",
+ "lockNamespace",
+ "lockResource"
],
"properties": {
- "error": {
- "description": "Error is a path to a file containing a go template used to render error pages during the authentication or grant flow If unspecified, the default error page is used.",
+ "lockName": {
+ "description": "LockName is the resource name used to act as the lock for determining which controller instance should lead.",
"type": "string",
"default": ""
},
- "login": {
- "description": "Login is a path to a file containing a go template used to render the login page. If unspecified, the default login page is used.",
+ "lockNamespace": {
+ "description": "LockNamespace is the resource namespace used to act as the lock for determining which controller instance should lead. It defaults to \"kube-system\"",
"type": "string",
"default": ""
},
- "providerSelection": {
- "description": "ProviderSelection is a path to a file containing a go template used to render the provider selection page. If unspecified, the default provider selection page is used.",
- "type": "string",
- "default": ""
+ "lockResource": {
+ "description": "LockResource is the group and resource name to use to coordinate for the controller lock. If unset, defaults to \"configmaps\".",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.GroupResource"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "OAuthTemplates",
+ "Kind": "ControllerElectionConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.OpenIDClaims": {
- "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider",
+ "io.openshift.config.legacy.v1.DNSConfig": {
+ "description": "DNSConfig holds the necessary configuration options for DNS",
"type": "object",
"required": [
- "id",
- "preferredUsername",
- "name",
- "email"
+ "bindAddress",
+ "bindNetwork",
+ "allowRecursiveQueries"
],
"properties": {
- "email": {
- "description": "Email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "id": {
- "description": "ID is the list of claims whose values should be used as the user ID. Required. OpenID standard identity claim is \"sub\"",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "allowRecursiveQueries": {
+ "description": "AllowRecursiveQueries allows the DNS server on the master to answer queries recursively. Note that open resolvers can be used for DNS amplification attacks and the master DNS should not be made accessible to public networks.",
+ "type": "boolean",
+ "default": false
},
- "name": {
- "description": "Name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "bindAddress": {
+ "description": "BindAddress is the ip:port to serve DNS on",
+ "type": "string",
+ "default": ""
},
- "preferredUsername": {
- "description": "PreferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the id claim",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "bindNetwork": {
+ "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "OpenIDClaims",
+ "Kind": "DNSConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.OpenIDIdentityProvider": {
- "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.DefaultAdmissionConfig": {
+ "description": "DefaultAdmissionConfig can be used to enable or disable various admission plugins. When this type is present as the `configuration` object under `pluginConfig` and *if* the admission plugin supports it, this will cause an \"off by default\" admission plugin to be enabled\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "ca",
- "clientID",
- "clientSecret",
- "extraScopes",
- "extraAuthorizeParameters",
- "urls",
- "claims"
+ "disable"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "ca": {
- "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
- "type": "string",
- "default": ""
- },
- "claims": {
- "description": "Claims mappings",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.OpenIDClaims"
- },
- "clientID": {
- "description": "ClientID is the oauth client ID",
- "type": "string",
- "default": ""
- },
- "clientSecret": {
- "description": "ClientSecret is the oauth client secret",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource"
- },
- "extraAuthorizeParameters": {
- "description": "ExtraAuthorizeParameters are any custom parameters to add to the authorize request.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "extraScopes": {
- "description": "ExtraScopes are any scopes to request in addition to the standard \"openid\" scope.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "disable": {
+ "description": "Disable turns off an admission plugin that is enabled by default.",
+ "type": "boolean",
+ "default": false
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
- },
- "urls": {
- "description": "URLs to use to authenticate",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.OpenIDURLs"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "OpenIDIdentityProvider",
+ "Kind": "DefaultAdmissionConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.OpenIDURLs": {
- "description": "OpenIDURLs are URLs to use when authenticating with an OpenID identity provider",
+ "io.openshift.config.legacy.v1.DenyAllPasswordIdentityProvider": {
+ "description": "DenyAllPasswordIdentityProvider provides no identities for users\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
- "required": [
- "authorize",
- "token",
- "userInfo"
- ],
"properties": {
- "authorize": {
- "description": "Authorize is the oauth authorization URL",
- "type": "string",
- "default": ""
- },
- "token": {
- "description": "Token is the oauth token granting URL",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "userInfo": {
- "description": "UserInfo is the optional userinfo URL. If present, a granted access_token is used to request claims If empty, a granted id_token is parsed for claims",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "OpenIDURLs",
+ "Kind": "DenyAllPasswordIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.PodManifestConfig": {
- "description": "PodManifestConfig holds the necessary configuration options for using pod manifests",
+ "io.openshift.config.legacy.v1.DockerConfig": {
+ "description": "DockerConfig holds Docker related configuration options.",
"type": "object",
"required": [
- "path",
- "fileCheckIntervalSeconds"
+ "execHandlerName",
+ "dockerShimSocket",
+ "dockerShimRootDirectory"
],
"properties": {
- "fileCheckIntervalSeconds": {
- "description": "FileCheckIntervalSeconds is the interval in seconds for checking the manifest file(s) for new data The interval needs to be a positive value",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "dockerShimRootDirectory": {
+ "description": "DockershimRootDirectory is the dockershim root directory.",
+ "type": "string",
+ "default": ""
},
- "path": {
- "description": "Path specifies the path for the pod manifest file or directory If its a directory, its expected to contain on or more manifest files This is used by the Kubelet to create pods on the node",
+ "dockerShimSocket": {
+ "description": "DockerShimSocket is the location of the dockershim socket the kubelet uses. Currently unix socket is supported on Linux, and tcp is supported on windows. Examples:'unix:///var/run/dockershim.sock', 'tcp://localhost:3735'",
+ "type": "string",
+ "default": ""
+ },
+ "execHandlerName": {
+ "description": "ExecHandlerName is the name of the handler to use for executing commands in containers.",
"type": "string",
"default": ""
}
@@ -66756,199 +67348,124 @@
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "PodManifestConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.legacy.v1.PolicyConfig": {
- "description": "holds the necessary configuration options for",
- "type": "object",
- "required": [
- "userAgentMatchingConfig"
- ],
- "properties": {
- "userAgentMatchingConfig": {
- "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.UserAgentMatchingConfig"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
- "Version": "v1",
- "Kind": "PolicyConfig",
+ "Kind": "DockerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.ProjectConfig": {
- "description": "holds the necessary configuration options for",
+ "io.openshift.config.legacy.v1.EtcdConfig": {
+ "description": "EtcdConfig holds the necessary configuration options for connecting with an etcd database",
"type": "object",
"required": [
- "defaultNodeSelector",
- "projectRequestMessage",
- "projectRequestTemplate",
- "securityAllocator"
+ "servingInfo",
+ "address",
+ "peerServingInfo",
+ "peerAddress",
+ "storageDirectory"
],
"properties": {
- "defaultNodeSelector": {
- "description": "DefaultNodeSelector holds default project node label selector",
+ "address": {
+ "description": "Address is the advertised host:port for client connections to etcd",
"type": "string",
"default": ""
},
- "projectRequestMessage": {
- "description": "ProjectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint",
+ "peerAddress": {
+ "description": "PeerAddress is the advertised host:port for peer connections to etcd",
"type": "string",
"default": ""
},
- "projectRequestTemplate": {
- "description": "ProjectRequestTemplate is the template to use for creating projects in response to projectrequest. It is in the format namespace/template and it is optional. If it is not specified, a default template is used.",
+ "peerServingInfo": {
+ "description": "PeerServingInfo describes how to start serving the etcd peer",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ServingInfo"
+ },
+ "servingInfo": {
+ "description": "ServingInfo describes how to start serving the etcd master",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ServingInfo"
+ },
+ "storageDirectory": {
+ "description": "StorageDir is the path to the etcd storage directory",
"type": "string",
"default": ""
- },
- "securityAllocator": {
- "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.SecurityAllocator"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "ProjectConfig",
+ "Kind": "EtcdConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.RFC2307Config": {
- "description": "RFC2307Config holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the RFC2307 schema",
+ "io.openshift.config.legacy.v1.EtcdConnectionInfo": {
+ "description": "EtcdConnectionInfo holds information necessary for connecting to an etcd server",
"type": "object",
"required": [
- "groupsQuery",
- "groupUIDAttribute",
- "groupNameAttributes",
- "groupMembershipAttributes",
- "usersQuery",
- "userUIDAttribute",
- "userNameAttributes",
- "tolerateMemberNotFoundErrors",
- "tolerateMemberOutOfScopeErrors"
+ "urls",
+ "ca",
+ "certFile",
+ "keyFile"
],
"properties": {
- "groupMembershipAttributes": {
- "description": "GroupMembershipAttributes defines which attributes on an LDAP group entry will be interpreted as its members. The values contained in those attributes must be queryable by your UserUIDAttribute",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "groupNameAttributes": {
- "description": "GroupNameAttributes defines which attributes on an LDAP group entry will be interpreted as its name to use for an OpenShift group",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "groupUIDAttribute": {
- "description": "GroupUIDAttributes defines which attribute on an LDAP group entry will be interpreted as its unique identifier. (ldapGroupUID)",
+ "ca": {
+ "description": "CA is a file containing trusted roots for the etcd server certificates",
"type": "string",
"default": ""
},
- "groupsQuery": {
- "description": "AllGroupsQuery holds the template for an LDAP query that returns group entries.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery"
- },
- "tolerateMemberNotFoundErrors": {
- "description": "TolerateMemberNotFoundErrors determines the behavior of the LDAP sync job when missing user entries are encountered. If 'true', an LDAP query for users that doesn't find any will be tolerated and an only and error will be logged. If 'false', the LDAP sync job will fail if a query for users doesn't find any. The default value is 'false'. Misconfigured LDAP sync jobs with this flag set to 'true' can cause group membership to be removed, so it is recommended to use this flag with caution.",
- "type": "boolean",
- "default": false
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
+ "type": "string",
+ "default": ""
},
- "tolerateMemberOutOfScopeErrors": {
- "description": "TolerateMemberOutOfScopeErrors determines the behavior of the LDAP sync job when out-of-scope user entries are encountered. If 'true', an LDAP query for a user that falls outside of the base DN given for the all user query will be tolerated and only an error will be logged. If 'false', the LDAP sync job will fail if a user query would search outside of the base DN specified by the all user query. Misconfigured LDAP sync jobs with this flag set to 'true' can result in groups missing users, so it is recommended to use this flag with caution.",
- "type": "boolean",
- "default": false
+ "keyFile": {
+ "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "type": "string",
+ "default": ""
},
- "userNameAttributes": {
- "description": "UserNameAttributes defines which attributes on an LDAP user entry will be used, in order, as its OpenShift user name. The first attribute with a non-empty value is used. This should match your PreferredUsername setting for your LDAPPasswordIdentityProvider",
+ "urls": {
+ "description": "URLs are the URLs for etcd",
"type": "array",
"items": {
"type": "string",
"default": ""
}
- },
- "userUIDAttribute": {
- "description": "UserUIDAttribute defines which attribute on an LDAP user entry will be interpreted as its unique identifier. It must correspond to values that will be found from the GroupMembershipAttributes",
- "type": "string",
- "default": ""
- },
- "usersQuery": {
- "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
- "Version": "v1",
- "Kind": "RFC2307Config",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.legacy.v1.RegistryLocation": {
- "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.",
- "type": "object",
- "required": [
- "domainName"
- ],
- "properties": {
- "domainName": {
- "description": "DomainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.",
- "type": "string",
- "default": ""
- },
- "insecure": {
- "description": "Insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.",
- "type": "boolean"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "RegistryLocation",
+ "Kind": "EtcdConnectionInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.RemoteConnectionInfo": {
- "description": "RemoteConnectionInfo holds information necessary for establishing a remote connection",
+ "io.openshift.config.legacy.v1.EtcdStorageConfig": {
+ "description": "EtcdStorageConfig holds the necessary configuration options for the etcd storage underlying OpenShift and Kubernetes",
"type": "object",
"required": [
- "url",
- "ca",
- "certFile",
- "keyFile"
+ "kubernetesStorageVersion",
+ "kubernetesStoragePrefix",
+ "openShiftStorageVersion",
+ "openShiftStoragePrefix"
],
"properties": {
- "ca": {
- "description": "CA is the CA for verifying TLS connections",
+ "kubernetesStoragePrefix": {
+ "description": "KubernetesStoragePrefix is the path within etcd that the Kubernetes resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located. The default value is 'kubernetes.io'.",
"type": "string",
"default": ""
},
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
+ "kubernetesStorageVersion": {
+ "description": "KubernetesStorageVersion is the API version that Kube resources in etcd should be serialized to. This value should *not* be advanced until all clients in the cluster that read from etcd have code that allows them to read the new version.",
"type": "string",
"default": ""
},
- "keyFile": {
- "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "openShiftStoragePrefix": {
+ "description": "OpenShiftStoragePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located. The default value is 'openshift.io'.",
"type": "string",
"default": ""
},
- "url": {
- "description": "URL is the remote URL to connect to",
+ "openShiftStorageVersion": {
+ "description": "OpenShiftStorageVersion is the API version that OS resources in etcd should be serialized to. This value should *not* be advanced until all clients in the cluster that read from etcd have code that allows them to read the new version.",
"type": "string",
"default": ""
}
@@ -66957,52 +67474,59 @@
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "RemoteConnectionInfo",
+ "Kind": "EtcdStorageConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.RequestHeaderAuthenticationOptions": {
- "description": "RequestHeaderAuthenticationOptions provides options for setting up a front proxy against the entire API instead of against the /oauth endpoint.",
+ "io.openshift.config.legacy.v1.GitHubIdentityProvider": {
+ "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "clientCA",
- "clientCommonNames",
- "usernameHeaders",
- "groupHeaders",
- "extraHeaderPrefixes"
+ "clientID",
+ "clientSecret",
+ "organizations",
+ "teams",
+ "hostname",
+ "ca"
],
"properties": {
- "clientCA": {
- "description": "ClientCA is a file with the trusted signer certs. It is required.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "ca": {
+ "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value.",
"type": "string",
"default": ""
},
- "clientCommonNames": {
- "description": "ClientCommonNames is a required list of common names to require a match from.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "clientID": {
+ "description": "ClientID is the oauth client ID",
+ "type": "string",
+ "default": ""
},
- "extraHeaderPrefixes": {
- "description": "ExtraHeaderPrefixes is the set of request header prefixes to inspect for user extra. X-Remote-Extra- is suggested.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "clientSecret": {
+ "description": "ClientSecret is the oauth client secret",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource"
},
- "groupHeaders": {
- "description": "GroupNameHeader is the set of headers to check for group information. All are unioned.",
+ "hostname": {
+ "description": "Hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value that is configured at /setup/settings#hostname.",
+ "type": "string",
+ "default": ""
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "organizations": {
+ "description": "Organizations optionally restricts which organizations are allowed to log in",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "usernameHeaders": {
- "description": "UsernameHeaders is the list of headers to check for user information. First hit wins.",
+ "teams": {
+ "description": "Teams optionally restricts which teams are allowed to log in. Format is \u003corg\u003e/\u003cteam\u003e.",
"type": "array",
"items": {
"type": "string",
@@ -67011,142 +67535,118 @@
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "RequestHeaderAuthenticationOptions",
+ "Kind": "GitHubIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.RequestHeaderIdentityProvider": {
- "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.GitLabIdentityProvider": {
+ "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "loginURL",
- "challengeURL",
- "clientCA",
- "clientCommonNames",
- "headers",
- "preferredUsernameHeaders",
- "nameHeaders",
- "emailHeaders"
+ "ca",
+ "url",
+ "clientID",
+ "clientSecret"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "challengeURL": {
- "description": "ChallengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}",
+ "ca": {
+ "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
"type": "string",
"default": ""
},
- "clientCA": {
- "description": "ClientCA is a file with the trusted signer certs. If empty, no request verification is done, and any direct request to the OAuth server can impersonate any identity from this provider, merely by setting a request header.",
+ "clientID": {
+ "description": "ClientID is the oauth client ID",
"type": "string",
"default": ""
},
- "clientCommonNames": {
- "description": "ClientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "emailHeaders": {
- "description": "EmailHeaders is the set of headers to check for the email address",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "headers": {
- "description": "Headers is the set of headers to check for identity information",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "clientSecret": {
+ "description": "ClientSecret is the oauth client secret",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "loginURL": {
- "description": "LoginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}",
+ "legacy": {
+ "description": "Legacy determines if OAuth2 or OIDC should be used If true, OAuth2 is used If false, OIDC is used If nil and the URL's host is gitlab.com, OIDC is used Otherwise, OAuth2 is used In a future release, nil will default to using OIDC Eventually this flag will be removed and only OIDC will be used",
+ "type": "boolean"
+ },
+ "url": {
+ "description": "URL is the oauth server base URL",
"type": "string",
"default": ""
- },
- "nameHeaders": {
- "description": "NameHeaders is the set of headers to check for the display name",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "preferredUsernameHeaders": {
- "description": "PreferredUsernameHeaders is the set of headers to check for the preferred username",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "RequestHeaderIdentityProvider",
+ "Kind": "GitLabIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.RoutingConfig": {
- "description": "RoutingConfig holds the necessary configuration options for routing to subdomains",
+ "io.openshift.config.legacy.v1.GoogleIdentityProvider": {
+ "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "subdomain"
+ "clientID",
+ "clientSecret",
+ "hostedDomain"
],
"properties": {
- "subdomain": {
- "description": "Subdomain is the suffix appended to $service.$namespace. to form the default route hostname DEPRECATED: This field is being replaced by routers setting their own defaults. This is the \"default\" route.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "clientID": {
+ "description": "ClientID is the oauth client ID",
+ "type": "string",
+ "default": ""
+ },
+ "clientSecret": {
+ "description": "ClientSecret is the oauth client secret",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource"
+ },
+ "hostedDomain": {
+ "description": "HostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to",
"type": "string",
"default": ""
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "RoutingConfig",
+ "Kind": "GoogleIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.SecurityAllocator": {
- "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.",
+ "io.openshift.config.legacy.v1.GrantConfig": {
+ "description": "GrantConfig holds the necessary configuration options for grant handlers",
"type": "object",
"required": [
- "uidAllocatorRange",
- "mcsAllocatorRange",
- "mcsLabelsPerProject"
+ "method",
+ "serviceAccountMethod"
],
"properties": {
- "mcsAllocatorRange": {
- "description": "MCSAllocatorRange defines the range of MCS categories that will be assigned to namespaces. The format is \"\u003cprefix\u003e/\u003cnumberOfLabels\u003e[,\u003cmaxCategory\u003e]\". The default is \"s0/2\" and will allocate from c0 -\u003e c1023, which means a total of 535k labels are available (1024 choose 2 ~ 535k). If this value is changed after startup, new projects may receive labels that are already allocated to other projects. Prefix may be any valid SELinux set of terms (including user, role, and type), although leaving them as the default will allow the server to set them automatically.\n\nExamples: * s0:/2 - Allocate labels from s0:c0,c0 to s0:c511,c511 * s0:/2,512 - Allocate labels from s0:c0,c0,c0 to s0:c511,c511,511",
+ "method": {
+ "description": "Method determines the default strategy to use when an OAuth client requests a grant. This method will be used only if the specific OAuth client doesn't provide a strategy of their own. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients\n - deny: always denies grant requests, useful for black-listed clients",
"type": "string",
"default": ""
},
- "mcsLabelsPerProject": {
- "description": "MCSLabelsPerProject defines the number of labels that should be reserved per project. The default is 5 to match the default UID and MCS ranges (100k namespaces, 535k/5 labels).",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "uidAllocatorRange": {
- "description": "UIDAllocatorRange defines the total set of Unix user IDs (UIDs) that will be allocated to projects automatically, and the size of the block each namespace gets. For example, 1000-1999/10 will allocate ten UIDs per namespace, and will be able to allocate up to 100 blocks before running out of space. The default is to allocate from 1 billion to 2 billion in 10k blocks (which is the expected size of the ranges container images will use once user namespaces are started).",
+ "serviceAccountMethod": {
+ "description": "ServiceAccountMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt",
"type": "string",
"default": ""
}
@@ -67155,83 +67655,68 @@
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "SecurityAllocator",
+ "Kind": "GrantConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.ServiceAccountConfig": {
- "description": "ServiceAccountConfig holds the necessary configuration options for a service account",
+ "io.openshift.config.legacy.v1.GroupResource": {
+ "description": "GroupResource points to a resource by its name and API group.",
"type": "object",
"required": [
- "managedNames",
- "limitSecretReferences",
- "privateKeyFile",
- "publicKeyFiles",
- "masterCA"
+ "group",
+ "resource"
],
"properties": {
- "limitSecretReferences": {
- "description": "LimitSecretReferences controls whether or not to allow a service account to reference any secret in a namespace without explicitly referencing them",
- "type": "boolean",
- "default": false
+ "group": {
+ "description": "Group is the name of an API group",
+ "type": "string",
+ "default": ""
},
- "managedNames": {
- "description": "ManagedNames is a list of service account names that will be auto-created in every namespace. If no names are specified, the ServiceAccountsController will not be started.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "masterCA": {
- "description": "MasterCA is the CA for verifying the TLS connection back to the master. The service account controller will automatically inject the contents of this file into pods so they can verify connections to the master.",
- "type": "string",
- "default": ""
- },
- "privateKeyFile": {
- "description": "PrivateKeyFile is a file containing a PEM-encoded private RSA key, used to sign service account tokens. If no private key is specified, the service account TokensController will not be started.",
+ "resource": {
+ "description": "Resource is the name of a resource.",
"type": "string",
"default": ""
- },
- "publicKeyFiles": {
- "description": "PublicKeyFiles is a list of files, each containing a PEM-encoded public RSA key. (If any file contains a private key, the public portion of the key is used) The list of public keys is used to verify presented service account tokens. Each key is tried in order until the list is exhausted or verification succeeds. If no keys are specified, no service account authentication will be available.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "ServiceAccountConfig",
+ "Kind": "GroupResource",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.ServiceServingCert": {
- "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.",
+ "io.openshift.config.legacy.v1.HTPasswdPasswordIdentityProvider": {
+ "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "signer"
+ "file"
],
"properties": {
- "signer": {
- "description": "Signer holds the signing information used to automatically sign serving certificates. If this value is nil, then certs are not signed automatically.",
- "$ref": "#/definitions/io.openshift.config.legacy.v1.CertInfo"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "file": {
+ "description": "File is a reference to your htpasswd file",
+ "type": "string",
+ "default": ""
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "ServiceServingCert",
+ "Kind": "HTPasswdPasswordIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.ServingInfo": {
- "description": "ServingInfo holds information about serving web pages",
+ "io.openshift.config.legacy.v1.HTTPServingInfo": {
+ "description": "HTTPServingInfo holds configuration for serving HTTP",
"type": "object",
"required": [
"bindAddress",
@@ -67239,7 +67724,9 @@
"certFile",
"keyFile",
"clientCA",
- "namedCertificates"
+ "namedCertificates",
+ "maxRequestsInFlight",
+ "requestTimeoutSeconds"
],
"properties": {
"bindAddress": {
@@ -67275,6 +67762,12 @@
"type": "string",
"default": ""
},
+ "maxRequestsInFlight": {
+ "description": "MaxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
"minTLSVersion": {
"description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants",
"type": "string"
@@ -67286,153 +67779,190 @@
"default": {},
"$ref": "#/definitions/io.openshift.config.legacy.v1.NamedCertificate"
}
+ },
+ "requestTimeoutSeconds": {
+ "description": "RequestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "ServingInfo",
+ "Kind": "HTTPServingInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.SessionConfig": {
- "description": "SessionConfig specifies options for cookie-based sessions. Used by AuthRequestHandlerSession",
+ "io.openshift.config.legacy.v1.IdentityProvider": {
+ "description": "IdentityProvider provides identities for users authenticating using credentials",
"type": "object",
"required": [
- "sessionSecretsFile",
- "sessionMaxAgeSeconds",
- "sessionName"
+ "name",
+ "challenge",
+ "login",
+ "mappingMethod",
+ "provider"
],
"properties": {
- "sessionMaxAgeSeconds": {
- "description": "SessionMaxAgeSeconds specifies how long created sessions last. Used by AuthRequestHandlerSession",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "challenge": {
+ "description": "UseAsChallenger indicates whether to issue WWW-Authenticate challenges for this provider",
+ "type": "boolean",
+ "default": false
},
- "sessionName": {
- "description": "SessionName is the cookie name used to store the session",
+ "login": {
+ "description": "UseAsLogin indicates whether to use this identity provider for unauthenticated browsers to login against",
+ "type": "boolean",
+ "default": false
+ },
+ "mappingMethod": {
+ "description": "MappingMethod determines how identities from this provider are mapped to users",
"type": "string",
"default": ""
},
- "sessionSecretsFile": {
- "description": "SessionSecretsFile is a reference to a file containing a serialized SessionSecrets object If no file is specified, a random signing and encryption key are generated at each server start",
+ "name": {
+ "description": "Name is used to qualify the identities returned by this provider",
"type": "string",
"default": ""
+ },
+ "provider": {
+ "description": "Provider contains the information about how to set up a specific identity provider",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "SessionConfig",
+ "Kind": "IdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.SessionSecret": {
- "description": "SessionSecret is a secret used to authenticate/decrypt cookie-based sessions",
+ "io.openshift.config.legacy.v1.ImageConfig": {
+ "description": "ImageConfig holds the necessary configuration options for building image names for system components",
"type": "object",
"required": [
- "authentication",
- "encryption"
+ "format",
+ "latest"
],
"properties": {
- "authentication": {
- "description": "Authentication is used to authenticate sessions using HMAC. Recommended to use a secret with 32 or 64 bytes.",
+ "format": {
+ "description": "Format is the format of the name to be built for the system component",
"type": "string",
"default": ""
},
- "encryption": {
- "description": "Encryption is used to encrypt sessions. Must be 16, 24, or 32 characters long, to select AES-128, AES-",
- "type": "string",
- "default": ""
+ "latest": {
+ "description": "Latest determines if the latest tag will be pulled from the registry",
+ "type": "boolean",
+ "default": false
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "SessionSecret",
+ "Kind": "ImageConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.SessionSecrets": {
- "description": "SessionSecrets list the secrets to use to sign/encrypt and authenticate/decrypt created sessions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.ImagePolicyConfig": {
+ "description": "ImagePolicyConfig holds the necessary configuration options for limits and behavior for importing images",
"type": "object",
"required": [
- "secrets"
+ "maxImagesBulkImportedPerRepository",
+ "disableScheduledImport",
+ "scheduledImageImportMinimumIntervalSeconds",
+ "maxScheduledImageImportsPerMinute"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "additionalTrustedCA": {
+ "description": "AdditionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted during imagestream import.",
"type": "string"
},
- "secrets": {
- "description": "Secrets is a list of secrets New sessions are signed and encrypted using the first secret. Existing sessions are decrypted/authenticated by each secret until one succeeds. This allows rotating secrets.",
+ "allowedRegistriesForImport": {
+ "description": "AllowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.SessionSecret"
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.RegistryLocation"
}
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "legacy.config.openshift.io",
- "Version": "v1",
- "Kind": "SessionSecrets",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.legacy.v1.SourceStrategyDefaultsConfig": {
- "description": "SourceStrategyDefaultsConfig contains values that apply to builds using the source strategy.",
- "type": "object",
- "properties": {
- "incremental": {
- "description": "incremental indicates if s2i build strategies should perform an incremental build or not",
- "type": "boolean"
+ },
+ "disableScheduledImport": {
+ "description": "DisableScheduledImport allows scheduled background import of images to be disabled.",
+ "type": "boolean",
+ "default": false
+ },
+ "externalRegistryHostname": {
+ "description": "ExternalRegistryHostname sets the hostname for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.",
+ "type": "string"
+ },
+ "internalRegistryHostname": {
+ "description": "InternalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.",
+ "type": "string"
+ },
+ "maxImagesBulkImportedPerRepository": {
+ "description": "MaxImagesBulkImportedPerRepository controls the number of images that are imported when a user does a bulk import of a container repository. This number defaults to 50 to prevent users from importing large numbers of images accidentally. Set -1 for no limit.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "maxScheduledImageImportsPerMinute": {
+ "description": "MaxScheduledImageImportsPerMinute is the maximum number of scheduled image streams that will be imported in the background per minute. The default value is 60. Set to -1 for unlimited.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "scheduledImageImportMinimumIntervalSeconds": {
+ "description": "ScheduledImageImportMinimumIntervalSeconds is the minimum number of seconds that can elapse between when image streams scheduled for background import are checked against the upstream repository. The default value is 15 minutes.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "SourceStrategyDefaultsConfig",
+ "Kind": "ImagePolicyConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.StringSource": {
- "description": "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.",
+ "io.openshift.config.legacy.v1.JenkinsPipelineConfig": {
+ "description": "JenkinsPipelineConfig holds configuration for the Jenkins pipeline strategy",
"type": "object",
"required": [
- "value",
- "env",
- "file",
- "keyFile"
+ "autoProvisionEnabled",
+ "templateNamespace",
+ "templateName",
+ "serviceName",
+ "parameters"
],
"properties": {
- "env": {
- "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.",
- "type": "string",
- "default": ""
+ "autoProvisionEnabled": {
+ "description": "AutoProvisionEnabled determines whether a Jenkins server will be spawned from the provided template when the first build config in the project with type JenkinsPipeline is created. When not specified this option defaults to true.",
+ "type": "boolean"
},
- "file": {
- "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.",
+ "parameters": {
+ "description": "Parameters specifies a set of optional parameters to the Jenkins template.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "serviceName": {
+ "description": "ServiceName is the name of the Jenkins service OpenShift uses to detect whether a Jenkins pipeline handler has already been installed in a project. This value *must* match a service name in the provided template.",
"type": "string",
"default": ""
},
- "keyFile": {
- "description": "KeyFile references a file containing the key to use to decrypt the value.",
+ "templateName": {
+ "description": "TemplateName is the name of the default Jenkins template",
"type": "string",
"default": ""
},
- "value": {
- "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.",
+ "templateNamespace": {
+ "description": "TemplateNamespace contains the namespace name where the Jenkins template is stored",
"type": "string",
"default": ""
}
@@ -67441,70 +67971,96 @@
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "StringSource",
+ "Kind": "JenkinsPipelineConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.StringSourceSpec": {
- "description": "StringSourceSpec specifies a string value, or external location",
+ "io.openshift.config.legacy.v1.KeystonePasswordIdentityProvider": {
+ "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "value",
- "env",
- "file",
- "keyFile"
+ "url",
+ "ca",
+ "certFile",
+ "keyFile",
+ "domainName",
+ "useKeystoneIdentity"
],
"properties": {
- "env": {
- "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "ca": {
+ "description": "CA is the CA for verifying TLS connections",
"type": "string",
"default": ""
},
- "file": {
- "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.",
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
+ "type": "string",
+ "default": ""
+ },
+ "domainName": {
+ "description": "Domain Name is required for keystone v3",
"type": "string",
"default": ""
},
"keyFile": {
- "description": "KeyFile references a file containing the key to use to decrypt the value.",
+ "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
"type": "string",
"default": ""
},
- "value": {
- "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "url": {
+ "description": "URL is the remote URL to connect to",
"type": "string",
"default": ""
+ },
+ "useKeystoneIdentity": {
+ "description": "UseKeystoneIdentity flag indicates that user should be authenticated by keystone ID, not by username",
+ "type": "boolean",
+ "default": false
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "StringSourceSpec",
+ "Kind": "KeystonePasswordIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.TokenConfig": {
- "description": "TokenConfig holds the necessary configuration options for authorization and access tokens",
+ "io.openshift.config.legacy.v1.KubeletConnectionInfo": {
+ "description": "KubeletConnectionInfo holds information necessary for connecting to a kubelet",
"type": "object",
"required": [
- "authorizeTokenMaxAgeSeconds",
- "accessTokenMaxAgeSeconds"
+ "port",
+ "ca",
+ "certFile",
+ "keyFile"
],
"properties": {
- "accessTokenInactivityTimeoutSeconds": {
- "description": "AccessTokenInactivityTimeoutSeconds defined the default token inactivity timeout for tokens granted by any client. Setting it to nil means the feature is completely disabled (default) The default setting can be overriden on OAuthClient basis. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Valid values are: - 0: Tokens never time out - X: Tokens time out if there is no activity for X seconds The current minimum allowed value for X is 300 (5 minutes)",
- "type": "integer",
- "format": "int32"
+ "ca": {
+ "description": "CA is the CA for verifying TLS connections to kubelets",
+ "type": "string",
+ "default": ""
},
- "accessTokenMaxAgeSeconds": {
- "description": "AccessTokenMaxAgeSeconds defines the maximum age of access tokens",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
+ "type": "string",
+ "default": ""
},
- "authorizeTokenMaxAgeSeconds": {
- "description": "AuthorizeTokenMaxAgeSeconds defines the maximum age of authorize tokens",
+ "keyFile": {
+ "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "type": "string",
+ "default": ""
+ },
+ "port": {
+ "description": "Port is the port to connect to kubelets on",
"type": "integer",
"format": "int32",
"default": 0
@@ -67514,34 +68070,113 @@
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "TokenConfig",
+ "Kind": "KubeletConnectionInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.UserAgentDenyRule": {
- "description": "UserAgentDenyRule adds a rejection message that can be used to help a user figure out how to get an approved client",
+ "io.openshift.config.legacy.v1.KubernetesMasterConfig": {
+ "description": "KubernetesMasterConfig holds the necessary configuration options for the Kubernetes master",
"type": "object",
"required": [
- "regex",
- "httpVerbs",
- "rejectionMessage"
+ "apiLevels",
+ "disabledAPIGroupVersions",
+ "masterIP",
+ "masterEndpointReconcileTTL",
+ "servicesSubnet",
+ "servicesNodePortRange",
+ "schedulerConfigFile",
+ "podEvictionTimeout",
+ "proxyClientInfo",
+ "apiServerArguments",
+ "controllerArguments",
+ "schedulerArguments"
],
"properties": {
- "httpVerbs": {
- "description": "HTTPVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".",
+ "apiLevels": {
+ "description": "APILevels is a list of API levels that should be enabled on startup: v1 as examples",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "regex": {
- "description": "UserAgentRegex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f",
+ "apiServerArguments": {
+ "description": "APIServerArguments are key value pairs that will be passed directly to the Kube apiserver that match the apiservers's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "controllerArguments": {
+ "description": "ControllerArguments are key value pairs that will be passed directly to the Kube controller manager that match the controller manager's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "disabledAPIGroupVersions": {
+ "description": "DisabledAPIGroupVersions is a map of groups to the versions (or *) that should be disabled.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "masterEndpointReconcileTTL": {
+ "description": "MasterEndpointReconcileTTL sets the time to live in seconds of an endpoint record recorded by each master. The endpoints are checked at an interval that is 2/3 of this value and this value defaults to 15s if unset. In very large clusters, this value may be increased to reduce the possibility that the master endpoint record expires (due to other load on the etcd server) and causes masters to drop in and out of the kubernetes service record. It is not recommended to set this value below 15s.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "masterIP": {
+ "description": "MasterIP is the public IP address of kubernetes stuff. If empty, the first result from net.InterfaceAddrs will be used.",
"type": "string",
"default": ""
},
- "rejectionMessage": {
- "description": "RejectionMessage is the message shown when rejecting a client. If it is not a set, the default message is used.",
+ "podEvictionTimeout": {
+ "description": "PodEvictionTimeout controls grace period for deleting pods on failed nodes. It takes valid time duration string. If empty, you get the default pod eviction timeout.",
+ "type": "string",
+ "default": ""
+ },
+ "proxyClientInfo": {
+ "description": "ProxyClientInfo specifies the client cert/key to use when proxying to pods",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.CertInfo"
+ },
+ "schedulerArguments": {
+ "description": "SchedulerArguments are key value pairs that will be passed directly to the Kube scheduler that match the scheduler's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "schedulerConfigFile": {
+ "description": "SchedulerConfigFile points to a file that describes how to set up the scheduler. If empty, you get the default scheduling rules.",
+ "type": "string",
+ "default": ""
+ },
+ "servicesNodePortRange": {
+ "description": "ServicesNodePortRange is the range to use for assigning service public ports on a host.",
+ "type": "string",
+ "default": ""
+ },
+ "servicesSubnet": {
+ "description": "ServicesSubnet is the subnet to use for assigning service IPs",
"type": "string",
"default": ""
}
@@ -67550,68 +68185,50 @@
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "UserAgentDenyRule",
+ "Kind": "KubernetesMasterConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.UserAgentMatchRule": {
- "description": "UserAgentMatchRule describes how to match a given request based on User-Agent and HTTPVerb",
+ "io.openshift.config.legacy.v1.LDAPAttributeMapping": {
+ "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields",
"type": "object",
"required": [
- "regex",
- "httpVerbs"
+ "id",
+ "preferredUsername",
+ "name",
+ "email"
],
"properties": {
- "httpVerbs": {
- "description": "HTTPVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".",
+ "email": {
+ "description": "Email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "regex": {
- "description": "UserAgentRegex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "legacy.config.openshift.io",
- "Version": "v1",
- "Kind": "UserAgentMatchRule",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.legacy.v1.UserAgentMatchingConfig": {
- "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!",
- "type": "object",
- "required": [
- "requiredClients",
- "deniedClients",
- "defaultRejectionMessage"
- ],
- "properties": {
- "defaultRejectionMessage": {
- "description": "DefaultRejectionMessage is the message shown when rejecting a client. If it is not a set, a generic message is given.",
- "type": "string",
- "default": ""
+ "id": {
+ "description": "ID is the list of attributes whose values should be used as the user ID. Required. LDAP standard identity attribute is \"dn\"",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "deniedClients": {
- "description": "If this list is non-empty, then a User-Agent must not match any of the UserAgentRegexes",
+ "name": {
+ "description": "Name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.UserAgentDenyRule"
+ "type": "string",
+ "default": ""
}
},
- "requiredClients": {
- "description": "If this list is non-empty, then a User-Agent must match one of the UserAgentRegexes to be allowed",
+ "preferredUsername": {
+ "description": "PreferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.legacy.v1.UserAgentMatchRule"
+ "type": "string",
+ "default": ""
}
}
},
@@ -67619,829 +68236,971 @@
"Type": "nested",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "UserAgentMatchingConfig",
+ "Kind": "LDAPAttributeMapping",
"Scope": "Namespaced"
}
},
- "io.openshift.config.legacy.v1.WebhookTokenAuthenticator": {
- "description": "WebhookTokenAuthenticators holds the necessary configuation options for external token authenticators",
+ "io.openshift.config.legacy.v1.LDAPPasswordIdentityProvider": {
+ "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "configFile",
- "cacheTTL"
- ],
- "properties": {
- "cacheTTL": {
- "description": "CacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get a default timeout of 2 minutes. If zero (e.g. \"0m\"), caching is disabled",
+ "url",
+ "bindDN",
+ "bindPassword",
+ "insecure",
+ "ca",
+ "attributes"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "attributes": {
+ "description": "Attributes maps LDAP attributes to identities",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPAttributeMapping"
+ },
+ "bindDN": {
+ "description": "BindDN is an optional DN to bind with during the search phase.",
"type": "string",
"default": ""
},
- "configFile": {
- "description": "ConfigFile is a path to a Kubeconfig file with the webhook configuration",
+ "bindPassword": {
+ "description": "BindPassword is an optional password to bind with during the search phase.",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource"
+ },
+ "ca": {
+ "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
+ "type": "string",
+ "default": ""
+ },
+ "insecure": {
+ "description": "Insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830",
+ "type": "boolean",
+ "default": false
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "url": {
+ "description": "URL is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is\n ldap://host:port/basedn?attribute?scope?filter",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "WebhookTokenAuthenticator",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.openshiftcontrolplane.v1.APIServers": {
- "type": "object",
- "required": [
- "perGroupOptions"
- ],
- "properties": {
- "perGroupOptions": {
- "description": "perGroupOptions is a list of enabled/disabled API servers in addition to the defaults",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.PerGroupOptions"
- }
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
- "Version": "v1",
- "Kind": "APIServers",
+ "Kind": "LDAPPasswordIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.BuildControllerConfig": {
+ "io.openshift.config.legacy.v1.LDAPQuery": {
+ "description": "LDAPQuery holds the options necessary to build an LDAP query",
"type": "object",
"required": [
- "imageTemplateFormat",
- "buildDefaults",
- "buildOverrides",
- "additionalTrustedCA"
+ "baseDN",
+ "scope",
+ "derefAliases",
+ "timeout",
+ "filter",
+ "pageSize"
],
"properties": {
- "additionalTrustedCA": {
- "description": "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted for image pushes and pulls during builds.",
+ "baseDN": {
+ "description": "The DN of the branch of the directory where all searches should start from",
"type": "string",
"default": ""
},
- "buildDefaults": {
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.BuildDefaultsConfig"
+ "derefAliases": {
+ "description": "The (optional) behavior of the search with regards to alisases. Can be: never: never dereference aliases, search: only dereference in searching, base: only dereference in finding the base object, always: always dereference Defaults to always dereferencing if not set",
+ "type": "string",
+ "default": ""
},
- "buildOverrides": {
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.BuildOverridesConfig"
+ "filter": {
+ "description": "Filter is a valid LDAP search filter that retrieves all relevant entries from the LDAP server with the base DN",
+ "type": "string",
+ "default": ""
},
- "imageTemplateFormat": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImageConfig"
+ "pageSize": {
+ "description": "PageSize is the maximum preferred page size, measured in LDAP entries. A page size of 0 means no paging will be done.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "scope": {
+ "description": "The (optional) scope of the search. Can be: base: only the base object, one: all object on the base level, sub: the entire subtree Defaults to the entire subtree if not set",
+ "type": "string",
+ "default": ""
+ },
+ "timeout": {
+ "description": "TimeLimit holds the limit of time in seconds that any request to the server can remain outstanding before the wait for a response is given up. If this is 0, no client-side limit is imposed",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "BuildControllerConfig",
+ "Kind": "LDAPQuery",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.BuildDefaultsConfig": {
- "description": "BuildDefaultsConfig controls the default information for Builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.LDAPSyncConfig": {
+ "description": "LDAPSyncConfig holds the necessary configuration options to define an LDAP group sync\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
+ "required": [
+ "url",
+ "bindDN",
+ "bindPassword",
+ "insecure",
+ "ca",
+ "groupUIDNameMapping"
+ ],
"properties": {
- "annotations": {
- "description": "annotations are annotations that will be added to the build pod",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
+ "activeDirectory": {
+ "description": "ActiveDirectoryConfig holds the configuration for extracting data from an LDAP server set up in a fashion similar to that used in Active Directory: first-class user entries, with group membership determined by a multi-valued attribute on members listing groups they are a member of",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ActiveDirectoryConfig"
},
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "env": {
- "description": "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
- }
- },
- "gitHTTPProxy": {
- "description": "gitHTTPProxy is the location of the HTTPProxy for Git source",
- "type": "string"
- },
- "gitHTTPSProxy": {
- "description": "gitHTTPSProxy is the location of the HTTPSProxy for Git source",
- "type": "string"
- },
- "gitNoProxy": {
- "description": "gitNoProxy is the list of domains for which the proxy should not be used",
- "type": "string"
- },
- "imageLabels": {
- "description": "imageLabels is a list of labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.ImageLabel"
- }
+ "augmentedActiveDirectory": {
+ "description": "AugmentedActiveDirectoryConfig holds the configuration for extracting data from an LDAP server set up in a fashion similar to that used in Active Directory as described above, with one addition: first-class group entries exist and are used to hold metadata but not group membership",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.AugmentedActiveDirectoryConfig"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "bindDN": {
+ "description": "BindDN is an optional DN to bind to the LDAP server with",
+ "type": "string",
+ "default": ""
},
- "nodeSelector": {
- "description": "nodeSelector is a selector which must be true for the build pod to fit on a node",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
+ "bindPassword": {
+ "description": "BindPassword is an optional password to bind with during the search phase.",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource"
},
- "resources": {
- "description": "resources defines resource requirements to execute the build.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
+ "ca": {
+ "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
+ "type": "string",
+ "default": ""
},
- "sourceStrategyDefaults": {
- "description": "sourceStrategyDefaults are default values that apply to builds using the source strategy.",
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.SourceStrategyDefaultsConfig"
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "openshiftcontrolplane.config.openshift.io",
- "Version": "v1",
- "Kind": "BuildDefaultsConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.openshiftcontrolplane.v1.BuildOverridesConfig": {
- "description": "BuildOverridesConfig controls override settings for builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
- "type": "object",
- "properties": {
- "annotations": {
- "description": "annotations are annotations that will be added to the build pod",
+ "groupUIDNameMapping": {
+ "description": "LDAPGroupUIDToOpenShiftGroupNameMapping is an optional direct mapping of LDAP group UIDs to OpenShift Group names",
"type": "object",
"additionalProperties": {
"type": "string",
"default": ""
}
},
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "forcePull": {
- "description": "forcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself",
- "type": "boolean"
- },
- "imageLabels": {
- "description": "imageLabels is a list of labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.build.v1.ImageLabel"
- }
+ "insecure": {
+ "description": "Insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830",
+ "type": "boolean",
+ "default": false
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "nodeSelector": {
- "description": "nodeSelector is a selector which must be true for the build pod to fit on a node",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
+ "rfc2307": {
+ "description": "RFC2307Config holds the configuration for extracting data from an LDAP server set up in a fashion similar to RFC2307: first-class group and user entries, with group membership determined by a multi-valued attribute on the group entry listing its members",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.RFC2307Config"
},
- "tolerations": {
- "description": "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
- }
+ "url": {
+ "description": "Host is the scheme, host and port of the LDAP server to connect to: scheme://host:port",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "BuildOverridesConfig",
+ "Kind": "LDAPSyncConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.ClusterNetworkEntry": {
- "description": "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.",
+ "io.openshift.config.legacy.v1.LocalQuota": {
+ "description": "LocalQuota contains options for controlling local volume quota on the node.",
"type": "object",
"required": [
- "cidr",
- "hostSubnetLength"
+ "perFSGroup"
],
"properties": {
- "cidr": {
- "description": "CIDR defines the total range of a cluster networks address space.",
- "type": "string",
- "default": ""
- },
- "hostSubnetLength": {
- "description": "HostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pod.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "perFSGroup": {
+ "description": "FSGroup can be specified to enable a quota on local storage use per unique FSGroup ID. At present this is only implemented for emptyDir volumes, and if the underlying volumeDirectory is on an XFS filesystem.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "ClusterNetworkEntry",
+ "Kind": "LocalQuota",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.DeployerControllerConfig": {
+ "io.openshift.config.legacy.v1.MasterAuthConfig": {
+ "description": "MasterAuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators",
"type": "object",
"required": [
- "imageTemplateFormat"
+ "requestHeader",
+ "webhookTokenAuthenticators",
+ "oauthMetadataFile"
],
"properties": {
- "imageTemplateFormat": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImageConfig"
+ "oauthMetadataFile": {
+ "description": "OAuthMetadataFile is a path to a file containing the discovery endpoint for OAuth 2.0 Authorization Server Metadata for an external OAuth server. See IETF Draft: // https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This option is mutually exclusive with OAuthConfig",
+ "type": "string",
+ "default": ""
+ },
+ "requestHeader": {
+ "description": "RequestHeader holds options for setting up a front proxy against the API. It is optional.",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.RequestHeaderAuthenticationOptions"
+ },
+ "webhookTokenAuthenticators": {
+ "description": "WebhookTokenAuthnConfig, if present configures remote token reviewers",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.WebhookTokenAuthenticator"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "DeployerControllerConfig",
+ "Kind": "MasterAuthConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.DockerPullSecretControllerConfig": {
+ "io.openshift.config.legacy.v1.MasterClients": {
+ "description": "MasterClients holds references to `.kubeconfig` files that qualify master clients for OpenShift and Kubernetes",
"type": "object",
"required": [
- "registryURLs",
- "internalRegistryHostname"
+ "openshiftLoopbackKubeConfig",
+ "openshiftLoopbackClientConnectionOverrides"
],
"properties": {
- "internalRegistryHostname": {
- "description": "internalRegistryHostname is the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. Docker pull secrets will be generated for this registry.",
+ "openshiftLoopbackClientConnectionOverrides": {
+ "description": "OpenShiftLoopbackClientConnectionOverrides specifies client overrides for system components to loop back to this master.",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ClientConnectionOverrides"
+ },
+ "openshiftLoopbackKubeConfig": {
+ "description": "OpenShiftLoopbackKubeConfig is a .kubeconfig filename for system components to loopback to this master",
"type": "string",
"default": ""
- },
- "registryURLs": {
- "description": "registryURLs is a list of urls that the docker pull secrets should be valid for.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "DockerPullSecretControllerConfig",
+ "Kind": "MasterClients",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.FrontProxyConfig": {
+ "io.openshift.config.legacy.v1.MasterConfig": {
+ "description": "MasterConfig holds the necessary configuration options for the OpenShift master\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "clientCA",
- "allowedNames",
- "usernameHeaders",
- "groupHeaders",
- "extraHeaderPrefixes"
+ "servingInfo",
+ "authConfig",
+ "aggregatorConfig",
+ "corsAllowedOrigins",
+ "apiLevels",
+ "masterPublicURL",
+ "controllers",
+ "admissionConfig",
+ "controllerConfig",
+ "etcdStorageConfig",
+ "etcdClientInfo",
+ "kubeletClientInfo",
+ "kubernetesMasterConfig",
+ "etcdConfig",
+ "oauthConfig",
+ "dnsConfig",
+ "serviceAccountConfig",
+ "masterClients",
+ "imageConfig",
+ "imagePolicyConfig",
+ "policyConfig",
+ "projectConfig",
+ "routingConfig",
+ "networkConfig",
+ "volumeConfig",
+ "jenkinsPipelineConfig",
+ "auditConfig"
],
"properties": {
- "allowedNames": {
- "description": "allowedNames is an optional list of common names to require a match from.",
+ "admissionConfig": {
+ "description": "AdmissionConfig contains admission control plugin configuration.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.AdmissionConfig"
+ },
+ "aggregatorConfig": {
+ "description": "AggregatorConfig has options for configuring the aggregator component of the API server.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.AggregatorConfig"
+ },
+ "apiLevels": {
+ "description": "APILevels is a list of API levels that should be enabled on startup: v1 as examples",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "clientCA": {
- "description": "clientCA is a path to the CA bundle to use to verify the common name of the front proxy's client cert",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "auditConfig": {
+ "description": "AuditConfig holds information related to auditing capabilities.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.AuditConfig"
+ },
+ "authConfig": {
+ "description": "AuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterAuthConfig"
+ },
+ "controllerConfig": {
+ "description": "ControllerConfig holds configuration values for controllers",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ControllerConfig"
+ },
+ "controllers": {
+ "description": "Controllers is a list of the controllers that should be started. If set to \"none\", no controllers will start automatically. The default value is \"*\" which will start all controllers. When using \"*\", you may exclude controllers by prepending a \"-\" in front of their name. No other values are recognized at this time.",
"type": "string",
"default": ""
},
- "extraHeaderPrefixes": {
- "description": "extraHeaderPrefixes is the set of header prefixes to check for user extra",
+ "corsAllowedOrigins": {
+ "description": "CORSAllowedOrigins",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "groupHeaders": {
- "description": "groupHeaders is the set of headers to check for groups",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "dnsConfig": {
+ "description": "DNSConfig, if present start the DNS server in this process",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.DNSConfig"
},
- "usernameHeaders": {
- "description": "usernameHeaders is the set of headers to check for the username",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
- "Version": "v1",
- "Kind": "FrontProxyConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.openshiftcontrolplane.v1.ImageConfig": {
- "description": "ImageConfig holds the necessary configuration options for building image names for system components",
- "type": "object",
- "required": [
- "format",
- "latest"
- ],
- "properties": {
- "format": {
- "description": "Format is the format of the name to be built for the system component",
- "type": "string",
- "default": ""
+ "etcdClientInfo": {
+ "description": "EtcdClientInfo contains information about how to connect to etcd",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.EtcdConnectionInfo"
},
- "latest": {
- "description": "Latest determines if the latest tag will be pulled from the registry",
- "type": "boolean",
- "default": false
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
- "Version": "v1",
- "Kind": "ImageConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.openshiftcontrolplane.v1.ImageImportControllerConfig": {
- "type": "object",
- "required": [
- "maxScheduledImageImportsPerMinute",
- "disableScheduledImport",
- "scheduledImageImportMinimumIntervalSeconds"
- ],
- "properties": {
- "disableScheduledImport": {
- "description": "disableScheduledImport allows scheduled background import of images to be disabled.",
- "type": "boolean",
- "default": false
+ "etcdConfig": {
+ "description": "EtcdConfig, if present start etcd in this process",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.EtcdConfig"
},
- "maxScheduledImageImportsPerMinute": {
- "description": "maxScheduledImageImportsPerMinute is the maximum number of image streams that will be imported in the background per minute. The default value is 60. Set to -1 for unlimited.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "etcdStorageConfig": {
+ "description": "EtcdStorageConfig contains information about how API resources are stored in Etcd. These values are only relevant when etcd is the backing store for the cluster.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.EtcdStorageConfig"
},
- "scheduledImageImportMinimumIntervalSeconds": {
- "description": "scheduledImageImportMinimumIntervalSeconds is the minimum number of seconds that can elapse between when image streams scheduled for background import are checked against the upstream repository. The default value is 15 minutes.",
- "type": "integer",
- "format": "int32",
- "default": 0
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
- "Version": "v1",
- "Kind": "ImageImportControllerConfig",
+ "imageConfig": {
+ "description": "ImageConfig holds options that describe how to build image names for system components",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ImageConfig"
+ },
+ "imagePolicyConfig": {
+ "description": "ImagePolicyConfig controls limits and behavior for importing images",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ImagePolicyConfig"
+ },
+ "jenkinsPipelineConfig": {
+ "description": "JenkinsPipelineConfig holds information about the default Jenkins template used for JenkinsPipeline build strategy.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.JenkinsPipelineConfig"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "kubeletClientInfo": {
+ "description": "KubeletClientInfo contains information about how to connect to kubelets",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.KubeletConnectionInfo"
+ },
+ "kubernetesMasterConfig": {
+ "description": "KubernetesMasterConfig, if present start the kubernetes master in this process",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.KubernetesMasterConfig"
+ },
+ "masterClients": {
+ "description": "MasterClients holds all the client connection information for controllers and other system components",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterClients"
+ },
+ "masterPublicURL": {
+ "description": "MasterPublicURL is how clients can access the OpenShift API server",
+ "type": "string",
+ "default": ""
+ },
+ "networkConfig": {
+ "description": "NetworkConfig to be passed to the compiled in network plugin",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterNetworkConfig"
+ },
+ "oauthConfig": {
+ "description": "OAuthConfig, if present start the /oauth endpoint in this process",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.OAuthConfig"
+ },
+ "policyConfig": {
+ "description": "PolicyConfig holds information about where to locate critical pieces of bootstrapping policy",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.PolicyConfig"
+ },
+ "projectConfig": {
+ "description": "ProjectConfig holds information about project creation and defaults",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ProjectConfig"
+ },
+ "routingConfig": {
+ "description": "RoutingConfig holds information about routing and route generation",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.RoutingConfig"
+ },
+ "serviceAccountConfig": {
+ "description": "ServiceAccountConfig holds options related to service accounts",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ServiceAccountConfig"
+ },
+ "servingInfo": {
+ "description": "ServingInfo describes how to start serving",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.HTTPServingInfo"
+ },
+ "volumeConfig": {
+ "description": "MasterVolumeConfig contains options for configuring volume plugins in the master node.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterVolumeConfig"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "legacy.config.openshift.io",
+ "Version": "v1",
+ "Kind": "MasterConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.ImagePolicyConfig": {
+ "io.openshift.config.legacy.v1.MasterNetworkConfig": {
+ "description": "MasterNetworkConfig to be passed to the compiled in network plugin",
"type": "object",
"required": [
- "maxImagesBulkImportedPerRepository",
- "allowedRegistriesForImport",
- "internalRegistryHostname",
- "externalRegistryHostnames",
- "additionalTrustedCA"
+ "networkPluginName",
+ "clusterNetworks",
+ "serviceNetworkCIDR",
+ "externalIPNetworkCIDRs",
+ "ingressIPNetworkCIDR"
],
"properties": {
- "additionalTrustedCA": {
- "description": "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted during imagestream import.",
- "type": "string",
- "default": ""
+ "clusterNetworkCIDR": {
+ "description": "ClusterNetworkCIDR is the CIDR string to specify the global overlay network's L3 space. Deprecated, but maintained for backwards compatibility, use ClusterNetworks instead.",
+ "type": "string"
},
- "allowedRegistriesForImport": {
- "description": "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.",
+ "clusterNetworks": {
+ "description": "ClusterNetworks is a list of ClusterNetwork objects that defines the global overlay network's L3 space by specifying a set of CIDR and netmasks that the SDN can allocate addressed from. If this is specified, then ClusterNetworkCIDR and HostSubnetLength may not be set.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.RegistryLocation"
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ClusterNetworkEntry"
}
},
- "externalRegistryHostnames": {
- "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.",
+ "externalIPNetworkCIDRs": {
+ "description": "ExternalIPNetworkCIDRs controls what values are acceptable for the service external IP field. If empty, no externalIP may be set. It may contain a list of CIDRs which are checked for access. If a CIDR is prefixed with !, IPs in that CIDR will be rejected. Rejections will be applied first, then the IP checked against one of the allowed CIDRs. You should ensure this range does not overlap with your nodes, pods, or service CIDRs for security reasons.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "imageStreamImportMode": {
- "description": "imageStreamImportMode provides the import mode value for imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.",
+ "hostSubnetLength": {
+ "description": "HostSubnetLength is the number of bits to allocate to each host's subnet e.g. 8 would mean a /24 network on the host. Deprecated, but maintained for backwards compatibility, use ClusterNetworks instead.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "ingressIPNetworkCIDR": {
+ "description": "IngressIPNetworkCIDR controls the range to assign ingress ips from for services of type LoadBalancer on bare metal. If empty, ingress ips will not be assigned. It may contain a single CIDR that will be allocated from. For security reasons, you should ensure that this range does not overlap with the CIDRs reserved for external ips, nodes, pods, or services.",
"type": "string",
- "default": "",
- "enum": [
- "Legacy",
- "PreserveOriginal"
- ]
+ "default": ""
},
- "internalRegistryHostname": {
- "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.",
+ "networkPluginName": {
+ "description": "NetworkPluginName is the name of the network plugin to use",
"type": "string",
"default": ""
},
- "maxImagesBulkImportedPerRepository": {
- "description": "maxImagesBulkImportedPerRepository controls the number of images that are imported when a user does a bulk import of a container repository. This number is set low to prevent users from importing large numbers of images accidentally. Set -1 for no limit.",
+ "serviceNetworkCIDR": {
+ "description": "ServiceNetwork is the CIDR string to specify the service networks",
+ "type": "string",
+ "default": ""
+ },
+ "vxlanPort": {
+ "description": "VXLANPort is the VXLAN port used by the cluster defaults. If it is not set, 4789 is the default value",
"type": "integer",
- "format": "int32",
- "default": 0
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "ImagePolicyConfig",
+ "Kind": "MasterNetworkConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.IngressControllerConfig": {
+ "io.openshift.config.legacy.v1.MasterVolumeConfig": {
+ "description": "MasterVolumeConfig contains options for configuring volume plugins in the master node.",
"type": "object",
"required": [
- "ingressIPNetworkCIDR"
+ "dynamicProvisioningEnabled"
],
"properties": {
- "ingressIPNetworkCIDR": {
- "description": "ingressIPNetworkCIDR controls the range to assign ingress ips from for services of type LoadBalancer on bare metal. If empty, ingress ips will not be assigned. It may contain a single CIDR that will be allocated from. For security reasons, you should ensure that this range does not overlap with the CIDRs reserved for external ips, nodes, pods, or services.",
- "type": "string",
- "default": ""
+ "dynamicProvisioningEnabled": {
+ "description": "DynamicProvisioningEnabled is a boolean that toggles dynamic provisioning off when false, defaults to true",
+ "type": "boolean"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "IngressControllerConfig",
+ "Kind": "MasterVolumeConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.JenkinsPipelineConfig": {
- "description": "JenkinsPipelineConfig holds configuration for the Jenkins pipeline strategy",
+ "io.openshift.config.legacy.v1.NamedCertificate": {
+ "description": "NamedCertificate specifies a certificate/key, and the names it should be served for",
"type": "object",
"required": [
- "autoProvisionEnabled",
- "templateNamespace",
- "templateName",
- "serviceName",
- "parameters"
+ "names",
+ "certFile",
+ "keyFile"
],
"properties": {
- "autoProvisionEnabled": {
- "description": "autoProvisionEnabled determines whether a Jenkins server will be spawned from the provided template when the first build config in the project with type JenkinsPipeline is created. When not specified this option defaults to true.",
- "type": "boolean"
- },
- "parameters": {
- "description": "parameters specifies a set of optional parameters to the Jenkins template.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "serviceName": {
- "description": "serviceName is the name of the Jenkins service OpenShift uses to detect whether a Jenkins pipeline handler has already been installed in a project. This value *must* match a service name in the provided template.",
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
"type": "string",
"default": ""
},
- "templateName": {
- "description": "templateName is the name of the default Jenkins template",
+ "keyFile": {
+ "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
"type": "string",
"default": ""
},
- "templateNamespace": {
- "description": "templateNamespace contains the namespace name where the Jenkins template is stored",
- "type": "string",
- "default": ""
+ "names": {
+ "description": "Names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "JenkinsPipelineConfig",
+ "Kind": "NamedCertificate",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.NetworkControllerConfig": {
- "description": "MasterNetworkConfig to be passed to the compiled in network plugin",
+ "io.openshift.config.legacy.v1.NodeAuthConfig": {
+ "description": "NodeAuthConfig holds authn/authz configuration options",
"type": "object",
"required": [
- "networkPluginName",
- "clusterNetworks",
- "serviceNetworkCIDR",
- "vxlanPort"
+ "authenticationCacheTTL",
+ "authenticationCacheSize",
+ "authorizationCacheTTL",
+ "authorizationCacheSize"
],
"properties": {
- "clusterNetworks": {
- "description": "clusterNetworks contains a list of cluster networks that defines the global overlay networks L3 space.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ClusterNetworkEntry"
- }
- },
- "networkPluginName": {
- "type": "string",
- "default": ""
+ "authenticationCacheSize": {
+ "description": "AuthenticationCacheSize indicates how many authentication results should be cached. If 0, the default cache size is used.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "serviceNetworkCIDR": {
+ "authenticationCacheTTL": {
+ "description": "AuthenticationCacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get the default timeout. If zero (e.g. \"0m\"), caching is disabled",
"type": "string",
"default": ""
},
- "vxlanPort": {
+ "authorizationCacheSize": {
+ "description": "AuthorizationCacheSize indicates how many authorization results should be cached. If 0, the default cache size is used.",
"type": "integer",
- "format": "int64",
+ "format": "int32",
"default": 0
+ },
+ "authorizationCacheTTL": {
+ "description": "AuthorizationCacheTTL indicates how long an authorization result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get the default timeout. If zero (e.g. \"0m\"), caching is disabled",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "NetworkControllerConfig",
+ "Kind": "NodeAuthConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.OpenShiftAPIServerConfig": {
- "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.NodeConfig": {
+ "description": "NodeConfig is the fully specified config starting an OpenShift node\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
+ "nodeName",
+ "nodeIP",
"servingInfo",
- "corsAllowedOrigins",
- "auditConfig",
- "storageConfig",
- "admission",
- "kubeClientConfig",
- "aggregatorConfig",
- "imagePolicyConfig",
- "projectConfig",
- "routingConfig",
- "serviceAccountOAuthGrantMethod",
- "jenkinsPipelineConfig",
- "cloudProviderFile",
- "apiServerArguments",
- "apiServers"
+ "masterKubeConfig",
+ "masterClientConnectionOverrides",
+ "dnsDomain",
+ "dnsIP",
+ "dnsBindAddress",
+ "dnsNameservers",
+ "dnsRecursiveResolvConf",
+ "networkConfig",
+ "volumeDirectory",
+ "imageConfig",
+ "allowDisabledDocker",
+ "podManifestConfig",
+ "authConfig",
+ "dockerConfig",
+ "iptablesSyncPeriod",
+ "enableUnidling",
+ "volumeConfig"
],
"properties": {
- "admission": {
- "description": "admissionConfig holds information about how to configure admission.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig"
- },
- "aggregatorConfig": {
- "description": "aggregatorConfig contains information about how to verify the aggregator front proxy",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.FrontProxyConfig"
- },
- "apiServerArguments": {
- "type": "object",
- "additionalProperties": {
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- }
- },
- "apiServers": {
- "description": "apiServers holds information about enabled/disabled API servers",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.APIServers"
+ "allowDisabledDocker": {
+ "description": "AllowDisabledDocker if true, the Kubelet will ignore errors from Docker. This means that a node can start on a machine that doesn't have docker started.",
+ "type": "boolean",
+ "default": false
},
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "auditConfig": {
- "description": "auditConfig describes how to configure audit information",
+ "authConfig": {
+ "description": "AuthConfig holds authn/authz configuration options",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AuditConfig"
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.NodeAuthConfig"
},
- "cloudProviderFile": {
- "description": "cloudProviderFile points to the cloud config file",
+ "dnsBindAddress": {
+ "description": "DNSBindAddress is the ip:port to serve DNS on. If this is not set, the DNS server will not be started. Because most DNS resolvers will only listen on port 53, if you select an alternative port you will need a DNS proxy like dnsmasq to answer queries for containers. A common configuration is dnsmasq configured on a node IP listening on 53 and delegating queries for dnsDomain to this process, while sending other queries to the host environments nameservers.",
"type": "string",
"default": ""
},
- "corsAllowedOrigins": {
- "description": "corsAllowedOrigins",
+ "dnsDomain": {
+ "description": "DNSDomain holds the domain suffix that will be used for the DNS search path inside each container. Defaults to 'cluster.local'.",
+ "type": "string",
+ "default": ""
+ },
+ "dnsIP": {
+ "description": "DNSIP is the IP address that pods will use to access cluster DNS. Defaults to the service IP of the Kubernetes master. This IP must be listening on port 53 for compatibility with libc resolvers (which cannot be configured to resolve names from any other port). When running more complex local DNS configurations, this is often set to the local address of a DNS proxy like dnsmasq, which then will consult either the local DNS (see dnsBindAddress) or the master DNS.",
+ "type": "string",
+ "default": ""
+ },
+ "dnsNameservers": {
+ "description": "DNSNameservers is a list of ip:port values of recursive nameservers to forward queries to when running a local DNS server if dnsBindAddress is set. If this value is empty, the DNS server will default to the nameservers listed in /etc/resolv.conf. If you have configured dnsmasq or another DNS proxy on the system, this value should be set to the upstream nameservers dnsmasq resolves with.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "imagePolicyConfig": {
- "description": "imagePolicyConfig feeds the image policy admission plugin",
+ "dnsRecursiveResolvConf": {
+ "description": "DNSRecursiveResolvConf is a path to a resolv.conf file that contains settings for an upstream server. Only the nameservers and port fields are used. The file must exist and parse correctly. It adds extra nameservers to DNSNameservers if set.",
+ "type": "string",
+ "default": ""
+ },
+ "dockerConfig": {
+ "description": "DockerConfig holds Docker related configuration options.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImagePolicyConfig"
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.DockerConfig"
},
- "jenkinsPipelineConfig": {
- "description": "jenkinsPipelineConfig holds information about the default Jenkins template used for JenkinsPipeline build strategy.",
+ "enableUnidling": {
+ "description": "EnableUnidling controls whether or not the hybrid unidling proxy will be set up",
+ "type": "boolean"
+ },
+ "imageConfig": {
+ "description": "ImageConfig holds options that describe how to build image names for system components",
"default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.JenkinsPipelineConfig"
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ImageConfig"
+ },
+ "iptablesSyncPeriod": {
+ "description": "IPTablesSyncPeriod is how often iptable rules are refreshed",
+ "type": "string",
+ "default": ""
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "kubeClientConfig": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig"
+ "kubeletArguments": {
+ "description": "KubeletArguments are key value pairs that will be passed directly to the Kubelet that match the Kubelet's command line arguments. These are not migrated or validated, so if you use them they may become invalid. These values override other settings in NodeConfig which may cause invalid configurations.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
},
- "projectConfig": {
- "description": "projectConfig feeds an admission plugin",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ProjectConfig"
+ "masterClientConnectionOverrides": {
+ "description": "MasterClientConnectionOverrides provides overrides to the client connection used to connect to the master.",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ClientConnectionOverrides"
},
- "routingConfig": {
- "description": "routingConfig holds information about routing and route generation",
+ "masterKubeConfig": {
+ "description": "MasterKubeConfig is a filename for the .kubeconfig file that describes how to connect this node to the master",
+ "type": "string",
+ "default": ""
+ },
+ "networkConfig": {
+ "description": "NetworkConfig provides network options for the node",
"default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.RoutingConfig"
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.NodeNetworkConfig"
},
- "serviceAccountOAuthGrantMethod": {
- "description": "serviceAccountOAuthGrantMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt, or \"\"",
+ "networkPluginName": {
+ "description": "Deprecated and maintained for backward compatibility, use NetworkConfig.NetworkPluginName instead",
+ "type": "string"
+ },
+ "nodeIP": {
+ "description": "Node may have multiple IPs, specify the IP to use for pod traffic routing If not specified, network parse/lookup on the nodeName is performed and the first non-loopback address is used",
+ "type": "string",
+ "default": ""
+ },
+ "nodeName": {
+ "description": "NodeName is the value used to identify this particular node in the cluster. If possible, this should be your fully qualified hostname. If you're describing a set of static nodes to the master, this value must match one of the values in the list",
"type": "string",
"default": ""
},
+ "podManifestConfig": {
+ "description": "PodManifestConfig holds the configuration for enabling the Kubelet to create pods based from a manifest file(s) placed locally on the node",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.PodManifestConfig"
+ },
+ "proxyArguments": {
+ "description": "ProxyArguments are key value pairs that will be passed directly to the Proxy that match the Proxy's command line arguments. These are not migrated or validated, so if you use them they may become invalid. These values override other settings in NodeConfig which may cause invalid configurations.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
"servingInfo": {
- "description": "servingInfo describes how to start serving",
+ "description": "ServingInfo describes how to start serving",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.ServingInfo"
},
- "storageConfig": {
- "description": "storageConfig contains information about how to use",
+ "volumeConfig": {
+ "description": "VolumeConfig contains options for configuring volumes on the node.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig"
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.NodeVolumeConfig"
+ },
+ "volumeDirectory": {
+ "description": "VolumeDirectory is the directory that volumes will be stored under",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "OpenShiftAPIServerConfig",
+ "Kind": "NodeConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.OpenShiftControllerManagerConfig": {
- "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.NodeNetworkConfig": {
+ "description": "NodeNetworkConfig provides network options for the node",
"type": "object",
"required": [
- "kubeClientConfig",
- "servingInfo",
- "leaderElection",
- "controllers",
- "resourceQuota",
- "serviceServingCert",
- "deployer",
- "build",
- "serviceAccount",
- "dockerPullSecret",
- "network",
- "ingress",
- "imageImport",
- "securityAllocator",
- "featureGates"
+ "networkPluginName",
+ "mtu"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "mtu": {
+ "description": "Maximum transmission unit for the network packets",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
},
- "build": {
+ "networkPluginName": {
+ "description": "NetworkPluginName is a string specifying the networking plugin",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
+ "Version": "v1",
+ "Kind": "NodeNetworkConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.legacy.v1.NodeVolumeConfig": {
+ "description": "NodeVolumeConfig contains options for configuring volumes on the node.",
+ "type": "object",
+ "required": [
+ "localQuota"
+ ],
+ "properties": {
+ "localQuota": {
+ "description": "LocalQuota contains options for controlling local volume quota on the node.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.BuildControllerConfig"
- },
- "controllers": {
- "description": "controllers is a list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller \"+ named 'foo', '-foo' disables the controller named 'foo'. Defaults to \"*\".",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.LocalQuota"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
+ "Version": "v1",
+ "Kind": "NodeVolumeConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.legacy.v1.OAuthConfig": {
+ "description": "OAuthConfig holds the necessary configuration options for OAuth authentication",
+ "type": "object",
+ "required": [
+ "masterCA",
+ "masterURL",
+ "masterPublicURL",
+ "assetPublicURL",
+ "alwaysShowProviderSelection",
+ "identityProviders",
+ "grantConfig",
+ "sessionConfig",
+ "tokenConfig",
+ "templates"
+ ],
+ "properties": {
+ "alwaysShowProviderSelection": {
+ "description": "AlwaysShowProviderSelection will force the provider selection page to render even when there is only a single provider.",
+ "type": "boolean",
+ "default": false
},
- "deployer": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.DeployerControllerConfig"
+ "assetPublicURL": {
+ "description": "AssetPublicURL is used for building valid client redirect URLs for external access",
+ "type": "string",
+ "default": ""
},
- "dockerPullSecret": {
+ "grantConfig": {
+ "description": "GrantConfig describes how to handle grants",
"default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.DockerPullSecretControllerConfig"
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.GrantConfig"
},
- "featureGates": {
- "description": "featureGates are the set of extra OpenShift feature gates for openshift-controller-manager. These feature gates can be used to enable features that are tech preview or otherwise not available on OpenShift by default.",
+ "identityProviders": {
+ "description": "IdentityProviders is an ordered list of ways for a user to identify themselves",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.IdentityProvider"
}
},
- "imageImport": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImageImportControllerConfig"
- },
- "ingress": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.IngressControllerConfig"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "masterCA": {
+ "description": "MasterCA is the CA for verifying the TLS connection back to the MasterURL.",
"type": "string"
},
- "kubeClientConfig": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig"
- },
- "leaderElection": {
- "description": "leaderElection defines the configuration for electing a controller instance to make changes to the cluster. If unspecified, the ControllerTTL value is checked to determine whether the legacy direct etcd election code will be used.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.LeaderElection"
+ "masterPublicURL": {
+ "description": "MasterPublicURL is used for building valid client redirect URLs for internal and external access",
+ "type": "string",
+ "default": ""
},
- "network": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.NetworkControllerConfig"
+ "masterURL": {
+ "description": "MasterURL is used for making server-to-server calls to exchange authorization codes for access tokens",
+ "type": "string",
+ "default": ""
},
- "resourceQuota": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ResourceQuotaControllerConfig"
+ "sessionConfig": {
+ "description": "SessionConfig hold information about configuring sessions.",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.SessionConfig"
},
- "securityAllocator": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.SecurityAllocator"
+ "templates": {
+ "description": "Templates allow you to customize pages like the login page.",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.OAuthTemplates"
},
- "serviceAccount": {
+ "tokenConfig": {
+ "description": "TokenConfig contains options for authorization and access tokens",
"default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ServiceAccountControllerConfig"
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.TokenConfig"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
+ "Version": "v1",
+ "Kind": "OAuthConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.legacy.v1.OAuthTemplates": {
+ "description": "OAuthTemplates allow for customization of pages like the login page",
+ "type": "object",
+ "required": [
+ "login",
+ "providerSelection",
+ "error"
+ ],
+ "properties": {
+ "error": {
+ "description": "Error is a path to a file containing a go template used to render error pages during the authentication or grant flow If unspecified, the default error page is used.",
+ "type": "string",
+ "default": ""
},
- "serviceServingCert": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ServiceServingCert"
+ "login": {
+ "description": "Login is a path to a file containing a go template used to render the login page. If unspecified, the default login page is used.",
+ "type": "string",
+ "default": ""
},
- "servingInfo": {
- "description": "servingInfo describes how to start serving",
- "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
+ "providerSelection": {
+ "description": "ProviderSelection is a path to a file containing a go template used to render the provider selection page. If unspecified, the default provider selection page is used.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "OpenShiftControllerManagerConfig",
+ "Kind": "OAuthTemplates",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.PerGroupOptions": {
+ "io.openshift.config.legacy.v1.OpenIDClaims": {
+ "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider",
"type": "object",
"required": [
+ "id",
+ "preferredUsername",
"name",
- "enabledVersions",
- "disabledVersions"
+ "email"
],
"properties": {
- "disabledVersions": {
- "description": "disabledVersions is a list of versions that must be disabled in addition to the defaults. Must not collide with the list of enabled versions",
+ "email": {
+ "description": "Email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "enabledVersions": {
- "description": "enabledVersions is a list of versions that must be enabled in addition to the defaults. Must not collide with the list of disabled versions",
+ "id": {
+ "description": "ID is the list of claims whose values should be used as the user ID. Required. OpenID standard identity claim is \"sub\"",
"type": "array",
"items": {
"type": "string",
@@ -68449,242 +69208,325 @@
}
},
"name": {
- "description": "name is an API server name (see OpenShiftAPIserverName typed constants for a complete list of available API servers).",
- "type": "string",
- "default": ""
+ "description": "Name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "preferredUsername": {
+ "description": "PreferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the id claim",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "PerGroupOptions",
+ "Kind": "OpenIDClaims",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.ProjectConfig": {
+ "io.openshift.config.legacy.v1.OpenIDIdentityProvider": {
+ "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "defaultNodeSelector",
- "projectRequestMessage",
- "projectRequestTemplate"
+ "ca",
+ "clientID",
+ "clientSecret",
+ "extraScopes",
+ "extraAuthorizeParameters",
+ "urls",
+ "claims"
],
"properties": {
- "defaultNodeSelector": {
- "description": "defaultNodeSelector holds default project node label selector",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "projectRequestMessage": {
- "description": "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint",
+ "ca": {
+ "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
"type": "string",
"default": ""
},
- "projectRequestTemplate": {
- "description": "projectRequestTemplate is the template to use for creating projects in response to projectrequest. It is in the format namespace/template and it is optional. If it is not specified, a default template is used.",
+ "claims": {
+ "description": "Claims mappings",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.OpenIDClaims"
+ },
+ "clientID": {
+ "description": "ClientID is the oauth client ID",
"type": "string",
"default": ""
+ },
+ "clientSecret": {
+ "description": "ClientSecret is the oauth client secret",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource"
+ },
+ "extraAuthorizeParameters": {
+ "description": "ExtraAuthorizeParameters are any custom parameters to add to the authorize request.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "extraScopes": {
+ "description": "ExtraScopes are any scopes to request in addition to the standard \"openid\" scope.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "urls": {
+ "description": "URLs to use to authenticate",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.OpenIDURLs"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Type": "object",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "ProjectConfig",
+ "Kind": "OpenIDIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.RegistryLocation": {
- "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.",
+ "io.openshift.config.legacy.v1.OpenIDURLs": {
+ "description": "OpenIDURLs are URLs to use when authenticating with an OpenID identity provider",
"type": "object",
"required": [
- "domainName"
+ "authorize",
+ "token",
+ "userInfo"
],
"properties": {
- "domainName": {
- "description": "DomainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.",
+ "authorize": {
+ "description": "Authorize is the oauth authorization URL",
"type": "string",
"default": ""
},
- "insecure": {
- "description": "Insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.",
- "type": "boolean"
+ "token": {
+ "description": "Token is the oauth token granting URL",
+ "type": "string",
+ "default": ""
+ },
+ "userInfo": {
+ "description": "UserInfo is the optional userinfo URL. If present, a granted access_token is used to request claims If empty, a granted id_token is parsed for claims",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "RegistryLocation",
+ "Kind": "OpenIDURLs",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.ResourceQuotaControllerConfig": {
+ "io.openshift.config.legacy.v1.PodManifestConfig": {
+ "description": "PodManifestConfig holds the necessary configuration options for using pod manifests",
"type": "object",
"required": [
- "concurrentSyncs",
- "syncPeriod",
- "minResyncPeriod"
+ "path",
+ "fileCheckIntervalSeconds"
],
"properties": {
- "concurrentSyncs": {
+ "fileCheckIntervalSeconds": {
+ "description": "FileCheckIntervalSeconds is the interval in seconds for checking the manifest file(s) for new data The interval needs to be a positive value",
"type": "integer",
- "format": "int32",
+ "format": "int64",
"default": 0
},
- "minResyncPeriod": {
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "syncPeriod": {
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "path": {
+ "description": "Path specifies the path for the pod manifest file or directory If its a directory, its expected to contain on or more manifest files This is used by the Kubelet to create pods on the node",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "ResourceQuotaControllerConfig",
+ "Kind": "PodManifestConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.RoutingConfig": {
- "description": "RoutingConfig holds the necessary configuration options for routing to subdomains",
+ "io.openshift.config.legacy.v1.PolicyConfig": {
+ "description": "holds the necessary configuration options for",
"type": "object",
"required": [
- "subdomain"
+ "userAgentMatchingConfig"
],
"properties": {
- "subdomain": {
- "description": "subdomain is the suffix appended to $service.$namespace. to form the default route hostname DEPRECATED: This field is being replaced by routers setting their own defaults. This is the \"default\" route.",
- "type": "string",
- "default": ""
+ "userAgentMatchingConfig": {
+ "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.UserAgentMatchingConfig"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "RoutingConfig",
+ "Kind": "PolicyConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.SecurityAllocator": {
- "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.",
+ "io.openshift.config.legacy.v1.ProjectConfig": {
+ "description": "holds the necessary configuration options for",
"type": "object",
"required": [
- "uidAllocatorRange",
- "mcsAllocatorRange",
- "mcsLabelsPerProject"
+ "defaultNodeSelector",
+ "projectRequestMessage",
+ "projectRequestTemplate",
+ "securityAllocator"
],
"properties": {
- "mcsAllocatorRange": {
- "description": "MCSAllocatorRange defines the range of MCS categories that will be assigned to namespaces. The format is \"\u003cprefix\u003e/\u003cnumberOfLabels\u003e[,\u003cmaxCategory\u003e]\". The default is \"s0/2\" and will allocate from c0 -\u003e c1023, which means a total of 535k labels are available (1024 choose 2 ~ 535k). If this value is changed after startup, new projects may receive labels that are already allocated to other projects. Prefix may be any valid SELinux set of terms (including user, role, and type), although leaving them as the default will allow the server to set them automatically.\n\nExamples: * s0:/2 - Allocate labels from s0:c0,c0 to s0:c511,c511 * s0:/2,512 - Allocate labels from s0:c0,c0,c0 to s0:c511,c511,511",
+ "defaultNodeSelector": {
+ "description": "DefaultNodeSelector holds default project node label selector",
"type": "string",
"default": ""
},
- "mcsLabelsPerProject": {
- "description": "MCSLabelsPerProject defines the number of labels that should be reserved per project. The default is 5 to match the default UID and MCS ranges (100k namespaces, 535k/5 labels).",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "projectRequestMessage": {
+ "description": "ProjectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint",
+ "type": "string",
+ "default": ""
},
- "uidAllocatorRange": {
- "description": "UIDAllocatorRange defines the total set of Unix user IDs (UIDs) that will be allocated to projects automatically, and the size of the block each namespace gets. For example, 1000-1999/10 will allocate ten UIDs per namespace, and will be able to allocate up to 100 blocks before running out of space. The default is to allocate from 1 billion to 2 billion in 10k blocks (which is the expected size of the ranges container images will use once user namespaces are started).",
+ "projectRequestTemplate": {
+ "description": "ProjectRequestTemplate is the template to use for creating projects in response to projectrequest. It is in the format namespace/template and it is optional. If it is not specified, a default template is used.",
"type": "string",
"default": ""
+ },
+ "securityAllocator": {
+ "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.SecurityAllocator"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "SecurityAllocator",
+ "Kind": "ProjectConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.ServiceAccountControllerConfig": {
+ "io.openshift.config.legacy.v1.RFC2307Config": {
+ "description": "RFC2307Config holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the RFC2307 schema",
"type": "object",
"required": [
- "managedNames"
+ "groupsQuery",
+ "groupUIDAttribute",
+ "groupNameAttributes",
+ "groupMembershipAttributes",
+ "usersQuery",
+ "userUIDAttribute",
+ "userNameAttributes",
+ "tolerateMemberNotFoundErrors",
+ "tolerateMemberOutOfScopeErrors"
],
"properties": {
- "managedNames": {
- "description": "managedNames is a list of service account names that will be auto-created in every namespace. If no names are specified, the ServiceAccountsController will not be started.",
+ "groupMembershipAttributes": {
+ "description": "GroupMembershipAttributes defines which attributes on an LDAP group entry will be interpreted as its members. The values contained in those attributes must be queryable by your UserUIDAttribute",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "groupNameAttributes": {
+ "description": "GroupNameAttributes defines which attributes on an LDAP group entry will be interpreted as its name to use for an OpenShift group",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "groupUIDAttribute": {
+ "description": "GroupUIDAttributes defines which attribute on an LDAP group entry will be interpreted as its unique identifier. (ldapGroupUID)",
+ "type": "string",
+ "default": ""
+ },
+ "groupsQuery": {
+ "description": "AllGroupsQuery holds the template for an LDAP query that returns group entries.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery"
+ },
+ "tolerateMemberNotFoundErrors": {
+ "description": "TolerateMemberNotFoundErrors determines the behavior of the LDAP sync job when missing user entries are encountered. If 'true', an LDAP query for users that doesn't find any will be tolerated and an only and error will be logged. If 'false', the LDAP sync job will fail if a query for users doesn't find any. The default value is 'false'. Misconfigured LDAP sync jobs with this flag set to 'true' can cause group membership to be removed, so it is recommended to use this flag with caution.",
+ "type": "boolean",
+ "default": false
+ },
+ "tolerateMemberOutOfScopeErrors": {
+ "description": "TolerateMemberOutOfScopeErrors determines the behavior of the LDAP sync job when out-of-scope user entries are encountered. If 'true', an LDAP query for a user that falls outside of the base DN given for the all user query will be tolerated and only an error will be logged. If 'false', the LDAP sync job will fail if a user query would search outside of the base DN specified by the all user query. Misconfigured LDAP sync jobs with this flag set to 'true' can result in groups missing users, so it is recommended to use this flag with caution.",
+ "type": "boolean",
+ "default": false
+ },
+ "userNameAttributes": {
+ "description": "UserNameAttributes defines which attributes on an LDAP user entry will be used, in order, as its OpenShift user name. The first attribute with a non-empty value is used. This should match your PreferredUsername setting for your LDAPPasswordIdentityProvider",
"type": "array",
"items": {
"type": "string",
"default": ""
}
+ },
+ "userUIDAttribute": {
+ "description": "UserUIDAttribute defines which attribute on an LDAP user entry will be interpreted as its unique identifier. It must correspond to values that will be found from the GroupMembershipAttributes",
+ "type": "string",
+ "default": ""
+ },
+ "usersQuery": {
+ "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "ServiceAccountControllerConfig",
+ "Kind": "RFC2307Config",
"Scope": "Namespaced"
}
},
- "io.openshift.config.openshiftcontrolplane.v1.ServiceServingCert": {
- "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.",
+ "io.openshift.config.legacy.v1.RegistryLocation": {
+ "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.",
"type": "object",
"required": [
- "signer"
+ "domainName"
],
"properties": {
- "signer": {
- "description": "Signer holds the signing information used to automatically sign serving certificates. If this value is nil, then certs are not signed automatically.",
- "$ref": "#/definitions/io.openshift.config.v1.CertInfo"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
- "Version": "v1",
- "Kind": "ServiceServingCert",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.openshiftcontrolplane.v1.SourceStrategyDefaultsConfig": {
- "description": "SourceStrategyDefaultsConfig contains values that apply to builds using the source strategy.",
- "type": "object",
- "properties": {
- "incremental": {
- "description": "incremental indicates if s2i build strategies should perform an incremental build or not",
+ "domainName": {
+ "description": "DomainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.",
+ "type": "string",
+ "default": ""
+ },
+ "insecure": {
+ "description": "Insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.",
"type": "boolean"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "openshiftcontrolplane.config.openshift.io",
- "Version": "v1",
- "Kind": "SourceStrategyDefaultsConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.osin.v1.AllowAllPasswordIdentityProvider": {
- "description": "AllowAllPasswordIdentityProvider provides identities for users authenticating using non-empty passwords\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
- "type": "object",
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "osin.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "AllowAllPasswordIdentityProvider",
+ "Kind": "RegistryLocation",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.BasicAuthPasswordIdentityProvider": {
- "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.RemoteConnectionInfo": {
+ "description": "RemoteConnectionInfo holds information necessary for establishing a remote connection",
"type": "object",
"required": [
"url",
@@ -68693,10 +69535,6 @@
"keyFile"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
"ca": {
"description": "CA is the CA for verifying TLS connections",
"type": "string",
@@ -68712,10 +69550,6 @@
"type": "string",
"default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
"url": {
"description": "URL is the remote URL to connect to",
"type": "string",
@@ -68723,83 +69557,55 @@
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "osin.config.openshift.io",
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "BasicAuthPasswordIdentityProvider",
+ "Kind": "RemoteConnectionInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.DenyAllPasswordIdentityProvider": {
- "description": "DenyAllPasswordIdentityProvider provides no identities for users\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.RequestHeaderAuthenticationOptions": {
+ "description": "RequestHeaderAuthenticationOptions provides options for setting up a front proxy against the entire API instead of against the /oauth endpoint.",
"type": "object",
+ "required": [
+ "clientCA",
+ "clientCommonNames",
+ "usernameHeaders",
+ "groupHeaders",
+ "extraHeaderPrefixes"
+ ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "osin.config.openshift.io",
- "Version": "v1",
- "Kind": "DenyAllPasswordIdentityProvider",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.osin.v1.GitHubIdentityProvider": {
- "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
- "type": "object",
- "required": [
- "clientID",
- "clientSecret",
- "organizations",
- "teams",
- "hostname",
- "ca"
- ],
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "ca": {
- "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value.",
- "type": "string",
- "default": ""
- },
- "clientID": {
- "description": "clientID is the oauth client ID",
+ "clientCA": {
+ "description": "ClientCA is a file with the trusted signer certs. It is required.",
"type": "string",
"default": ""
},
- "clientSecret": {
- "description": "clientSecret is the oauth client secret",
- "$ref": "#/definitions/io.openshift.config.v1.StringSource"
- },
- "hostname": {
- "description": "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value that is configured at /setup/settings#hostname.",
- "type": "string",
- "default": ""
+ "clientCommonNames": {
+ "description": "ClientCommonNames is a required list of common names to require a match from.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "extraHeaderPrefixes": {
+ "description": "ExtraHeaderPrefixes is the set of request header prefixes to inspect for user extra. X-Remote-Extra- is suggested.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "organizations": {
- "description": "organizations optionally restricts which organizations are allowed to log in",
+ "groupHeaders": {
+ "description": "GroupNameHeader is the set of headers to check for group information. All are unioned.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "teams": {
- "description": "teams optionally restricts which teams are allowed to log in. Format is \u003corg\u003e/\u003cteam\u003e.",
+ "usernameHeaders": {
+ "description": "UsernameHeaders is the list of headers to check for user information. First hit wins.",
"type": "array",
"items": {
"type": "string",
@@ -68808,221 +69614,244 @@
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "osin.config.openshift.io",
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "GitHubIdentityProvider",
+ "Kind": "RequestHeaderAuthenticationOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.GitLabIdentityProvider": {
- "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.RequestHeaderIdentityProvider": {
+ "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "ca",
- "url",
- "clientID",
- "clientSecret"
+ "loginURL",
+ "challengeURL",
+ "clientCA",
+ "clientCommonNames",
+ "headers",
+ "preferredUsernameHeaders",
+ "nameHeaders",
+ "emailHeaders"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "ca": {
- "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
+ "challengeURL": {
+ "description": "ChallengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}",
"type": "string",
"default": ""
},
- "clientID": {
- "description": "clientID is the oauth client ID",
+ "clientCA": {
+ "description": "ClientCA is a file with the trusted signer certs. If empty, no request verification is done, and any direct request to the OAuth server can impersonate any identity from this provider, merely by setting a request header.",
"type": "string",
"default": ""
},
- "clientSecret": {
- "description": "clientSecret is the oauth client secret",
- "$ref": "#/definitions/io.openshift.config.v1.StringSource"
+ "clientCommonNames": {
+ "description": "ClientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "emailHeaders": {
+ "description": "EmailHeaders is the set of headers to check for the email address",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "headers": {
+ "description": "Headers is the set of headers to check for identity information",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "legacy": {
- "description": "legacy determines if OAuth2 or OIDC should be used If true, OAuth2 is used If false, OIDC is used If nil and the URL's host is gitlab.com, OIDC is used Otherwise, OAuth2 is used In a future release, nil will default to using OIDC Eventually this flag will be removed and only OIDC will be used",
- "type": "boolean"
- },
- "url": {
- "description": "url is the oauth server base URL",
+ "loginURL": {
+ "description": "LoginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}",
"type": "string",
"default": ""
+ },
+ "nameHeaders": {
+ "description": "NameHeaders is the set of headers to check for the display name",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "preferredUsernameHeaders": {
+ "description": "PreferredUsernameHeaders is the set of headers to check for the preferred username",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "osin.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "GitLabIdentityProvider",
+ "Kind": "RequestHeaderIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.GoogleIdentityProvider": {
- "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.RoutingConfig": {
+ "description": "RoutingConfig holds the necessary configuration options for routing to subdomains",
"type": "object",
"required": [
- "clientID",
- "clientSecret",
- "hostedDomain"
+ "subdomain"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "clientID": {
- "description": "clientID is the oauth client ID",
- "type": "string",
- "default": ""
- },
- "clientSecret": {
- "description": "clientSecret is the oauth client secret",
- "$ref": "#/definitions/io.openshift.config.v1.StringSource"
- },
- "hostedDomain": {
- "description": "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to",
+ "subdomain": {
+ "description": "Subdomain is the suffix appended to $service.$namespace. to form the default route hostname DEPRECATED: This field is being replaced by routers setting their own defaults. This is the \"default\" route.",
"type": "string",
"default": ""
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "osin.config.openshift.io",
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "GoogleIdentityProvider",
+ "Kind": "RoutingConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.GrantConfig": {
- "description": "GrantConfig holds the necessary configuration options for grant handlers",
+ "io.openshift.config.legacy.v1.SecurityAllocator": {
+ "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.",
"type": "object",
"required": [
- "method",
- "serviceAccountMethod"
+ "uidAllocatorRange",
+ "mcsAllocatorRange",
+ "mcsLabelsPerProject"
],
"properties": {
- "method": {
- "description": "method determines the default strategy to use when an OAuth client requests a grant. This method will be used only if the specific OAuth client doesn't provide a strategy of their own. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients\n - deny: always denies grant requests, useful for black-listed clients",
+ "mcsAllocatorRange": {
+ "description": "MCSAllocatorRange defines the range of MCS categories that will be assigned to namespaces. The format is \"\u003cprefix\u003e/\u003cnumberOfLabels\u003e[,\u003cmaxCategory\u003e]\". The default is \"s0/2\" and will allocate from c0 -\u003e c1023, which means a total of 535k labels are available (1024 choose 2 ~ 535k). If this value is changed after startup, new projects may receive labels that are already allocated to other projects. Prefix may be any valid SELinux set of terms (including user, role, and type), although leaving them as the default will allow the server to set them automatically.\n\nExamples: * s0:/2 - Allocate labels from s0:c0,c0 to s0:c511,c511 * s0:/2,512 - Allocate labels from s0:c0,c0,c0 to s0:c511,c511,511",
"type": "string",
"default": ""
},
- "serviceAccountMethod": {
- "description": "serviceAccountMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt",
+ "mcsLabelsPerProject": {
+ "description": "MCSLabelsPerProject defines the number of labels that should be reserved per project. The default is 5 to match the default UID and MCS ranges (100k namespaces, 535k/5 labels).",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "uidAllocatorRange": {
+ "description": "UIDAllocatorRange defines the total set of Unix user IDs (UIDs) that will be allocated to projects automatically, and the size of the block each namespace gets. For example, 1000-1999/10 will allocate ten UIDs per namespace, and will be able to allocate up to 100 blocks before running out of space. The default is to allocate from 1 billion to 2 billion in 10k blocks (which is the expected size of the ranges container images will use once user namespaces are started).",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "osin.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "GrantConfig",
+ "Kind": "SecurityAllocator",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.HTPasswdPasswordIdentityProvider": {
- "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.ServiceAccountConfig": {
+ "description": "ServiceAccountConfig holds the necessary configuration options for a service account",
"type": "object",
"required": [
- "file"
+ "managedNames",
+ "limitSecretReferences",
+ "privateKeyFile",
+ "publicKeyFiles",
+ "masterCA"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "limitSecretReferences": {
+ "description": "LimitSecretReferences controls whether or not to allow a service account to reference any secret in a namespace without explicitly referencing them",
+ "type": "boolean",
+ "default": false
},
- "file": {
- "description": "file is a reference to your htpasswd file",
+ "managedNames": {
+ "description": "ManagedNames is a list of service account names that will be auto-created in every namespace. If no names are specified, the ServiceAccountsController will not be started.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "masterCA": {
+ "description": "MasterCA is the CA for verifying the TLS connection back to the master. The service account controller will automatically inject the contents of this file into pods so they can verify connections to the master.",
"type": "string",
"default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "privateKeyFile": {
+ "description": "PrivateKeyFile is a file containing a PEM-encoded private RSA key, used to sign service account tokens. If no private key is specified, the service account TokensController will not be started.",
+ "type": "string",
+ "default": ""
+ },
+ "publicKeyFiles": {
+ "description": "PublicKeyFiles is a list of files, each containing a PEM-encoded public RSA key. (If any file contains a private key, the public portion of the key is used) The list of public keys is used to verify presented service account tokens. Each key is tried in order until the list is exhausted or verification succeeds. If no keys are specified, no service account authentication will be available.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "osin.config.openshift.io",
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "HTPasswdPasswordIdentityProvider",
+ "Kind": "ServiceAccountConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.IdentityProvider": {
- "description": "IdentityProvider provides identities for users authenticating using credentials",
+ "io.openshift.config.legacy.v1.ServiceServingCert": {
+ "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.",
"type": "object",
"required": [
- "name",
- "challenge",
- "login",
- "mappingMethod",
- "provider"
+ "signer"
],
"properties": {
- "challenge": {
- "description": "challenge indicates whether to issue WWW-Authenticate challenges for this provider",
- "type": "boolean",
- "default": false
- },
- "login": {
- "description": "login indicates whether to use this identity provider for unauthenticated browsers to login against",
- "type": "boolean",
- "default": false
- },
- "mappingMethod": {
- "description": "mappingMethod determines how identities from this provider are mapped to users",
- "type": "string",
- "default": ""
- },
- "name": {
- "description": "name is used to qualify the identities returned by this provider",
- "type": "string",
- "default": ""
- },
- "provider": {
- "description": "provider contains the information about how to set up a specific identity provider",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "signer": {
+ "description": "Signer holds the signing information used to automatically sign serving certificates. If this value is nil, then certs are not signed automatically.",
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.CertInfo"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "osin.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "IdentityProvider",
+ "Kind": "ServiceServingCert",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.KeystonePasswordIdentityProvider": {
- "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.ServingInfo": {
+ "description": "ServingInfo holds information about serving web pages",
"type": "object",
"required": [
- "url",
- "ca",
+ "bindAddress",
+ "bindNetwork",
"certFile",
"keyFile",
- "domainName",
- "useKeystoneIdentity"
+ "clientCA",
+ "namedCertificates"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "bindAddress": {
+ "description": "BindAddress is the ip:port to serve on",
+ "type": "string",
+ "default": ""
},
- "ca": {
- "description": "CA is the CA for verifying TLS connections",
+ "bindNetwork": {
+ "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"",
"type": "string",
"default": ""
},
@@ -69031,8 +69860,16 @@
"type": "string",
"default": ""
},
- "domainName": {
- "description": "domainName is required for keystone v3",
+ "cipherSuites": {
+ "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "clientCA": {
+ "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates",
"type": "string",
"default": ""
},
@@ -69041,2281 +69878,2466 @@
"type": "string",
"default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "minTLSVersion": {
+ "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants",
"type": "string"
},
- "url": {
- "description": "URL is the remote URL to connect to",
- "type": "string",
- "default": ""
- },
- "useKeystoneIdentity": {
- "description": "useKeystoneIdentity flag indicates that user should be authenticated by keystone ID, not by username",
- "type": "boolean",
- "default": false
+ "namedCertificates": {
+ "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.NamedCertificate"
+ }
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "osin.config.openshift.io",
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "KeystonePasswordIdentityProvider",
+ "Kind": "ServingInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.LDAPAttributeMapping": {
- "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields",
+ "io.openshift.config.legacy.v1.SessionConfig": {
+ "description": "SessionConfig specifies options for cookie-based sessions. Used by AuthRequestHandlerSession",
"type": "object",
"required": [
- "id",
- "preferredUsername",
- "name",
- "email"
+ "sessionSecretsFile",
+ "sessionMaxAgeSeconds",
+ "sessionName"
],
"properties": {
- "email": {
- "description": "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "id": {
- "description": "id is the list of attributes whose values should be used as the user ID. Required. LDAP standard identity attribute is \"dn\"",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "sessionMaxAgeSeconds": {
+ "description": "SessionMaxAgeSeconds specifies how long created sessions last. Used by AuthRequestHandlerSession",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "name": {
- "description": "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "sessionName": {
+ "description": "SessionName is the cookie name used to store the session",
+ "type": "string",
+ "default": ""
},
- "preferredUsername": {
- "description": "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "sessionSecretsFile": {
+ "description": "SessionSecretsFile is a reference to a file containing a serialized SessionSecrets object If no file is specified, a random signing and encryption key are generated at each server start",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "osin.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "LDAPAttributeMapping",
+ "Kind": "SessionConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.LDAPPasswordIdentityProvider": {
- "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.SessionSecret": {
+ "description": "SessionSecret is a secret used to authenticate/decrypt cookie-based sessions",
"type": "object",
"required": [
- "url",
- "bindDN",
- "bindPassword",
- "insecure",
- "ca",
- "attributes"
+ "authentication",
+ "encryption"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "attributes": {
- "description": "attributes maps LDAP attributes to identities",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.osin.v1.LDAPAttributeMapping"
- },
- "bindDN": {
- "description": "bindDN is an optional DN to bind with during the search phase.",
+ "authentication": {
+ "description": "Authentication is used to authenticate sessions using HMAC. Recommended to use a secret with 32 or 64 bytes.",
"type": "string",
"default": ""
},
- "bindPassword": {
- "description": "bindPassword is an optional password to bind with during the search phase.",
- "$ref": "#/definitions/io.openshift.config.v1.StringSource"
- },
- "ca": {
- "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
+ "encryption": {
+ "description": "Encryption is used to encrypt sessions. Must be 16, 24, or 32 characters long, to select AES-128, AES-",
"type": "string",
"default": ""
- },
- "insecure": {
- "description": "insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830",
- "type": "boolean",
- "default": false
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
+ "Version": "v1",
+ "Kind": "SessionSecret",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.legacy.v1.SessionSecrets": {
+ "description": "SessionSecrets list the secrets to use to sign/encrypt and authenticate/decrypt created sessions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "secrets"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "url": {
- "description": "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is\n ldap://host:port/basedn?attribute?scope?filter",
- "type": "string",
- "default": ""
+ "secrets": {
+ "description": "Secrets is a list of secrets New sessions are signed and encrypted using the first secret. Existing sessions are decrypted/authenticated by each secret until one succeeds. This allows rotating secrets.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.SessionSecret"
+ }
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "osin.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "LDAPPasswordIdentityProvider",
+ "Kind": "SessionSecrets",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.OAuthConfig": {
- "description": "OAuthConfig holds the necessary configuration options for OAuth authentication",
+ "io.openshift.config.legacy.v1.SourceStrategyDefaultsConfig": {
+ "description": "SourceStrategyDefaultsConfig contains values that apply to builds using the source strategy.",
"type": "object",
- "required": [
- "masterCA",
- "masterURL",
- "masterPublicURL",
- "loginURL",
- "assetPublicURL",
- "alwaysShowProviderSelection",
- "identityProviders",
- "grantConfig",
- "sessionConfig",
- "tokenConfig",
- "templates"
+ "properties": {
+ "incremental": {
+ "description": "incremental indicates if s2i build strategies should perform an incremental build or not",
+ "type": "boolean"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
+ "Version": "v1",
+ "Kind": "SourceStrategyDefaultsConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.legacy.v1.StringSource": {
+ "description": "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.",
+ "type": "object",
+ "required": [
+ "value",
+ "env",
+ "file",
+ "keyFile"
],
"properties": {
- "alwaysShowProviderSelection": {
- "description": "alwaysShowProviderSelection will force the provider selection page to render even when there is only a single provider.",
- "type": "boolean",
- "default": false
- },
- "assetPublicURL": {
- "description": "assetPublicURL is used for building valid client redirect URLs for external access",
+ "env": {
+ "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.",
"type": "string",
"default": ""
},
- "grantConfig": {
- "description": "grantConfig describes how to handle grants",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.osin.v1.GrantConfig"
- },
- "identityProviders": {
- "description": "identityProviders is an ordered list of ways for a user to identify themselves",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.osin.v1.IdentityProvider"
- }
- },
- "loginURL": {
- "description": "loginURL, along with masterCA, masterURL and masterPublicURL have distinct meanings depending on how the OAuth server is run. The two states are: 1. embedded in the kube api server (all 3.x releases) 2. as a standalone external process (all 4.x releases) in the embedded configuration, loginURL is equivalent to masterPublicURL and the other fields have functionality that matches their docs. in the standalone configuration, the fields are used as: loginURL is the URL required to login to the cluster: oc login --server=\u003cloginURL\u003e masterPublicURL is the issuer URL it is accessible from inside (service network) and outside (ingress) of the cluster masterURL is the loopback variation of the token_endpoint URL with no path component it is only accessible from inside (service network) of the cluster masterCA is used to perform TLS verification for connections made to masterURL For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2",
+ "file": {
+ "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.",
"type": "string",
"default": ""
},
- "masterCA": {
- "description": "masterCA is the CA for verifying the TLS connection back to the MasterURL. This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated",
- "type": "string"
- },
- "masterPublicURL": {
- "description": "masterPublicURL is used for building valid client redirect URLs for internal and external access This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated",
+ "keyFile": {
+ "description": "KeyFile references a file containing the key to use to decrypt the value.",
"type": "string",
"default": ""
},
- "masterURL": {
- "description": "masterURL is used for making server-to-server calls to exchange authorization codes for access tokens This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated",
+ "value": {
+ "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.",
"type": "string",
"default": ""
- },
- "sessionConfig": {
- "description": "sessionConfig hold information about configuring sessions.",
- "$ref": "#/definitions/io.openshift.config.osin.v1.SessionConfig"
- },
- "templates": {
- "description": "templates allow you to customize pages like the login page.",
- "$ref": "#/definitions/io.openshift.config.osin.v1.OAuthTemplates"
- },
- "tokenConfig": {
- "description": "tokenConfig contains options for authorization and access tokens",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.osin.v1.TokenConfig"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "osin.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "OAuthConfig",
+ "Kind": "StringSource",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.OAuthTemplates": {
- "description": "OAuthTemplates allow for customization of pages like the login page",
+ "io.openshift.config.legacy.v1.StringSourceSpec": {
+ "description": "StringSourceSpec specifies a string value, or external location",
"type": "object",
"required": [
- "login",
- "providerSelection",
- "error"
+ "value",
+ "env",
+ "file",
+ "keyFile"
],
"properties": {
- "error": {
- "description": "error is a path to a file containing a go template used to render error pages during the authentication or grant flow If unspecified, the default error page is used.",
+ "env": {
+ "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.",
"type": "string",
"default": ""
},
- "login": {
- "description": "login is a path to a file containing a go template used to render the login page. If unspecified, the default login page is used.",
+ "file": {
+ "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.",
"type": "string",
"default": ""
},
- "providerSelection": {
- "description": "providerSelection is a path to a file containing a go template used to render the provider selection page. If unspecified, the default provider selection page is used.",
+ "keyFile": {
+ "description": "KeyFile references a file containing the key to use to decrypt the value.",
+ "type": "string",
+ "default": ""
+ },
+ "value": {
+ "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "osin.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "OAuthTemplates",
+ "Kind": "StringSourceSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.OpenIDClaims": {
- "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider",
+ "io.openshift.config.legacy.v1.TokenConfig": {
+ "description": "TokenConfig holds the necessary configuration options for authorization and access tokens",
"type": "object",
"required": [
- "id",
- "preferredUsername",
- "name",
- "email",
- "groups"
+ "authorizeTokenMaxAgeSeconds",
+ "accessTokenMaxAgeSeconds"
],
"properties": {
- "email": {
- "description": "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "groups": {
- "description": "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "id": {
- "description": "id is the list of claims whose values should be used as the user ID. Required. OpenID standard identity claim is \"sub\"",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "accessTokenInactivityTimeoutSeconds": {
+ "description": "AccessTokenInactivityTimeoutSeconds defined the default token inactivity timeout for tokens granted by any client. Setting it to nil means the feature is completely disabled (default) The default setting can be overriden on OAuthClient basis. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Valid values are: - 0: Tokens never time out - X: Tokens time out if there is no activity for X seconds The current minimum allowed value for X is 300 (5 minutes)",
+ "type": "integer",
+ "format": "int32"
},
- "name": {
- "description": "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "accessTokenMaxAgeSeconds": {
+ "description": "AccessTokenMaxAgeSeconds defines the maximum age of access tokens",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "preferredUsername": {
- "description": "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the id claim",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "authorizeTokenMaxAgeSeconds": {
+ "description": "AuthorizeTokenMaxAgeSeconds defines the maximum age of authorize tokens",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "osin.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "OpenIDClaims",
+ "Kind": "TokenConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.OpenIDIdentityProvider": {
- "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.UserAgentDenyRule": {
+ "description": "UserAgentDenyRule adds a rejection message that can be used to help a user figure out how to get an approved client",
"type": "object",
"required": [
- "ca",
- "clientID",
- "clientSecret",
- "extraScopes",
- "extraAuthorizeParameters",
- "urls",
- "claims"
+ "regex",
+ "httpVerbs",
+ "rejectionMessage"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "ca": {
- "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
- "type": "string",
- "default": ""
- },
- "claims": {
- "description": "claims mappings",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.osin.v1.OpenIDClaims"
- },
- "clientID": {
- "description": "clientID is the oauth client ID",
- "type": "string",
- "default": ""
- },
- "clientSecret": {
- "description": "clientSecret is the oauth client secret",
- "$ref": "#/definitions/io.openshift.config.v1.StringSource"
- },
- "extraAuthorizeParameters": {
- "description": "extraAuthorizeParameters are any custom parameters to add to the authorize request.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "extraScopes": {
- "description": "extraScopes are any scopes to request in addition to the standard \"openid\" scope.",
+ "httpVerbs": {
+ "description": "HTTPVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "urls": {
- "description": "urls to use to authenticate",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.osin.v1.OpenIDURLs"
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "osin.config.openshift.io",
- "Version": "v1",
- "Kind": "OpenIDIdentityProvider",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.osin.v1.OpenIDURLs": {
- "description": "OpenIDURLs are URLs to use when authenticating with an OpenID identity provider",
- "type": "object",
- "required": [
- "authorize",
- "token",
- "userInfo"
- ],
- "properties": {
- "authorize": {
- "description": "authorize is the oauth authorization URL",
- "type": "string",
- "default": ""
- },
- "token": {
- "description": "token is the oauth token granting URL",
+ "regex": {
+ "description": "UserAgentRegex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f",
"type": "string",
"default": ""
},
- "userInfo": {
- "description": "userInfo is the optional userinfo URL. If present, a granted access_token is used to request claims If empty, a granted id_token is parsed for claims",
+ "rejectionMessage": {
+ "description": "RejectionMessage is the message shown when rejecting a client. If it is not a set, the default message is used.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "osin.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "OpenIDURLs",
+ "Kind": "UserAgentDenyRule",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.OsinServerConfig": {
- "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.UserAgentMatchRule": {
+ "description": "UserAgentMatchRule describes how to match a given request based on User-Agent and HTTPVerb",
"type": "object",
"required": [
- "servingInfo",
- "corsAllowedOrigins",
- "auditConfig",
- "storageConfig",
- "admission",
- "kubeClientConfig",
- "oauthConfig"
+ "regex",
+ "httpVerbs"
],
"properties": {
- "admission": {
- "description": "admissionConfig holds information about how to configure admission.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig"
- },
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "auditConfig": {
- "description": "auditConfig describes how to configure audit information",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AuditConfig"
- },
- "corsAllowedOrigins": {
- "description": "corsAllowedOrigins",
+ "httpVerbs": {
+ "description": "HTTPVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "kubeClientConfig": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig"
- },
- "oauthConfig": {
- "description": "oauthConfig holds the necessary configuration options for OAuth authentication",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.osin.v1.OAuthConfig"
- },
- "servingInfo": {
- "description": "servingInfo describes how to start serving",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
- },
- "storageConfig": {
- "description": "storageConfig contains information about how to use",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig"
+ "regex": {
+ "description": "UserAgentRegex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "osin.config.openshift.io",
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "OsinServerConfig",
+ "Kind": "UserAgentMatchRule",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.RequestHeaderIdentityProvider": {
- "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.legacy.v1.UserAgentMatchingConfig": {
+ "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!",
"type": "object",
"required": [
- "loginURL",
- "challengeURL",
- "clientCA",
- "clientCommonNames",
- "headers",
- "preferredUsernameHeaders",
- "nameHeaders",
- "emailHeaders"
+ "requiredClients",
+ "deniedClients",
+ "defaultRejectionMessage"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "challengeURL": {
- "description": "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}",
- "type": "string",
- "default": ""
- },
- "clientCA": {
- "description": "clientCA is a file with the trusted signer certs. If empty, no request verification is done, and any direct request to the OAuth server can impersonate any identity from this provider, merely by setting a request header.",
- "type": "string",
- "default": ""
- },
- "clientCommonNames": {
- "description": "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "emailHeaders": {
- "description": "emailHeaders is the set of headers to check for the email address",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "headers": {
- "description": "headers is the set of headers to check for identity information",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "loginURL": {
- "description": "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}",
+ "defaultRejectionMessage": {
+ "description": "DefaultRejectionMessage is the message shown when rejecting a client. If it is not a set, a generic message is given.",
"type": "string",
"default": ""
},
- "nameHeaders": {
- "description": "nameHeaders is the set of headers to check for the display name",
+ "deniedClients": {
+ "description": "If this list is non-empty, then a User-Agent must not match any of the UserAgentRegexes",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.UserAgentDenyRule"
}
},
- "preferredUsernameHeaders": {
- "description": "preferredUsernameHeaders is the set of headers to check for the preferred username",
+ "requiredClients": {
+ "description": "If this list is non-empty, then a User-Agent must match one of the UserAgentRegexes to be allowed",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.legacy.v1.UserAgentMatchRule"
}
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "osin.config.openshift.io",
+ "Type": "nested",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "RequestHeaderIdentityProvider",
+ "Kind": "UserAgentMatchingConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.SessionConfig": {
- "description": "SessionConfig specifies options for cookie-based sessions. Used by AuthRequestHandlerSession",
+ "io.openshift.config.legacy.v1.WebhookTokenAuthenticator": {
+ "description": "WebhookTokenAuthenticators holds the necessary configuation options for external token authenticators",
"type": "object",
"required": [
- "sessionSecretsFile",
- "sessionMaxAgeSeconds",
- "sessionName"
+ "configFile",
+ "cacheTTL"
],
"properties": {
- "sessionMaxAgeSeconds": {
- "description": "sessionMaxAgeSeconds specifies how long created sessions last. Used by AuthRequestHandlerSession",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "sessionName": {
- "description": "sessionName is the cookie name used to store the session",
+ "cacheTTL": {
+ "description": "CacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get a default timeout of 2 minutes. If zero (e.g. \"0m\"), caching is disabled",
"type": "string",
"default": ""
},
- "sessionSecretsFile": {
- "description": "sessionSecretsFile is a reference to a file containing a serialized SessionSecrets object If no file is specified, a random signing and encryption key are generated at each server start",
+ "configFile": {
+ "description": "ConfigFile is a path to a Kubeconfig file with the webhook configuration",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "osin.config.openshift.io",
+ "Group": "legacy.config.openshift.io",
"Version": "v1",
- "Kind": "SessionConfig",
+ "Kind": "WebhookTokenAuthenticator",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.SessionSecret": {
- "description": "SessionSecret is a secret used to authenticate/decrypt cookie-based sessions",
+ "io.openshift.config.openshiftcontrolplane.v1.APIServers": {
"type": "object",
"required": [
- "authentication",
- "encryption"
+ "perGroupOptions"
],
"properties": {
- "authentication": {
- "description": "Authentication is used to authenticate sessions using HMAC. Recommended to use a secret with 32 or 64 bytes.",
- "type": "string",
- "default": ""
- },
- "encryption": {
- "description": "Encryption is used to encrypt sessions. Must be 16, 24, or 32 characters long, to select AES-128, AES-",
- "type": "string",
- "default": ""
+ "perGroupOptions": {
+ "description": "perGroupOptions is a list of enabled/disabled API servers in addition to the defaults",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.PerGroupOptions"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "osin.config.openshift.io",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "SessionSecret",
+ "Kind": "APIServers",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.SessionSecrets": {
- "description": "SessionSecrets list the secrets to use to sign/encrypt and authenticate/decrypt created sessions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.openshiftcontrolplane.v1.BuildControllerConfig": {
"type": "object",
"required": [
- "secrets"
+ "imageTemplateFormat",
+ "buildDefaults",
+ "buildOverrides",
+ "additionalTrustedCA"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "additionalTrustedCA": {
+ "description": "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted for image pushes and pulls during builds.",
+ "type": "string",
+ "default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "buildDefaults": {
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.BuildDefaultsConfig"
},
- "secrets": {
- "description": "Secrets is a list of secrets New sessions are signed and encrypted using the first secret. Existing sessions are decrypted/authenticated by each secret until one succeeds. This allows rotating secrets.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.osin.v1.SessionSecret"
- }
+ "buildOverrides": {
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.BuildOverridesConfig"
+ },
+ "imageTemplateFormat": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImageConfig"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "osin.config.openshift.io",
+ "Type": "nested",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "SessionSecrets",
+ "Kind": "BuildControllerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.osin.v1.TokenConfig": {
- "description": "TokenConfig holds the necessary configuration options for authorization and access tokens",
- "type": "object",
- "properties": {
- "accessTokenInactivityTimeout": {
- "description": "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "accessTokenInactivityTimeoutSeconds": {
- "description": "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.",
- "type": "integer",
- "format": "int32"
- },
- "accessTokenMaxAgeSeconds": {
- "description": "accessTokenMaxAgeSeconds defines the maximum age of access tokens",
- "type": "integer",
- "format": "int32"
- },
- "authorizeTokenMaxAgeSeconds": {
- "description": "authorizeTokenMaxAgeSeconds defines the maximum age of authorize tokens",
- "type": "integer",
- "format": "int32"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "osin.config.openshift.io",
- "Version": "v1",
- "Kind": "TokenConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfig": {
- "description": "ServiceCertSignerOperatorConfig provides information to configure an operator to manage the service cert signing controllers\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.openshiftcontrolplane.v1.BuildDefaultsConfig": {
+ "description": "BuildDefaultsConfig controls the default information for Builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
- "required": [
- "metadata",
- "spec",
- "status"
- ],
"properties": {
+ "annotations": {
+ "description": "annotations are annotations that will be added to the build pod",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
+ "env": {
+ "description": "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
+ }
+ },
+ "gitHTTPProxy": {
+ "description": "gitHTTPProxy is the location of the HTTPProxy for Git source",
+ "type": "string"
+ },
+ "gitHTTPSProxy": {
+ "description": "gitHTTPSProxy is the location of the HTTPSProxy for Git source",
+ "type": "string"
+ },
+ "gitNoProxy": {
+ "description": "gitNoProxy is the list of domains for which the proxy should not be used",
+ "type": "string"
+ },
+ "imageLabels": {
+ "description": "imageLabels is a list of labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.build.v1.ImageLabel"
+ }
+ },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "nodeSelector": {
+ "description": "nodeSelector is a selector which must be true for the build pod to fit on a node",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
},
- "spec": {
+ "resources": {
+ "description": "resources defines resource requirements to execute the build.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigSpec"
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
},
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigStatus"
+ "sourceStrategyDefaults": {
+ "description": "sourceStrategyDefaults are default values that apply to builds using the source strategy.",
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.SourceStrategyDefaultsConfig"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "servicecertsigner.config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ServiceCertSignerOperatorConfig",
- "Scope": "Clustered"
+ "Group": "openshiftcontrolplane.config.openshift.io",
+ "Version": "v1",
+ "Kind": "BuildDefaultsConfig",
+ "Scope": "Namespaced"
}
},
- "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigList": {
- "description": "ServiceCertSignerOperatorConfigList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.openshiftcontrolplane.v1.BuildOverridesConfig": {
+ "description": "BuildOverridesConfig controls override settings for builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
- "required": [
- "items"
- ],
"properties": {
+ "annotations": {
+ "description": "annotations are annotations that will be added to the build pod",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "items": {
- "description": "Items contains the items",
+ "forcePull": {
+ "description": "forcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself",
+ "type": "boolean"
+ },
+ "imageLabels": {
+ "description": "imageLabels is a list of labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfig"
+ "$ref": "#/definitions/io.openshift.build.v1.ImageLabel"
}
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "nodeSelector": {
+ "description": "nodeSelector is a selector which must be true for the build pod to fit on a node",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "tolerations": {
+ "description": "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
+ }
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "servicecertsigner.config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ServiceCertSignerOperatorConfigList",
+ "Type": "object",
+ "Group": "openshiftcontrolplane.config.openshift.io",
+ "Version": "v1",
+ "Kind": "BuildOverridesConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigSpec": {
+ "io.openshift.config.openshiftcontrolplane.v1.ClusterNetworkEntry": {
+ "description": "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.",
"type": "object",
"required": [
- "managementState"
+ "cidr",
+ "hostSubnetLength"
],
"properties": {
- "logLevel": {
- "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "managementState": {
- "description": "managementState indicates whether and how the operator should manage the component",
+ "cidr": {
+ "description": "CIDR defines the total range of a cluster networks address space.",
"type": "string",
"default": ""
},
- "observedConfig": {
- "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "operatorLogLevel": {
- "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "unsupportedConfigOverrides": {
- "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "hostSubnetLength": {
+ "description": "HostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pod.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "servicecertsigner.config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ServiceCertSignerOperatorConfigSpec",
+ "Group": "openshiftcontrolplane.config.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterNetworkEntry",
"Scope": "Namespaced"
}
},
- "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigStatus": {
+ "io.openshift.config.openshiftcontrolplane.v1.DeployerControllerConfig": {
"type": "object",
"required": [
- "readyReplicas"
+ "imageTemplateFormat"
],
"properties": {
- "conditions": {
- "description": "conditions is a list of conditions and their status",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
+ "imageTemplateFormat": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImageConfig"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "openshiftcontrolplane.config.openshift.io",
+ "Version": "v1",
+ "Kind": "DeployerControllerConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.openshiftcontrolplane.v1.DockerPullSecretControllerConfig": {
+ "type": "object",
+ "required": [
+ "registryURLs",
+ "internalRegistryHostname"
+ ],
+ "properties": {
+ "internalRegistryHostname": {
+ "description": "internalRegistryHostname is the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. Docker pull secrets will be generated for this registry.",
+ "type": "string",
+ "default": ""
},
- "generations": {
- "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "registryURLs": {
+ "description": "registryURLs is a list of urls that the docker pull secrets should be valid for.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
- },
- "x-kubernetes-list-map-keys": [
- "group",
- "resource",
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "latestAvailableRevision": {
- "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
- "type": "integer",
- "format": "int32"
- },
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
- },
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "version": {
- "description": "version is the level this availability applies to",
- "type": "string"
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "servicecertsigner.config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ServiceCertSignerOperatorConfigStatus",
+ "Group": "openshiftcontrolplane.config.openshift.io",
+ "Version": "v1",
+ "Kind": "DockerPullSecretControllerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.APIServer": {
- "description": "APIServer holds configuration (like serving certificates, client CA and CORS domains) shared by all API servers in the system, among them especially kube-apiserver and openshift-apiserver. The canonical name of an instance is 'cluster'.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.openshiftcontrolplane.v1.FrontProxyConfig": {
"type": "object",
"required": [
- "spec"
+ "clientCA",
+ "allowedNames",
+ "usernameHeaders",
+ "groupHeaders",
+ "extraHeaderPrefixes"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "allowedNames": {
+ "description": "allowedNames is an optional list of common names to require a match from.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "clientCA": {
+ "description": "clientCA is a path to the CA bundle to use to verify the common name of the front proxy's client cert",
+ "type": "string",
+ "default": ""
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "extraHeaderPrefixes": {
+ "description": "extraHeaderPrefixes is the set of header prefixes to check for user extra",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "spec": {
- "description": "spec holds user settable values for configuration",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.APIServerSpec"
+ "groupHeaders": {
+ "description": "groupHeaders is the set of headers to check for groups",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.APIServerStatus"
+ "usernameHeaders": {
+ "description": "usernameHeaders is the set of headers to check for the username",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "config.openshift.io",
+ "Type": "nested",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "APIServer",
- "Scope": "Clustered"
+ "Kind": "FrontProxyConfig",
+ "Scope": "Namespaced"
}
},
- "io.openshift.config.v1.APIServerEncryption": {
+ "io.openshift.config.openshiftcontrolplane.v1.ImageConfig": {
+ "description": "ImageConfig holds the necessary configuration options for building image names for system components",
"type": "object",
+ "required": [
+ "format",
+ "latest"
+ ],
"properties": {
- "type": {
- "description": "type defines what encryption type should be used to encrypt resources at the datastore layer. When this field is unset (i.e. when it is set to the empty string), identity is implied. The behavior of unset can and will change over time. Even if encryption is enabled by default, the meaning of unset may change to a different encryption type based on changes in best practices.\n\nWhen encryption is enabled, all sensitive resources shipped with the platform are encrypted. This list of sensitive resources can and will change over time. The current authoritative list is:\n\n 1. secrets\n 2. configmaps\n 3. routes.route.openshift.io\n 4. oauthaccesstokens.oauth.openshift.io\n 5. oauthauthorizetokens.oauth.openshift.io",
- "type": "string"
+ "format": {
+ "description": "Format is the format of the name to be built for the system component",
+ "type": "string",
+ "default": ""
+ },
+ "latest": {
+ "description": "Latest determines if the latest tag will be pulled from the registry",
+ "type": "boolean",
+ "default": false
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "APIServerEncryption",
+ "Kind": "ImageConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.APIServerList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.openshiftcontrolplane.v1.ImageImportControllerConfig": {
"type": "object",
"required": [
- "metadata",
- "items"
+ "maxScheduledImageImportsPerMinute",
+ "disableScheduledImport",
+ "scheduledImageImportMinimumIntervalSeconds"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.APIServer"
- }
+ "disableScheduledImport": {
+ "description": "disableScheduledImport allows scheduled background import of images to be disabled.",
+ "type": "boolean",
+ "default": false
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "maxScheduledImageImportsPerMinute": {
+ "description": "maxScheduledImageImportsPerMinute is the maximum number of image streams that will be imported in the background per minute. The default value is 60. Set to -1 for unlimited.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "scheduledImageImportMinimumIntervalSeconds": {
+ "description": "scheduledImageImportMinimumIntervalSeconds is the minimum number of seconds that can elapse between when image streams scheduled for background import are checked against the upstream repository. The default value is 15 minutes.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "config.openshift.io",
+ "Type": "nested",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "APIServerList",
+ "Kind": "ImageImportControllerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.APIServerNamedServingCert": {
- "description": "APIServerNamedServingCert maps a server DNS name, as understood by a client, to a certificate.",
+ "io.openshift.config.openshiftcontrolplane.v1.ImagePolicyConfig": {
"type": "object",
"required": [
- "servingCertificate"
+ "maxImagesBulkImportedPerRepository",
+ "allowedRegistriesForImport",
+ "internalRegistryHostname",
+ "externalRegistryHostnames",
+ "additionalTrustedCA"
],
"properties": {
- "names": {
- "description": "names is a optional list of explicit DNS names (leading wildcards allowed) that should use this certificate to serve secure traffic. If no names are provided, the implicit names will be extracted from the certificates. Exact names trump over wildcard names. Explicit names defined here trump over extracted implicit names.",
+ "additionalTrustedCA": {
+ "description": "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted during imagestream import.",
+ "type": "string",
+ "default": ""
+ },
+ "allowedRegistriesForImport": {
+ "description": "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.RegistryLocation"
+ }
+ },
+ "externalRegistryHostnames": {
+ "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "servingCertificate": {
- "description": "servingCertificate references a kubernetes.io/tls type secret containing the TLS cert info for serving secure traffic. The secret must exist in the openshift-config namespace and contain the following required fields: - Secret.Data[\"tls.key\"] - TLS private key. - Secret.Data[\"tls.crt\"] - TLS certificate.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ "imageStreamImportMode": {
+ "description": "imageStreamImportMode provides the import mode value for imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.",
+ "type": "string",
+ "default": "",
+ "enum": [
+ "Legacy",
+ "PreserveOriginal"
+ ]
+ },
+ "internalRegistryHostname": {
+ "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.",
+ "type": "string",
+ "default": ""
+ },
+ "maxImagesBulkImportedPerRepository": {
+ "description": "maxImagesBulkImportedPerRepository controls the number of images that are imported when a user does a bulk import of a container repository. This number is set low to prevent users from importing large numbers of images accidentally. Set -1 for no limit.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "APIServerNamedServingCert",
+ "Kind": "ImagePolicyConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.APIServerServingCerts": {
+ "io.openshift.config.openshiftcontrolplane.v1.IngressControllerConfig": {
"type": "object",
+ "required": [
+ "ingressIPNetworkCIDR"
+ ],
"properties": {
- "namedCertificates": {
- "description": "namedCertificates references secrets containing the TLS cert info for serving secure traffic to specific hostnames. If no named certificates are provided, or no named certificates match the server name as understood by a client, the defaultServingCertificate will be used.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.APIServerNamedServingCert"
- }
+ "ingressIPNetworkCIDR": {
+ "description": "ingressIPNetworkCIDR controls the range to assign ingress ips from for services of type LoadBalancer on bare metal. If empty, ingress ips will not be assigned. It may contain a single CIDR that will be allocated from. For security reasons, you should ensure that this range does not overlap with the CIDRs reserved for external ips, nodes, pods, or services.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "APIServerServingCerts",
+ "Kind": "IngressControllerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.APIServerSpec": {
+ "io.openshift.config.openshiftcontrolplane.v1.JenkinsPipelineConfig": {
+ "description": "JenkinsPipelineConfig holds configuration for the Jenkins pipeline strategy",
"type": "object",
+ "required": [
+ "autoProvisionEnabled",
+ "templateNamespace",
+ "templateName",
+ "serviceName",
+ "parameters"
+ ],
"properties": {
- "additionalCORSAllowedOrigins": {
- "description": "additionalCORSAllowedOrigins lists additional, user-defined regular expressions describing hosts for which the API server allows access using the CORS headers. This may be needed to access the API and the integrated OAuth server from JavaScript applications. The values are regular expressions that correspond to the Golang regular expression language.",
- "type": "array",
- "items": {
+ "autoProvisionEnabled": {
+ "description": "autoProvisionEnabled determines whether a Jenkins server will be spawned from the provided template when the first build config in the project with type JenkinsPipeline is created. When not specified this option defaults to true.",
+ "type": "boolean"
+ },
+ "parameters": {
+ "description": "parameters specifies a set of optional parameters to the Jenkins template.",
+ "type": "object",
+ "additionalProperties": {
"type": "string",
"default": ""
}
},
- "audit": {
- "description": "audit specifies the settings for audit configuration to be applied to all OpenShift-provided API servers in the cluster.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Audit"
+ "serviceName": {
+ "description": "serviceName is the name of the Jenkins service OpenShift uses to detect whether a Jenkins pipeline handler has already been installed in a project. This value *must* match a service name in the provided template.",
+ "type": "string",
+ "default": ""
},
- "clientCA": {
- "description": "clientCA references a ConfigMap containing a certificate bundle for the signers that will be recognized for incoming client certificates in addition to the operator managed signers. If this is empty, then only operator managed signers are valid. You usually only have to set this if you have your own PKI you wish to honor client certificates from. The ConfigMap must exist in the openshift-config namespace and contain the following required fields: - ConfigMap.Data[\"ca-bundle.crt\"] - CA bundle.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
- },
- "encryption": {
- "description": "encryption allows the configuration of encryption of resources at the datastore layer.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.APIServerEncryption"
- },
- "servingCerts": {
- "description": "servingCert is the TLS cert info for serving secure traffic. If not specified, operator managed certificates will be used for serving secure traffic.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.APIServerServingCerts"
+ "templateName": {
+ "description": "templateName is the name of the default Jenkins template",
+ "type": "string",
+ "default": ""
},
- "tlsSecurityProfile": {
- "description": "tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.\n\nIf unset, a default (which may change between releases) is chosen. Note that only Old, Intermediate and Custom profiles are currently supported, and the maximum available minTLSVersion is VersionTLS12.",
- "$ref": "#/definitions/io.openshift.config.v1.TLSSecurityProfile"
+ "templateNamespace": {
+ "description": "templateNamespace contains the namespace name where the Jenkins template is stored",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "APIServerSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.APIServerStatus": {
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "APIServerStatus",
+ "Kind": "JenkinsPipelineConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AWSDNSSpec": {
- "description": "AWSDNSSpec contains DNS configuration specific to the Amazon Web Services cloud provider.",
+ "io.openshift.config.openshiftcontrolplane.v1.NetworkControllerConfig": {
+ "description": "MasterNetworkConfig to be passed to the compiled in network plugin",
"type": "object",
+ "required": [
+ "networkPluginName",
+ "clusterNetworks",
+ "serviceNetworkCIDR",
+ "vxlanPort"
+ ],
"properties": {
- "privateZoneIAMRole": {
- "description": "privateZoneIAMRole contains the ARN of an IAM role that should be assumed when performing operations on the cluster's private hosted zone specified in the cluster DNS config. When left empty, no role should be assumed.",
+ "clusterNetworks": {
+ "description": "clusterNetworks contains a list of cluster networks that defines the global overlay networks L3 space.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ClusterNetworkEntry"
+ }
+ },
+ "networkPluginName": {
+ "type": "string",
+ "default": ""
+ },
+ "serviceNetworkCIDR": {
"type": "string",
"default": ""
+ },
+ "vxlanPort": {
+ "type": "integer",
+ "format": "int64",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "AWSDNSSpec",
+ "Kind": "NetworkControllerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AWSIngressSpec": {
- "description": "AWSIngressSpec holds the desired state of the Ingress for Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "io.openshift.config.openshiftcontrolplane.v1.OpenShiftAPIServerConfig": {
+ "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
+ "required": [
+ "servingInfo",
+ "corsAllowedOrigins",
+ "auditConfig",
+ "storageConfig",
+ "admission",
+ "kubeClientConfig",
+ "aggregatorConfig",
+ "imagePolicyConfig",
+ "projectConfig",
+ "routingConfig",
+ "serviceAccountOAuthGrantMethod",
+ "jenkinsPipelineConfig",
+ "cloudProviderFile",
+ "apiServerArguments",
+ "apiServers"
+ ],
"properties": {
- "type": {
- "description": "type allows user to set a load balancer type. When this field is set the default ingresscontroller will get created using the specified LBType. If this field is not set then the default ingress controller of LBType Classic will be created. Valid values are:\n\n* \"Classic\": A Classic Load Balancer that makes routing decisions at either\n the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See\n the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb\n\n* \"NLB\": A Network Load Balancer that makes routing decisions at the\n transport layer (TCP/SSL). See the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb",
+ "admission": {
+ "description": "admissionConfig holds information about how to configure admission.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig"
+ },
+ "aggregatorConfig": {
+ "description": "aggregatorConfig contains information about how to verify the aggregator front proxy",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.FrontProxyConfig"
+ },
+ "apiServerArguments": {
+ "type": "object",
+ "additionalProperties": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "apiServers": {
+ "description": "apiServers holds information about enabled/disabled API servers",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.APIServers"
+ },
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "auditConfig": {
+ "description": "auditConfig describes how to configure audit information",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.AuditConfig"
+ },
+ "cloudProviderFile": {
+ "description": "cloudProviderFile points to the cloud config file",
+ "type": "string",
+ "default": ""
+ },
+ "corsAllowedOrigins": {
+ "description": "corsAllowedOrigins",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "imagePolicyConfig": {
+ "description": "imagePolicyConfig feeds the image policy admission plugin",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImagePolicyConfig"
+ },
+ "jenkinsPipelineConfig": {
+ "description": "jenkinsPipelineConfig holds information about the default Jenkins template used for JenkinsPipeline build strategy.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.JenkinsPipelineConfig"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "kubeClientConfig": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig"
+ },
+ "projectConfig": {
+ "description": "projectConfig feeds an admission plugin",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ProjectConfig"
+ },
+ "routingConfig": {
+ "description": "routingConfig holds information about routing and route generation",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.RoutingConfig"
+ },
+ "serviceAccountOAuthGrantMethod": {
+ "description": "serviceAccountOAuthGrantMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt, or \"\"",
+ "type": "string",
+ "default": ""
+ },
+ "servingInfo": {
+ "description": "servingInfo describes how to start serving",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
+ },
+ "storageConfig": {
+ "description": "storageConfig contains information about how to use",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Type": "object",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "AWSIngressSpec",
+ "Kind": "OpenShiftAPIServerConfig",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {}
- }
- ]
+ }
},
- "io.openshift.config.v1.AWSPlatformSpec": {
- "description": "AWSPlatformSpec holds the desired state of the Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "io.openshift.config.openshiftcontrolplane.v1.OpenShiftControllerManagerConfig": {
+ "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
+ "required": [
+ "kubeClientConfig",
+ "servingInfo",
+ "leaderElection",
+ "controllers",
+ "resourceQuota",
+ "serviceServingCert",
+ "deployer",
+ "build",
+ "serviceAccount",
+ "dockerPullSecret",
+ "network",
+ "ingress",
+ "imageImport",
+ "securityAllocator",
+ "featureGates"
+ ],
"properties": {
- "serviceEndpoints": {
- "description": "serviceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "build": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.BuildControllerConfig"
+ },
+ "controllers": {
+ "description": "controllers is a list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller \"+ named 'foo', '-foo' disables the controller named 'foo'. Defaults to \"*\".",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AWSServiceEndpoint"
- },
- "x-kubernetes-list-type": "atomic"
+ "type": "string",
+ "default": ""
+ }
+ },
+ "deployer": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.DeployerControllerConfig"
+ },
+ "dockerPullSecret": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.DockerPullSecretControllerConfig"
+ },
+ "featureGates": {
+ "description": "featureGates are the set of extra OpenShift feature gates for openshift-controller-manager. These feature gates can be used to enable features that are tech preview or otherwise not available on OpenShift by default.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "imageImport": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImageImportControllerConfig"
+ },
+ "ingress": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.IngressControllerConfig"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "kubeClientConfig": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig"
+ },
+ "leaderElection": {
+ "description": "leaderElection defines the configuration for electing a controller instance to make changes to the cluster. If unspecified, the ControllerTTL value is checked to determine whether the legacy direct etcd election code will be used.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.LeaderElection"
+ },
+ "network": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.NetworkControllerConfig"
+ },
+ "resourceQuota": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ResourceQuotaControllerConfig"
+ },
+ "securityAllocator": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.SecurityAllocator"
+ },
+ "serviceAccount": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ServiceAccountControllerConfig"
+ },
+ "serviceServingCert": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ServiceServingCert"
+ },
+ "servingInfo": {
+ "description": "servingInfo describes how to start serving",
+ "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Type": "object",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "AWSPlatformSpec",
+ "Kind": "OpenShiftControllerManagerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AWSPlatformStatus": {
- "description": "AWSPlatformStatus holds the current status of the Amazon Web Services infrastructure provider.",
+ "io.openshift.config.openshiftcontrolplane.v1.PerGroupOptions": {
"type": "object",
"required": [
- "region"
+ "name",
+ "enabledVersions",
+ "disabledVersions"
],
"properties": {
- "region": {
- "description": "region holds the default AWS region for new AWS resources created by the cluster.",
- "type": "string",
- "default": ""
- },
- "resourceTags": {
- "description": "resourceTags is a list of additional tags to apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources. AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags available for the user.",
+ "disabledVersions": {
+ "description": "disabledVersions is a list of versions that must be disabled in addition to the defaults. Must not collide with the list of enabled versions",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AWSResourceTag"
- },
- "x-kubernetes-list-type": "atomic"
+ "type": "string",
+ "default": ""
+ }
},
- "serviceEndpoints": {
- "description": "ServiceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.",
+ "enabledVersions": {
+ "description": "enabledVersions is a list of versions that must be enabled in addition to the defaults. Must not collide with the list of disabled versions",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AWSServiceEndpoint"
- },
- "x-kubernetes-list-type": "atomic"
+ "type": "string",
+ "default": ""
+ }
+ },
+ "name": {
+ "description": "name is an API server name (see OpenShiftAPIserverName typed constants for a complete list of available API servers).",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "AWSPlatformStatus",
+ "Kind": "PerGroupOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AWSResourceTag": {
- "description": "AWSResourceTag is a tag to apply to AWS resources created for the cluster.",
+ "io.openshift.config.openshiftcontrolplane.v1.ProjectConfig": {
"type": "object",
"required": [
- "key",
- "value"
+ "defaultNodeSelector",
+ "projectRequestMessage",
+ "projectRequestTemplate"
],
"properties": {
- "key": {
- "description": "key is the key of the tag",
+ "defaultNodeSelector": {
+ "description": "defaultNodeSelector holds default project node label selector",
"type": "string",
"default": ""
},
- "value": {
- "description": "value is the value of the tag. Some AWS service do not support empty values. Since tags are added to resources in many services, the length of the tag value must meet the requirements of all services.",
+ "projectRequestMessage": {
+ "description": "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint",
+ "type": "string",
+ "default": ""
+ },
+ "projectRequestTemplate": {
+ "description": "projectRequestTemplate is the template to use for creating projects in response to projectrequest. It is in the format namespace/template and it is optional. If it is not specified, a default template is used.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "AWSResourceTag",
+ "Kind": "ProjectConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AWSServiceEndpoint": {
- "description": "AWSServiceEndpoint store the configuration of a custom url to override existing defaults of AWS Services.",
+ "io.openshift.config.openshiftcontrolplane.v1.RegistryLocation": {
+ "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.",
"type": "object",
"required": [
- "name",
- "url"
+ "domainName"
],
"properties": {
- "name": {
- "description": "name is the name of the AWS service. The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html This must be provided and cannot be empty.",
+ "domainName": {
+ "description": "DomainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.",
"type": "string",
"default": ""
},
- "url": {
- "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.",
- "type": "string",
- "default": ""
+ "insecure": {
+ "description": "Insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.",
+ "type": "boolean"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "AWSServiceEndpoint",
+ "Kind": "RegistryLocation",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AdmissionConfig": {
+ "io.openshift.config.openshiftcontrolplane.v1.ResourceQuotaControllerConfig": {
"type": "object",
+ "required": [
+ "concurrentSyncs",
+ "syncPeriod",
+ "minResyncPeriod"
+ ],
"properties": {
- "disabledPlugins": {
- "description": "disabledPlugins is a list of admission plugins that must be off. Putting something in this list is almost always a mistake and likely to result in cluster instability.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "concurrentSyncs": {
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "enabledPlugins": {
- "description": "enabledPlugins is a list of admission plugins that must be on in addition to the default list. Some admission plugins are disabled by default, but certain configurations require them. This is fairly uncommon and can result in performance penalties and unexpected behavior.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "minResyncPeriod": {
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
},
- "pluginConfig": {
- "type": "object",
- "additionalProperties": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AdmissionPluginConfig"
- }
+ "syncPeriod": {
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "AdmissionConfig",
+ "Kind": "ResourceQuotaControllerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AdmissionPluginConfig": {
- "description": "AdmissionPluginConfig holds the necessary configuration options for admission plugins",
+ "io.openshift.config.openshiftcontrolplane.v1.RoutingConfig": {
+ "description": "RoutingConfig holds the necessary configuration options for routing to subdomains",
"type": "object",
"required": [
- "location",
- "configuration"
+ "subdomain"
],
"properties": {
- "configuration": {
- "description": "Configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "location": {
- "description": "Location is the path to a configuration file that contains the plugin's configuration",
+ "subdomain": {
+ "description": "subdomain is the suffix appended to $service.$namespace. to form the default route hostname DEPRECATED: This field is being replaced by routers setting their own defaults. This is the \"default\" route.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "AdmissionPluginConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.AlibabaCloudPlatformSpec": {
- "description": "AlibabaCloudPlatformSpec holds the desired state of the Alibaba Cloud infrastructure provider. This only includes fields that can be modified in the cluster.",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "AlibabaCloudPlatformSpec",
+ "Kind": "RoutingConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AlibabaCloudPlatformStatus": {
- "description": "AlibabaCloudPlatformStatus holds the current status of the Alibaba Cloud infrastructure provider.",
+ "io.openshift.config.openshiftcontrolplane.v1.SecurityAllocator": {
+ "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.",
"type": "object",
"required": [
- "region"
+ "uidAllocatorRange",
+ "mcsAllocatorRange",
+ "mcsLabelsPerProject"
],
"properties": {
- "region": {
- "description": "region specifies the region for Alibaba Cloud resources created for the cluster.",
+ "mcsAllocatorRange": {
+ "description": "MCSAllocatorRange defines the range of MCS categories that will be assigned to namespaces. The format is \"\u003cprefix\u003e/\u003cnumberOfLabels\u003e[,\u003cmaxCategory\u003e]\". The default is \"s0/2\" and will allocate from c0 -\u003e c1023, which means a total of 535k labels are available (1024 choose 2 ~ 535k). If this value is changed after startup, new projects may receive labels that are already allocated to other projects. Prefix may be any valid SELinux set of terms (including user, role, and type), although leaving them as the default will allow the server to set them automatically.\n\nExamples: * s0:/2 - Allocate labels from s0:c0,c0 to s0:c511,c511 * s0:/2,512 - Allocate labels from s0:c0,c0,c0 to s0:c511,c511,511",
"type": "string",
"default": ""
},
- "resourceGroupID": {
- "description": "resourceGroupID is the ID of the resource group for the cluster.",
- "type": "string"
+ "mcsLabelsPerProject": {
+ "description": "MCSLabelsPerProject defines the number of labels that should be reserved per project. The default is 5 to match the default UID and MCS ranges (100k namespaces, 535k/5 labels).",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "resourceTags": {
- "description": "resourceTags is a list of additional tags to apply to Alibaba Cloud resources created for the cluster.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AlibabaCloudResourceTag"
- },
- "x-kubernetes-list-map-keys": [
- "key"
- ],
- "x-kubernetes-list-type": "map"
+ "uidAllocatorRange": {
+ "description": "UIDAllocatorRange defines the total set of Unix user IDs (UIDs) that will be allocated to projects automatically, and the size of the block each namespace gets. For example, 1000-1999/10 will allocate ten UIDs per namespace, and will be able to allocate up to 100 blocks before running out of space. The default is to allocate from 1 billion to 2 billion in 10k blocks (which is the expected size of the ranges container images will use once user namespaces are started).",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "AlibabaCloudPlatformStatus",
+ "Kind": "SecurityAllocator",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AlibabaCloudResourceTag": {
- "description": "AlibabaCloudResourceTag is the set of tags to add to apply to resources.",
+ "io.openshift.config.openshiftcontrolplane.v1.ServiceAccountControllerConfig": {
"type": "object",
"required": [
- "key",
- "value"
+ "managedNames"
],
"properties": {
- "key": {
- "description": "key is the key of the tag.",
- "type": "string",
- "default": ""
- },
- "value": {
- "description": "value is the value of the tag.",
- "type": "string",
- "default": ""
+ "managedNames": {
+ "description": "managedNames is a list of service account names that will be auto-created in every namespace. If no names are specified, the ServiceAccountsController will not be started.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "openshiftcontrolplane.config.openshift.io",
"Version": "v1",
- "Kind": "AlibabaCloudResourceTag",
+ "Kind": "ServiceAccountControllerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.Audit": {
+ "io.openshift.config.openshiftcontrolplane.v1.ServiceServingCert": {
+ "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.",
"type": "object",
+ "required": [
+ "signer"
+ ],
"properties": {
- "customRules": {
- "description": "customRules specify profiles per group. These profile take precedence over the top-level profile field if they apply. They are evaluation from top to bottom and the first one that matches, applies.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AuditCustomRule"
- },
- "x-kubernetes-list-map-keys": [
- "group"
- ],
- "x-kubernetes-list-type": "map"
+ "signer": {
+ "description": "Signer holds the signing information used to automatically sign serving certificates. If this value is nil, then certs are not signed automatically.",
+ "$ref": "#/definitions/io.openshift.config.v1.CertInfo"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "openshiftcontrolplane.config.openshift.io",
+ "Version": "v1",
+ "Kind": "ServiceServingCert",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.openshiftcontrolplane.v1.SourceStrategyDefaultsConfig": {
+ "description": "SourceStrategyDefaultsConfig contains values that apply to builds using the source strategy.",
+ "type": "object",
+ "properties": {
+ "incremental": {
+ "description": "incremental indicates if s2i build strategies should perform an incremental build or not",
+ "type": "boolean"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "openshiftcontrolplane.config.openshift.io",
+ "Version": "v1",
+ "Kind": "SourceStrategyDefaultsConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.osin.v1.AllowAllPasswordIdentityProvider": {
+ "description": "AllowAllPasswordIdentityProvider provides identities for users authenticating using non-empty passwords\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "profile": {
- "description": "profile specifies the name of the desired top-level audit profile to be applied to all requests sent to any of the OpenShift-provided API servers in the cluster (kube-apiserver, openshift-apiserver and oauth-apiserver), with the exception of those requests that match one or more of the customRules.\n\nThe following profiles are provided: - Default: default policy which means MetaData level logging with the exception of events\n (not logged at all), oauthaccesstokens and oauthauthorizetokens (both logged at RequestBody\n level).\n- WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nWarning: It is not recommended to disable audit logging by using the `None` profile unless you are fully aware of the risks of not logging data that can be beneficial when troubleshooting issues. If you disable audit logging and a support situation arises, you might need to enable audit logging and reproduce the issue in order to troubleshoot properly.\n\nIf unset, the 'Default' profile is used as the default.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Type": "object",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "Audit",
+ "Kind": "AllowAllPasswordIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AuditConfig": {
- "description": "AuditConfig holds configuration for the audit capabilities",
+ "io.openshift.config.osin.v1.BasicAuthPasswordIdentityProvider": {
+ "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "enabled",
- "auditFilePath",
- "maximumFileRetentionDays",
- "maximumRetainedFiles",
- "maximumFileSizeMegabytes",
- "policyFile",
- "policyConfiguration",
- "logFormat",
- "webHookKubeConfig",
- "webHookMode"
+ "url",
+ "ca",
+ "certFile",
+ "keyFile"
],
"properties": {
- "auditFilePath": {
- "description": "All requests coming to the apiserver will be logged to this file.",
- "type": "string",
- "default": ""
- },
- "enabled": {
- "description": "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.",
- "type": "boolean",
- "default": false
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "logFormat": {
- "description": "Format of saved audits (legacy or json).",
+ "ca": {
+ "description": "CA is the CA for verifying TLS connections",
"type": "string",
"default": ""
},
- "maximumFileRetentionDays": {
- "description": "Maximum number of days to retain old log files based on the timestamp encoded in their filename.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "maximumFileSizeMegabytes": {
- "description": "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "maximumRetainedFiles": {
- "description": "Maximum number of old log files to retain.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "policyConfiguration": {
- "description": "PolicyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "policyFile": {
- "description": "PolicyFile is a path to the file that defines the audit policy configuration.",
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
"type": "string",
"default": ""
},
- "webHookKubeConfig": {
- "description": "Path to a .kubeconfig formatted file that defines the audit webhook configuration.",
+ "keyFile": {
+ "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
"type": "string",
"default": ""
},
- "webHookMode": {
- "description": "Strategy for sending audit events (block or batch).",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "url": {
+ "description": "URL is the remote URL to connect to",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Type": "object",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "AuditConfig",
+ "Kind": "BasicAuthPasswordIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AuditCustomRule": {
- "description": "AuditCustomRule describes a custom rule for an audit profile that takes precedence over the top-level profile.",
+ "io.openshift.config.osin.v1.DenyAllPasswordIdentityProvider": {
+ "description": "DenyAllPasswordIdentityProvider provides no identities for users\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
- "required": [
- "group",
- "profile"
- ],
"properties": {
- "group": {
- "description": "group is a name of group a request user must be member of in order to this profile to apply.",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "profile": {
- "description": "profile specifies the name of the desired audit policy configuration to be deployed to all OpenShift-provided API servers in the cluster.\n\nThe following profiles are provided: - Default: the existing default policy. - WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nIf unset, the 'Default' profile is used as the default.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Type": "object",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "AuditCustomRule",
+ "Kind": "DenyAllPasswordIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.Authentication": {
- "description": "Authentication specifies cluster-wide settings for authentication (like OAuth and webhook token authenticators). The canonical name of an instance is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.osin.v1.GitHubIdentityProvider": {
+ "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "spec"
+ "clientID",
+ "clientSecret",
+ "organizations",
+ "teams",
+ "hostname",
+ "ca"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
+ "ca": {
+ "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value.",
+ "type": "string",
+ "default": ""
+ },
+ "clientID": {
+ "description": "clientID is the oauth client ID",
+ "type": "string",
+ "default": ""
+ },
+ "clientSecret": {
+ "description": "clientSecret is the oauth client secret",
+ "$ref": "#/definitions/io.openshift.config.v1.StringSource"
+ },
+ "hostname": {
+ "description": "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value that is configured at /setup/settings#hostname.",
+ "type": "string",
+ "default": ""
+ },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec holds user settable values for configuration",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AuthenticationSpec"
+ "organizations": {
+ "description": "organizations optionally restricts which organizations are allowed to log in",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AuthenticationStatus"
+ "teams": {
+ "description": "teams optionally restricts which teams are allowed to log in. Format is \u003corg\u003e/\u003cteam\u003e.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "config.openshift.io",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "Authentication",
- "Scope": "Clustered"
+ "Kind": "GitHubIdentityProvider",
+ "Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AuthenticationList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.osin.v1.GitLabIdentityProvider": {
+ "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "metadata",
- "items"
+ "ca",
+ "url",
+ "clientID",
+ "clientSecret"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Authentication"
- }
+ "ca": {
+ "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
+ "type": "string",
+ "default": ""
+ },
+ "clientID": {
+ "description": "clientID is the oauth client ID",
+ "type": "string",
+ "default": ""
+ },
+ "clientSecret": {
+ "description": "clientSecret is the oauth client secret",
+ "$ref": "#/definitions/io.openshift.config.v1.StringSource"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "legacy": {
+ "description": "legacy determines if OAuth2 or OIDC should be used If true, OAuth2 is used If false, OIDC is used If nil and the URL's host is gitlab.com, OIDC is used Otherwise, OAuth2 is used In a future release, nil will default to using OIDC Eventually this flag will be removed and only OIDC will be used",
+ "type": "boolean"
+ },
+ "url": {
+ "description": "url is the oauth server base URL",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "config.openshift.io",
+ "Type": "object",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "AuthenticationList",
+ "Kind": "GitLabIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AuthenticationSpec": {
+ "io.openshift.config.osin.v1.GoogleIdentityProvider": {
+ "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
+ "required": [
+ "clientID",
+ "clientSecret",
+ "hostedDomain"
+ ],
"properties": {
- "oauthMetadata": {
- "description": "oauthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for an external OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 If oauthMetadata.name is non-empty, this value has precedence over any metadata reference stored in status. The key \"oauthMetadata\" is used to locate the data. If specified and the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
- },
- "oidcProviders": {
- "description": "OIDCProviders are OIDC identity providers that can issue tokens for this cluster Can only be set if \"Type\" is set to \"OIDC\".\n\nAt most one provider can be configured.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.OIDCProvider"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "serviceAccountIssuer": {
- "description": "serviceAccountIssuer is the identifier of the bound service account token issuer. The default is https://kubernetes.default.svc WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the previous issuer value. Instead, the tokens issued by previous service account issuer will continue to be trusted for a time period chosen by the platform (currently set to 24h). This time period is subject to change over time. This allows internal components to transition to use new service account issuer without service distruption.",
+ "clientID": {
+ "description": "clientID is the oauth client ID",
"type": "string",
"default": ""
},
- "type": {
- "description": "type identifies the cluster managed, user facing authentication mode in use. Specifically, it manages the component that responds to login attempts. The default is IntegratedOAuth.",
+ "clientSecret": {
+ "description": "clientSecret is the oauth client secret",
+ "$ref": "#/definitions/io.openshift.config.v1.StringSource"
+ },
+ "hostedDomain": {
+ "description": "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to",
"type": "string",
"default": ""
},
- "webhookTokenAuthenticator": {
- "description": "webhookTokenAuthenticator configures a remote token reviewer. These remote authentication webhooks can be used to verify bearer tokens via the tokenreviews.authentication.k8s.io REST API. This is required to honor bearer tokens that are provisioned by an external authentication service.\n\nCan only be set if \"Type\" is set to \"None\".",
- "$ref": "#/definitions/io.openshift.config.v1.WebhookTokenAuthenticator"
- },
- "webhookTokenAuthenticators": {
- "description": "webhookTokenAuthenticators is DEPRECATED, setting it has no effect.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.DeprecatedWebhookTokenAuthenticator"
- },
- "x-kubernetes-list-type": "atomic"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Type": "object",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "AuthenticationSpec",
+ "Kind": "GoogleIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AuthenticationStatus": {
+ "io.openshift.config.osin.v1.GrantConfig": {
+ "description": "GrantConfig holds the necessary configuration options for grant handlers",
"type": "object",
"required": [
- "integratedOAuthMetadata",
- "oidcClients"
+ "method",
+ "serviceAccountMethod"
],
"properties": {
- "integratedOAuthMetadata": {
- "description": "integratedOAuthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for the in-cluster integrated OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This contains the observed value based on cluster state. An explicitly set value in spec.oauthMetadata has precedence over this field. This field has no meaning if authentication spec.type is not set to IntegratedOAuth. The key \"oauthMetadata\" is used to locate the data. If the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config-managed.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ "method": {
+ "description": "method determines the default strategy to use when an OAuth client requests a grant. This method will be used only if the specific OAuth client doesn't provide a strategy of their own. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients\n - deny: always denies grant requests, useful for black-listed clients",
+ "type": "string",
+ "default": ""
},
- "oidcClients": {
- "description": "OIDCClients is where participating operators place the current OIDC client status for OIDC clients that can be customized by the cluster-admin.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.OIDCClientStatus"
- },
- "x-kubernetes-list-map-keys": [
- "componentNamespace",
- "componentName"
- ],
- "x-kubernetes-list-type": "map"
+ "serviceAccountMethod": {
+ "description": "serviceAccountMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "AuthenticationStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.AzurePlatformSpec": {
- "description": "AzurePlatformSpec holds the desired state of the Azure infrastructure provider. This only includes fields that can be modified in the cluster.",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "AzurePlatformSpec",
+ "Kind": "GrantConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AzurePlatformStatus": {
- "description": "AzurePlatformStatus holds the current status of the Azure infrastructure provider.",
+ "io.openshift.config.osin.v1.HTPasswdPasswordIdentityProvider": {
+ "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "resourceGroupName"
+ "file"
],
"properties": {
- "armEndpoint": {
- "description": "armEndpoint specifies a URL to use for resource management in non-soverign clouds such as Azure Stack.",
- "type": "string"
- },
- "cloudName": {
- "description": "cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to `AzurePublicCloud`.",
- "type": "string"
- },
- "networkResourceGroupName": {
- "description": "networkResourceGroupName is the Resource Group for network resources like the Virtual Network and Subnets used by the cluster. If empty, the value is same as ResourceGroupName.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "resourceGroupName": {
- "description": "resourceGroupName is the Resource Group for new Azure resources created for the cluster.",
+ "file": {
+ "description": "file is a reference to your htpasswd file",
"type": "string",
"default": ""
},
- "resourceTags": {
- "description": "resourceTags is a list of additional tags to apply to Azure resources created for the cluster. See https://docs.microsoft.com/en-us/rest/api/resources/tags for information on tagging Azure resources. Due to limitations on Automation, Content Delivery Network, DNS Azure resources, a maximum of 15 tags may be applied. OpenShift reserves 5 tags for internal use, allowing 10 tags for user configuration.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AzureResourceTag"
- },
- "x-kubernetes-list-type": "atomic"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Type": "object",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "AzurePlatformStatus",
+ "Kind": "HTPasswdPasswordIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.AzureResourceTag": {
- "description": "AzureResourceTag is a tag to apply to Azure resources created for the cluster.",
+ "io.openshift.config.osin.v1.IdentityProvider": {
+ "description": "IdentityProvider provides identities for users authenticating using credentials",
"type": "object",
"required": [
- "key",
- "value"
+ "name",
+ "challenge",
+ "login",
+ "mappingMethod",
+ "provider"
],
"properties": {
- "key": {
- "description": "key is the key part of the tag. A tag key can have a maximum of 128 characters and cannot be empty. Key must begin with a letter, end with a letter, number or underscore, and must contain only alphanumeric characters and the following special characters `_ . -`.",
+ "challenge": {
+ "description": "challenge indicates whether to issue WWW-Authenticate challenges for this provider",
+ "type": "boolean",
+ "default": false
+ },
+ "login": {
+ "description": "login indicates whether to use this identity provider for unauthenticated browsers to login against",
+ "type": "boolean",
+ "default": false
+ },
+ "mappingMethod": {
+ "description": "mappingMethod determines how identities from this provider are mapped to users",
"type": "string",
"default": ""
},
- "value": {
- "description": "value is the value part of the tag. A tag value can have a maximum of 256 characters and cannot be empty. Value must contain only alphanumeric characters and the following special characters `_ + , - . / : ; \u003c = \u003e ? @`.",
+ "name": {
+ "description": "name is used to qualify the identities returned by this provider",
"type": "string",
"default": ""
+ },
+ "provider": {
+ "description": "provider contains the information about how to set up a specific identity provider",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "AzureResourceTag",
+ "Kind": "IdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.BareMetalPlatformLoadBalancer": {
- "description": "BareMetalPlatformLoadBalancer defines the load balancer used by the cluster on BareMetal platform.",
+ "io.openshift.config.osin.v1.KeystonePasswordIdentityProvider": {
+ "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
+ "required": [
+ "url",
+ "ca",
+ "certFile",
+ "keyFile",
+ "domainName",
+ "useKeystoneIdentity"
+ ],
"properties": {
- "type": {
- "description": "type defines the type of load balancer used by the cluster on BareMetal platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "ca": {
+ "description": "CA is the CA for verifying TLS connections",
"type": "string",
- "default": "OpenShiftManagedDefault"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "BareMetalPlatformLoadBalancer",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {}
- }
- ]
- },
- "io.openshift.config.v1.BareMetalPlatformSpec": {
- "description": "BareMetalPlatformSpec holds the desired state of the BareMetal infrastructure provider. This only includes fields that can be modified in the cluster.",
- "type": "object",
- "properties": {
- "apiServerInternalIPs": {
- "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "default": ""
},
- "ingressIPs": {
- "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
+ "type": "string",
+ "default": ""
},
- "machineNetworks": {
- "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "domainName": {
+ "description": "domainName is required for keystone v3",
+ "type": "string",
+ "default": ""
+ },
+ "keyFile": {
+ "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "type": "string",
+ "default": ""
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "url": {
+ "description": "URL is the remote URL to connect to",
+ "type": "string",
+ "default": ""
+ },
+ "useKeystoneIdentity": {
+ "description": "useKeystoneIdentity flag indicates that user should be authenticated by keystone ID, not by username",
+ "type": "boolean",
+ "default": false
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Type": "object",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "BareMetalPlatformSpec",
+ "Kind": "KeystonePasswordIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.BareMetalPlatformStatus": {
- "description": "BareMetalPlatformStatus holds the current status of the BareMetal infrastructure provider. For more information about the network architecture used with the BareMetal platform type, see: https://github.com/openshift/installer/blob/master/docs/design/baremetal/networking-infrastructure.md",
+ "io.openshift.config.osin.v1.LDAPAttributeMapping": {
+ "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields",
"type": "object",
"required": [
- "apiServerInternalIPs",
- "ingressIPs"
+ "id",
+ "preferredUsername",
+ "name",
+ "email"
],
"properties": {
- "apiServerInternalIP": {
- "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.",
- "type": "string"
- },
- "apiServerInternalIPs": {
- "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.",
+ "email": {
+ "description": "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity",
"type": "array",
"items": {
"type": "string",
"default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "ingressIP": {
- "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.",
- "type": "string"
+ }
},
- "ingressIPs": {
- "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.",
+ "id": {
+ "description": "id is the list of attributes whose values should be used as the user ID. Required. LDAP standard identity attribute is \"dn\"",
"type": "array",
"items": {
"type": "string",
"default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "loadBalancer": {
- "description": "loadBalancer defines how the load balancer used by the cluster is configured.",
- "default": {
- "type": "OpenShiftManagedDefault"
- },
- "$ref": "#/definitions/io.openshift.config.v1.BareMetalPlatformLoadBalancer"
+ }
},
- "machineNetworks": {
- "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.",
+ "name": {
+ "description": "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"",
"type": "array",
"items": {
"type": "string",
"default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ }
},
- "nodeDNSIP": {
- "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for BareMetal deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.",
- "type": "string"
+ "preferredUsername": {
+ "description": "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "BareMetalPlatformStatus",
+ "Kind": "LDAPAttributeMapping",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.BasicAuthIdentityProvider": {
- "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials",
+ "io.openshift.config.osin.v1.LDAPPasswordIdentityProvider": {
+ "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "url"
+ "url",
+ "bindDN",
+ "bindPassword",
+ "insecure",
+ "ca",
+ "attributes"
],
"properties": {
- "ca": {
- "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "tlsClientCert": {
- "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
+ "attributes": {
+ "description": "attributes maps LDAP attributes to identities",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ "$ref": "#/definitions/io.openshift.config.osin.v1.LDAPAttributeMapping"
},
- "tlsClientKey": {
- "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ "bindDN": {
+ "description": "bindDN is an optional DN to bind with during the search phase.",
+ "type": "string",
+ "default": ""
+ },
+ "bindPassword": {
+ "description": "bindPassword is an optional password to bind with during the search phase.",
+ "$ref": "#/definitions/io.openshift.config.v1.StringSource"
+ },
+ "ca": {
+ "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
+ "type": "string",
+ "default": ""
+ },
+ "insecure": {
+ "description": "insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830",
+ "type": "boolean",
+ "default": false
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
"url": {
- "description": "url is the remote URL to connect to",
+ "description": "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is\n ldap://host:port/basedn?attribute?scope?filter",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Type": "object",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "BasicAuthIdentityProvider",
+ "Kind": "LDAPPasswordIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.Build": {
- "description": "Build configures the behavior of OpenShift builds for the entire cluster. This includes default settings that can be overridden in BuildConfig objects, and overrides which are applied to all builds.\n\nThe canonical name is \"cluster\"\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.osin.v1.OAuthConfig": {
+ "description": "OAuthConfig holds the necessary configuration options for OAuth authentication",
"type": "object",
"required": [
- "spec"
+ "masterCA",
+ "masterURL",
+ "masterPublicURL",
+ "loginURL",
+ "assetPublicURL",
+ "alwaysShowProviderSelection",
+ "identityProviders",
+ "grantConfig",
+ "sessionConfig",
+ "tokenConfig",
+ "templates"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "alwaysShowProviderSelection": {
+ "description": "alwaysShowProviderSelection will force the provider selection page to render even when there is only a single provider.",
+ "type": "boolean",
+ "default": false
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "assetPublicURL": {
+ "description": "assetPublicURL is used for building valid client redirect URLs for external access",
+ "type": "string",
+ "default": ""
},
- "spec": {
- "description": "Spec holds user-settable values for the build controller configuration",
+ "grantConfig": {
+ "description": "grantConfig describes how to handle grants",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.BuildSpec"
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "Build",
- "Scope": "Clustered"
- }
- },
- "io.openshift.config.v1.BuildDefaults": {
- "type": "object",
- "properties": {
- "defaultProxy": {
- "description": "DefaultProxy contains the default proxy settings for all build operations, including image pull/push and source download.\n\nValues can be overrode by setting the `HTTP_PROXY`, `HTTPS_PROXY`, and `NO_PROXY` environment variables in the build config's strategy.",
- "$ref": "#/definitions/io.openshift.config.v1.ProxySpec"
+ "$ref": "#/definitions/io.openshift.config.osin.v1.GrantConfig"
},
- "env": {
- "description": "Env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build",
+ "identityProviders": {
+ "description": "identityProviders is an ordered list of ways for a user to identify themselves",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
+ "$ref": "#/definitions/io.openshift.config.osin.v1.IdentityProvider"
}
},
- "gitProxy": {
- "description": "GitProxy contains the proxy settings for git operations only. If set, this will override any Proxy settings for all git commands, such as git clone.\n\nValues that are not set here will be inherited from DefaultProxy.",
- "$ref": "#/definitions/io.openshift.config.v1.ProxySpec"
+ "loginURL": {
+ "description": "loginURL, along with masterCA, masterURL and masterPublicURL have distinct meanings depending on how the OAuth server is run. The two states are: 1. embedded in the kube api server (all 3.x releases) 2. as a standalone external process (all 4.x releases) in the embedded configuration, loginURL is equivalent to masterPublicURL and the other fields have functionality that matches their docs. in the standalone configuration, the fields are used as: loginURL is the URL required to login to the cluster: oc login --server=\u003cloginURL\u003e masterPublicURL is the issuer URL it is accessible from inside (service network) and outside (ingress) of the cluster masterURL is the loopback variation of the token_endpoint URL with no path component it is only accessible from inside (service network) of the cluster masterCA is used to perform TLS verification for connections made to masterURL For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2",
+ "type": "string",
+ "default": ""
},
- "imageLabels": {
- "description": "ImageLabels is a list of docker labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageLabel"
- }
+ "masterCA": {
+ "description": "masterCA is the CA for verifying the TLS connection back to the MasterURL. This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated",
+ "type": "string"
},
- "resources": {
- "description": "Resources defines resource requirements to execute the build.",
+ "masterPublicURL": {
+ "description": "masterPublicURL is used for building valid client redirect URLs for internal and external access This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated",
+ "type": "string",
+ "default": ""
+ },
+ "masterURL": {
+ "description": "masterURL is used for making server-to-server calls to exchange authorization codes for access tokens This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated",
+ "type": "string",
+ "default": ""
+ },
+ "sessionConfig": {
+ "description": "sessionConfig hold information about configuring sessions.",
+ "$ref": "#/definitions/io.openshift.config.osin.v1.SessionConfig"
+ },
+ "templates": {
+ "description": "templates allow you to customize pages like the login page.",
+ "$ref": "#/definitions/io.openshift.config.osin.v1.OAuthTemplates"
+ },
+ "tokenConfig": {
+ "description": "tokenConfig contains options for authorization and access tokens",
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
+ "$ref": "#/definitions/io.openshift.config.osin.v1.TokenConfig"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "BuildDefaults",
+ "Kind": "OAuthConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.BuildList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.osin.v1.OAuthTemplates": {
+ "description": "OAuthTemplates allow for customization of pages like the login page",
"type": "object",
"required": [
- "metadata",
- "items"
+ "login",
+ "providerSelection",
+ "error"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Build"
- }
+ "error": {
+ "description": "error is a path to a file containing a go template used to render error pages during the authentication or grant flow If unspecified, the default error page is used.",
+ "type": "string",
+ "default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "login": {
+ "description": "login is a path to a file containing a go template used to render the login page. If unspecified, the default login page is used.",
+ "type": "string",
+ "default": ""
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "providerSelection": {
+ "description": "providerSelection is a path to a file containing a go template used to render the provider selection page. If unspecified, the default provider selection page is used.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "config.openshift.io",
+ "Type": "nested",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "BuildList",
+ "Kind": "OAuthTemplates",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.BuildOverrides": {
+ "io.openshift.config.osin.v1.OpenIDClaims": {
+ "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider",
"type": "object",
+ "required": [
+ "id",
+ "preferredUsername",
+ "name",
+ "email",
+ "groups"
+ ],
"properties": {
- "forcePull": {
- "description": "ForcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself",
- "type": "boolean"
+ "email": {
+ "description": "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "imageLabels": {
- "description": "ImageLabels is a list of docker labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.",
+ "groups": {
+ "description": "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageLabel"
+ "type": "string",
+ "default": ""
}
},
- "nodeSelector": {
- "description": "NodeSelector is a selector which must be true for the build pod to fit on a node",
- "type": "object",
- "additionalProperties": {
+ "id": {
+ "description": "id is the list of claims whose values should be used as the user ID. Required. OpenID standard identity claim is \"sub\"",
+ "type": "array",
+ "items": {
"type": "string",
"default": ""
}
},
- "tolerations": {
- "description": "Tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.",
+ "name": {
+ "description": "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
+ "type": "string",
+ "default": ""
+ }
+ },
+ "preferredUsername": {
+ "description": "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the id claim",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
}
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "BuildOverrides",
+ "Kind": "OpenIDClaims",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.BuildSpec": {
+ "io.openshift.config.osin.v1.OpenIDIdentityProvider": {
+ "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
+ "required": [
+ "ca",
+ "clientID",
+ "clientSecret",
+ "extraScopes",
+ "extraAuthorizeParameters",
+ "urls",
+ "claims"
+ ],
"properties": {
- "additionalTrustedCA": {
- "description": "AdditionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted for image pushes and pulls during builds. The namespace for this config map is openshift-config.\n\nDEPRECATED: Additional CAs for image pull and push should be set on image.config.openshift.io/cluster instead.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "buildDefaults": {
- "description": "BuildDefaults controls the default information for Builds",
+ "ca": {
+ "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used",
+ "type": "string",
+ "default": ""
+ },
+ "claims": {
+ "description": "claims mappings",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.BuildDefaults"
+ "$ref": "#/definitions/io.openshift.config.osin.v1.OpenIDClaims"
},
- "buildOverrides": {
- "description": "BuildOverrides controls override settings for builds",
+ "clientID": {
+ "description": "clientID is the oauth client ID",
+ "type": "string",
+ "default": ""
+ },
+ "clientSecret": {
+ "description": "clientSecret is the oauth client secret",
+ "$ref": "#/definitions/io.openshift.config.v1.StringSource"
+ },
+ "extraAuthorizeParameters": {
+ "description": "extraAuthorizeParameters are any custom parameters to add to the authorize request.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "extraScopes": {
+ "description": "extraScopes are any scopes to request in addition to the standard \"openid\" scope.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "urls": {
+ "description": "urls to use to authenticate",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.BuildOverrides"
+ "$ref": "#/definitions/io.openshift.config.osin.v1.OpenIDURLs"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Type": "object",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "BuildSpec",
+ "Kind": "OpenIDIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.CertInfo": {
- "description": "CertInfo relates a certificate with a private key",
+ "io.openshift.config.osin.v1.OpenIDURLs": {
+ "description": "OpenIDURLs are URLs to use when authenticating with an OpenID identity provider",
"type": "object",
"required": [
- "certFile",
- "keyFile"
+ "authorize",
+ "token",
+ "userInfo"
],
"properties": {
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
+ "authorize": {
+ "description": "authorize is the oauth authorization URL",
"type": "string",
"default": ""
},
- "keyFile": {
- "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "token": {
+ "description": "token is the oauth token granting URL",
+ "type": "string",
+ "default": ""
+ },
+ "userInfo": {
+ "description": "userInfo is the optional userinfo URL. If present, a granted access_token is used to request claims If empty, a granted id_token is parsed for claims",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "CertInfo",
+ "Kind": "OpenIDURLs",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ClientConnectionOverrides": {
+ "io.openshift.config.osin.v1.OsinServerConfig": {
+ "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "acceptContentTypes",
- "contentType",
- "qps",
- "burst"
+ "servingInfo",
+ "corsAllowedOrigins",
+ "auditConfig",
+ "storageConfig",
+ "admission",
+ "kubeClientConfig",
+ "oauthConfig"
],
"properties": {
- "acceptContentTypes": {
- "description": "acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.",
- "type": "string",
- "default": ""
+ "admission": {
+ "description": "admissionConfig holds information about how to configure admission.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig"
},
- "burst": {
- "description": "burst allows extra queries to accumulate when a client is exceeding its rate.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "contentType": {
- "description": "contentType is the content type used when sending data to the server from this client.",
- "type": "string",
- "default": ""
+ "auditConfig": {
+ "description": "auditConfig describes how to configure audit information",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.AuditConfig"
},
- "qps": {
- "description": "qps controls the number of queries per second allowed for this connection.",
- "type": "number",
- "format": "float",
- "default": 0
+ "corsAllowedOrigins": {
+ "description": "corsAllowedOrigins",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "kubeClientConfig": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig"
+ },
+ "oauthConfig": {
+ "description": "oauthConfig holds the necessary configuration options for OAuth authentication",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.osin.v1.OAuthConfig"
+ },
+ "servingInfo": {
+ "description": "servingInfo describes how to start serving",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
+ },
+ "storageConfig": {
+ "description": "storageConfig contains information about how to use",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Type": "object",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "ClientConnectionOverrides",
+ "Kind": "OsinServerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.CloudControllerManagerStatus": {
- "description": "CloudControllerManagerStatus holds the state of Cloud Controller Manager (a.k.a. CCM or CPI) related settings",
+ "io.openshift.config.osin.v1.RequestHeaderIdentityProvider": {
+ "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
+ "required": [
+ "loginURL",
+ "challengeURL",
+ "clientCA",
+ "clientCommonNames",
+ "headers",
+ "preferredUsernameHeaders",
+ "nameHeaders",
+ "emailHeaders"
+ ],
"properties": {
- "state": {
- "description": "state determines whether or not an external Cloud Controller Manager is expected to be installed within the cluster. https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager\n\nValid values are \"External\", \"None\" and omitted. When set to \"External\", new nodes will be tainted as uninitialized when created, preventing them from running workloads until they are initialized by the cloud controller manager. When omitted or set to \"None\", new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "challengeURL": {
+ "description": "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}",
"type": "string",
"default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "CloudControllerManagerStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.CloudLoadBalancerConfig": {
- "description": "CloudLoadBalancerConfig contains an union discriminator indicating the type of DNS solution in use within the cluster. When the DNSType is `ClusterHosted`, the cloud's Load Balancer configuration needs to be provided so that the DNS solution hosted within the cluster can be configured with those values.",
- "type": "object",
- "properties": {
- "clusterHosted": {
- "description": "clusterHosted holds the IP addresses of API, API-Int and Ingress Load Balancers on Cloud Platforms. The DNS solution hosted within the cluster use these IP addresses to provide resolution for API, API-Int and Ingress services.",
- "$ref": "#/definitions/io.openshift.config.v1.CloudLoadBalancerIPs"
},
- "dnsType": {
- "description": "dnsType indicates the type of DNS solution in use within the cluster. Its default value of `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform. It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode, the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed. The cluster's use of the cloud's Load Balancers is unaffected by this setting. The value is immutable after it has been set at install time. Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS. Enabling this functionality allows the user to start their own DNS solution outside the cluster after installation is complete. The customer would be responsible for configuring this custom DNS solution, and it can be run in addition to the in-cluster DNS solution.",
+ "clientCA": {
+ "description": "clientCA is a file with the trusted signer certs. If empty, no request verification is done, and any direct request to the OAuth server can impersonate any identity from this provider, merely by setting a request header.",
"type": "string",
- "default": "PlatformDefault"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "CloudLoadBalancerConfig",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "dnsType",
- "fields-to-discriminateBy": {
- "clusterHosted": "ClusterHosted"
+ "default": ""
+ },
+ "clientCommonNames": {
+ "description": "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
}
- }
- ]
- },
- "io.openshift.config.v1.CloudLoadBalancerIPs": {
- "description": "CloudLoadBalancerIPs contains the Load Balancer IPs for the cloud's API, API-Int and Ingress Load balancers. They will be populated as soon as the respective Load Balancers have been configured. These values are utilized to configure the DNS solution hosted within the cluster.",
- "type": "object",
- "properties": {
- "apiIntLoadBalancerIPs": {
- "description": "apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the apiIntLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.",
+ },
+ "emailHeaders": {
+ "description": "emailHeaders is the set of headers to check for the email address",
"type": "array",
"items": {
"type": "string",
"default": ""
- },
- "x-kubernetes-list-type": "set"
+ }
},
- "apiLoadBalancerIPs": {
- "description": "apiLoadBalancerIPs holds Load Balancer IPs for the API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Could be empty for private clusters. Entries in the apiLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.",
+ "headers": {
+ "description": "headers is the set of headers to check for identity information",
"type": "array",
"items": {
"type": "string",
"default": ""
- },
- "x-kubernetes-list-type": "set"
+ }
},
- "ingressLoadBalancerIPs": {
- "description": "ingressLoadBalancerIPs holds IPs for Ingress Load Balancers. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the ingressLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "loginURL": {
+ "description": "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}",
+ "type": "string",
+ "default": ""
+ },
+ "nameHeaders": {
+ "description": "nameHeaders is the set of headers to check for the display name",
"type": "array",
"items": {
"type": "string",
"default": ""
- },
- "x-kubernetes-list-type": "set"
+ }
+ },
+ "preferredUsernameHeaders": {
+ "description": "preferredUsernameHeaders is the set of headers to check for the preferred username",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
+ "Type": "object",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "CloudLoadBalancerIPs",
+ "Kind": "RequestHeaderIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ClusterCondition": {
- "description": "ClusterCondition is a union of typed cluster conditions. The 'type' property determines which of the type-specific properties are relevant. When evaluated on a cluster, the condition may match, not match, or fail to evaluate.",
+ "io.openshift.config.osin.v1.SessionConfig": {
+ "description": "SessionConfig specifies options for cookie-based sessions. Used by AuthRequestHandlerSession",
"type": "object",
"required": [
- "type"
+ "sessionSecretsFile",
+ "sessionMaxAgeSeconds",
+ "sessionName"
],
"properties": {
- "promql": {
- "description": "promQL represents a cluster condition based on PromQL.",
- "$ref": "#/definitions/io.openshift.config.v1.PromQLClusterCondition"
+ "sessionMaxAgeSeconds": {
+ "description": "sessionMaxAgeSeconds specifies how long created sessions last. Used by AuthRequestHandlerSession",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "type": {
- "description": "type represents the cluster-condition type. This defines the members and semantics of any additional properties.",
+ "sessionName": {
+ "description": "sessionName is the cookie name used to store the session",
+ "type": "string",
+ "default": ""
+ },
+ "sessionSecretsFile": {
+ "description": "sessionSecretsFile is a reference to a file containing a serialized SessionSecrets object If no file is specified, a random signing and encryption key are generated at each server start",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "ClusterCondition",
+ "Kind": "SessionConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ClusterNetworkEntry": {
- "description": "ClusterNetworkEntry is a contiguous block of IP addresses from which pod IPs are allocated.",
+ "io.openshift.config.osin.v1.SessionSecret": {
+ "description": "SessionSecret is a secret used to authenticate/decrypt cookie-based sessions",
"type": "object",
"required": [
- "cidr"
+ "authentication",
+ "encryption"
],
"properties": {
- "cidr": {
- "description": "The complete block for pod IPs.",
+ "authentication": {
+ "description": "Authentication is used to authenticate sessions using HMAC. Recommended to use a secret with 32 or 64 bytes.",
"type": "string",
"default": ""
},
- "hostPrefix": {
- "description": "The size (prefix) of block to allocate to each node. If this field is not used by the plugin, it can be left unset.",
+ "encryption": {
+ "description": "Encryption is used to encrypt sessions. Must be 16, 24, or 32 characters long, to select AES-128, AES-",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "osin.config.openshift.io",
+ "Version": "v1",
+ "Kind": "SessionSecret",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.osin.v1.SessionSecrets": {
+ "description": "SessionSecrets list the secrets to use to sign/encrypt and authenticate/decrypt created sessions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "secrets"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "secrets": {
+ "description": "Secrets is a list of secrets New sessions are signed and encrypted using the first secret. Existing sessions are decrypted/authenticated by each secret until one succeeds. This allows rotating secrets.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.osin.v1.SessionSecret"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "osin.config.openshift.io",
+ "Version": "v1",
+ "Kind": "SessionSecrets",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.osin.v1.TokenConfig": {
+ "description": "TokenConfig holds the necessary configuration options for authorization and access tokens",
+ "type": "object",
+ "properties": {
+ "accessTokenInactivityTimeout": {
+ "description": "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "accessTokenInactivityTimeoutSeconds": {
+ "description": "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.",
"type": "integer",
- "format": "int64"
+ "format": "int32"
+ },
+ "accessTokenMaxAgeSeconds": {
+ "description": "accessTokenMaxAgeSeconds defines the maximum age of access tokens",
+ "type": "integer",
+ "format": "int32"
+ },
+ "authorizeTokenMaxAgeSeconds": {
+ "description": "authorizeTokenMaxAgeSeconds defines the maximum age of authorize tokens",
+ "type": "integer",
+ "format": "int32"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
+ "Group": "osin.config.openshift.io",
"Version": "v1",
- "Kind": "ClusterNetworkEntry",
+ "Kind": "TokenConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ClusterOperator": {
- "description": "ClusterOperator is the Custom Resource object which holds the current state of an operator. This object is used by operators to convey their state to the rest of the cluster.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfig": {
+ "description": "ServiceCertSignerOperatorConfig provides information to configure an operator to manage the service cert signing controllers\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
"metadata",
- "spec"
+ "spec",
+ "status"
],
"properties": {
"apiVersion": {
@@ -71332,29 +72354,26 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec holds configuration that could apply to any operator.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorSpec"
+ "$ref": "#/definitions/io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigSpec"
},
"status": {
- "description": "status holds the information about the state of an operator. It is consistent with status information across the Kubernetes ecosystem.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatus"
+ "$ref": "#/definitions/io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "ClusterOperator",
+ "Group": "servicecertsigner.config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ServiceCertSignerOperatorConfig",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1.ClusterOperatorList": {
- "description": "ClusterOperatorList is a list of OperatorStatus resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigList": {
+ "description": "ServiceCertSignerOperatorConfigList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "metadata",
"items"
],
"properties": {
@@ -71363,10 +72382,11 @@
"type": "string"
},
"items": {
+ "description": "Items contains the items",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClusterOperator"
+ "$ref": "#/definitions/io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfig"
}
},
"kind": {
@@ -71381,108 +72401,112 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "ClusterOperatorList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.ClusterOperatorSpec": {
- "description": "ClusterOperatorSpec is empty for now, but you could imagine holding information like \"pause\".",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "ClusterOperatorSpec",
+ "Group": "servicecertsigner.config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ServiceCertSignerOperatorConfigList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ClusterOperatorStatus": {
- "description": "ClusterOperatorStatus provides information about the status of the operator.",
+ "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigSpec": {
"type": "object",
+ "required": [
+ "managementState"
+ ],
"properties": {
- "conditions": {
- "description": "conditions describes the state of the operator's managed and monitored components.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatusCondition"
- },
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
+ "logLevel": {
+ "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": "string"
},
- "extension": {
- "description": "extension contains any additional status information specific to the operator which owns this status object.",
+ "managementState": {
+ "description": "managementState indicates whether and how the operator should manage the component",
+ "type": "string",
+ "default": ""
+ },
+ "observedConfig": {
+ "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
},
- "relatedObjects": {
- "description": "relatedObjects is a list of objects that are \"interesting\" or related to this operator. Common uses are: 1. the detailed resource driving the operator 2. operator namespaces 3. operand namespaces",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ObjectReference"
- }
+ "operatorLogLevel": {
+ "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": "string"
},
- "versions": {
- "description": "versions is a slice of operator and operand version tuples. Operators which manage multiple operands will have multiple operand entries in the array. Available operators must report the version of the operator itself with the name \"operator\". An operator reports a new \"operator\" version when it has rolled out the new version to all of its operands.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.OperandVersion"
- }
+ "unsupportedConfigOverrides": {
+ "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "ClusterOperatorStatus",
+ "Group": "servicecertsigner.config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ServiceCertSignerOperatorConfigSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ClusterOperatorStatusCondition": {
- "description": "ClusterOperatorStatusCondition represents the state of the operator's managed and monitored components.",
+ "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigStatus": {
"type": "object",
"required": [
- "type",
- "status",
- "lastTransitionTime"
+ "readyReplicas"
],
"properties": {
- "lastTransitionTime": {
- "description": "lastTransitionTime is the time of the last update to the current status property.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "conditions": {
+ "description": "conditions is a list of conditions and their status",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "message": {
- "description": "message provides additional information about the current condition. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.",
- "type": "string"
+ "generations": {
+ "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "group",
+ "resource",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "reason": {
- "description": "reason is the CamelCase reason for the condition's current status.",
- "type": "string"
+ "latestAvailableRevision": {
+ "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "type": "integer",
+ "format": "int32"
},
- "status": {
- "description": "status of the condition, one of True, False, Unknown.",
- "type": "string",
- "default": ""
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
+ "type": "integer",
+ "format": "int64"
},
- "type": {
- "description": "type specifies the aspect reported by this condition.",
- "type": "string",
- "default": ""
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "ClusterOperatorStatusCondition",
+ "Group": "servicecertsigner.config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ServiceCertSignerOperatorConfigStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ClusterVersion": {
- "description": "ClusterVersion is the configuration for the ClusterVersionOperator. This is where parameters related to automatic updates can be set.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.APIServer": {
+ "description": "APIServer holds configuration (like serving certificates, client CA and CORS domains) shared by all API servers in the system, among them especially kube-apiserver and openshift-apiserver. The canonical name of an instance is 'cluster'.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"spec"
@@ -71502,39 +72526,29 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec is the desired state of the cluster version - the operator will work to ensure that the desired version is applied to the cluster.",
+ "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.APIServerSpec"
},
"status": {
- "description": "status contains information about the available updates and any in-progress updates.",
+ "description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.APIServerStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ClusterVersion",
+ "Kind": "APIServer",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1.ClusterVersionCapabilitiesSpec": {
- "description": "ClusterVersionCapabilitiesSpec selects the managed set of optional, core cluster components.",
+ "io.openshift.config.v1.APIServerEncryption": {
"type": "object",
"properties": {
- "additionalEnabledCapabilities": {
- "description": "additionalEnabledCapabilities extends the set of managed capabilities beyond the baseline defined in baselineCapabilitySet. The default is an empty set.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "baselineCapabilitySet": {
- "description": "baselineCapabilitySet selects an initial set of optional capabilities to enable, which can be extended via additionalEnabledCapabilities. If unset, the cluster will choose a default, and the default may change over time. The current default is vCurrent.",
+ "type": {
+ "description": "type defines what encryption type should be used to encrypt resources at the datastore layer. When this field is unset (i.e. when it is set to the empty string), identity is implied. The behavior of unset can and will change over time. Even if encryption is enabled by default, the meaning of unset may change to a different encryption type based on changes in best practices.\n\nWhen encryption is enabled, all sensitive resources shipped with the platform are encrypted. This list of sensitive resources can and will change over time. The current authoritative list is:\n\n 1. secrets\n 2. configmaps\n 3. routes.route.openshift.io\n 4. oauthaccesstokens.oauth.openshift.io\n 5. oauthauthorizetokens.oauth.openshift.io",
"type": "string"
}
},
@@ -71542,58 +72556,27 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ClusterVersionCapabilitiesSpec",
+ "Kind": "APIServerEncryption",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ClusterVersionCapabilitiesStatus": {
- "description": "ClusterVersionCapabilitiesStatus describes the state of optional, core cluster components.",
+ "io.openshift.config.v1.APIServerList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
"properties": {
- "enabledCapabilities": {
- "description": "enabledCapabilities lists all the capabilities that are currently managed.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "knownCapabilities": {
- "description": "knownCapabilities lists all the capabilities known to the current cluster.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "ClusterVersionCapabilitiesStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.ClusterVersionList": {
- "description": "ClusterVersionList is a list of ClusterVersion resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "required": [
- "metadata",
- "items"
- ],
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClusterVersion"
+ "$ref": "#/definitions/io.openshift.config.v1.APIServer"
}
},
"kind": {
@@ -71610,390 +72593,393 @@
"Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ClusterVersionList",
+ "Kind": "APIServerList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ClusterVersionSpec": {
- "description": "ClusterVersionSpec is the desired version state of the cluster. It includes the version the cluster should be at, how the cluster is identified, and where the cluster should look for version updates.",
+ "io.openshift.config.v1.APIServerNamedServingCert": {
+ "description": "APIServerNamedServingCert maps a server DNS name, as understood by a client, to a certificate.",
"type": "object",
"required": [
- "clusterID"
+ "servingCertificate"
],
"properties": {
- "capabilities": {
- "description": "capabilities configures the installation of optional, core cluster components. A null value here is identical to an empty object; see the child properties for default semantics.",
- "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionCapabilitiesSpec"
- },
- "channel": {
- "description": "channel is an identifier for explicitly requesting that a non-default set of updates be applied to this cluster. The default channel will be contain stable updates that are appropriate for production clusters.",
- "type": "string"
- },
- "clusterID": {
- "description": "clusterID uniquely identifies this cluster. This is expected to be an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx in hexadecimal values). This is a required field.",
- "type": "string",
- "default": ""
- },
- "desiredUpdate": {
- "description": "desiredUpdate is an optional field that indicates the desired value of the cluster version. Setting this value will trigger an upgrade (if the current version does not match the desired version). The set of recommended update values is listed as part of available updates in status, and setting values outside that range may cause the upgrade to fail.\n\nSome of the fields are inter-related with restrictions and meanings described here. 1. image is specified, version is specified, architecture is specified. API validation error. 2. image is specified, version is specified, architecture is not specified. You should not do this. version is silently ignored and image is used. 3. image is specified, version is not specified, architecture is specified. API validation error. 4. image is specified, version is not specified, architecture is not specified. image is used. 5. image is not specified, version is specified, architecture is specified. version and desired architecture are used to select an image. 6. image is not specified, version is specified, architecture is not specified. version and current architecture are used to select an image. 7. image is not specified, version is not specified, architecture is specified. API validation error. 8. image is not specified, version is not specified, architecture is not specified. API validation error.\n\nIf an upgrade fails the operator will halt and report status about the failing component. Setting the desired update value back to the previous version will cause a rollback to be attempted. Not all rollbacks will succeed.",
- "$ref": "#/definitions/io.openshift.config.v1.Update"
- },
- "overrides": {
- "description": "overrides is list of overides for components that are managed by cluster version operator. Marking a component unmanaged will prevent the operator from creating or updating the object.",
+ "names": {
+ "description": "names is a optional list of explicit DNS names (leading wildcards allowed) that should use this certificate to serve secure traffic. If no names are provided, the implicit names will be extracted from the certificates. Exact names trump over wildcard names. Explicit names defined here trump over extracted implicit names.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ComponentOverride"
- },
- "x-kubernetes-list-map-keys": [
- "kind",
- "group",
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "type": "string",
+ "default": ""
+ }
},
- "signatureStores": {
- "description": "signatureStores contains the upstream URIs to verify release signatures and optional reference to a config map by name containing the PEM-encoded CA bundle.\n\nBy default, CVO will use existing signature stores if this property is empty. The CVO will check the release signatures in the local ConfigMaps first. It will search for a valid signature in these stores in parallel only when local ConfigMaps did not include a valid signature. Validation will fail if none of the signature stores reply with valid signature before timeout. Setting signatureStores will replace the default signature stores with custom signature stores. Default stores can be used with custom signature stores by adding them manually.\n\nA maximum of 32 signature stores may be configured.",
+ "servingCertificate": {
+ "description": "servingCertificate references a kubernetes.io/tls type secret containing the TLS cert info for serving secure traffic. The secret must exist in the openshift-config namespace and contain the following required fields: - Secret.Data[\"tls.key\"] - TLS private key. - Secret.Data[\"tls.crt\"] - TLS certificate.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "APIServerNamedServingCert",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.APIServerServingCerts": {
+ "type": "object",
+ "properties": {
+ "namedCertificates": {
+ "description": "namedCertificates references secrets containing the TLS cert info for serving secure traffic to specific hostnames. If no named certificates are provided, or no named certificates match the server name as understood by a client, the defaultServingCertificate will be used.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SignatureStore"
- },
- "x-kubernetes-list-map-keys": [
- "url"
- ],
- "x-kubernetes-list-type": "map"
- },
- "upstream": {
- "description": "upstream may be used to specify the preferred update server. By default it will use the appropriate update server for the cluster and region.",
- "type": "string"
+ "$ref": "#/definitions/io.openshift.config.v1.APIServerNamedServingCert"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ClusterVersionSpec",
+ "Kind": "APIServerServingCerts",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ClusterVersionStatus": {
- "description": "ClusterVersionStatus reports the status of the cluster versioning, including any upgrades that are in progress. The current field will be set to whichever version the cluster is reconciling to, and the conditions array will report whether the update succeeded, is in progress, or is failing.",
+ "io.openshift.config.v1.APIServerSpec": {
"type": "object",
- "required": [
- "desired",
- "observedGeneration",
- "versionHash",
- "capabilities",
- "availableUpdates"
- ],
"properties": {
- "availableUpdates": {
- "description": "availableUpdates contains updates recommended for this cluster. Updates which appear in conditionalUpdates but not in availableUpdates may expose this cluster to known issues. This list may be empty if no updates are recommended, if the update service is unavailable, or if an invalid channel has been specified.",
+ "additionalCORSAllowedOrigins": {
+ "description": "additionalCORSAllowedOrigins lists additional, user-defined regular expressions describing hosts for which the API server allows access using the CORS headers. This may be needed to access the API and the integrated OAuth server from JavaScript applications. The values are regular expressions that correspond to the Golang regular expression language.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Release"
- },
- "x-kubernetes-list-type": "atomic"
+ "type": "string",
+ "default": ""
+ }
},
- "capabilities": {
- "description": "capabilities describes the state of optional, core cluster components.",
+ "audit": {
+ "description": "audit specifies the settings for audit configuration to be applied to all OpenShift-provided API servers in the cluster.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionCapabilitiesStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.Audit"
},
- "conditionalUpdates": {
- "description": "conditionalUpdates contains the list of updates that may be recommended for this cluster if it meets specific required conditions. Consumers interested in the set of updates that are actually recommended for this cluster should use availableUpdates. This list may be empty if no updates are recommended, if the update service is unavailable, or if an empty or invalid channel has been specified.",
+ "clientCA": {
+ "description": "clientCA references a ConfigMap containing a certificate bundle for the signers that will be recognized for incoming client certificates in addition to the operator managed signers. If this is empty, then only operator managed signers are valid. You usually only have to set this if you have your own PKI you wish to honor client certificates from. The ConfigMap must exist in the openshift-config namespace and contain the following required fields: - ConfigMap.Data[\"ca-bundle.crt\"] - CA bundle.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ },
+ "encryption": {
+ "description": "encryption allows the configuration of encryption of resources at the datastore layer.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.APIServerEncryption"
+ },
+ "servingCerts": {
+ "description": "servingCert is the TLS cert info for serving secure traffic. If not specified, operator managed certificates will be used for serving secure traffic.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.APIServerServingCerts"
+ },
+ "tlsSecurityProfile": {
+ "description": "tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.\n\nIf unset, a default (which may change between releases) is chosen. Note that only Old, Intermediate and Custom profiles are currently supported, and the maximum available minTLSVersion is VersionTLS12.",
+ "$ref": "#/definitions/io.openshift.config.v1.TLSSecurityProfile"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "APIServerSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.APIServerStatus": {
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "APIServerStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.AWSDNSSpec": {
+ "description": "AWSDNSSpec contains DNS configuration specific to the Amazon Web Services cloud provider.",
+ "type": "object",
+ "properties": {
+ "privateZoneIAMRole": {
+ "description": "privateZoneIAMRole contains the ARN of an IAM role that should be assumed when performing operations on the cluster's private hosted zone specified in the cluster DNS config. When left empty, no role should be assumed.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "AWSDNSSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.AWSIngressSpec": {
+ "description": "AWSIngressSpec holds the desired state of the Ingress for Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "type": "object",
+ "properties": {
+ "type": {
+ "description": "type allows user to set a load balancer type. When this field is set the default ingresscontroller will get created using the specified LBType. If this field is not set then the default ingress controller of LBType Classic will be created. Valid values are:\n\n* \"Classic\": A Classic Load Balancer that makes routing decisions at either\n the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See\n the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb\n\n* \"NLB\": A Network Load Balancer that makes routing decisions at the\n transport layer (TCP/SSL). See the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "AWSIngressSpec",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {}
+ }
+ ]
+ },
+ "io.openshift.config.v1.AWSPlatformSpec": {
+ "description": "AWSPlatformSpec holds the desired state of the Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "type": "object",
+ "properties": {
+ "serviceEndpoints": {
+ "description": "serviceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConditionalUpdate"
+ "$ref": "#/definitions/io.openshift.config.v1.AWSServiceEndpoint"
},
"x-kubernetes-list-type": "atomic"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "AWSPlatformSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.AWSPlatformStatus": {
+ "description": "AWSPlatformStatus holds the current status of the Amazon Web Services infrastructure provider.",
+ "type": "object",
+ "required": [
+ "region"
+ ],
+ "properties": {
+ "region": {
+ "description": "region holds the default AWS region for new AWS resources created by the cluster.",
+ "type": "string",
+ "default": ""
},
- "conditions": {
- "description": "conditions provides information about the cluster version. The condition \"Available\" is set to true if the desiredUpdate has been reached. The condition \"Progressing\" is set to true if an update is being applied. The condition \"Degraded\" is set to true if an update is currently blocked by a temporary or permanent error. Conditions are only valid for the current desiredUpdate when metadata.generation is equal to status.generation.",
+ "resourceTags": {
+ "description": "resourceTags is a list of additional tags to apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources. AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags available for the user.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatusCondition"
+ "$ref": "#/definitions/io.openshift.config.v1.AWSResourceTag"
},
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "desired": {
- "description": "desired is the version that the cluster is reconciling towards. If the cluster is not yet fully initialized desired will be set with the information available, which may be an image or a tag.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Release"
+ "x-kubernetes-list-type": "atomic"
},
- "history": {
- "description": "history contains a list of the most recent versions applied to the cluster. This value may be empty during cluster startup, and then will be updated when a new update is being applied. The newest update is first in the list and it is ordered by recency. Updates in the history have state Completed if the rollout completed - if an update was failing or halfway applied the state will be Partial. Only a limited amount of update history is preserved.",
+ "serviceEndpoints": {
+ "description": "ServiceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.UpdateHistory"
+ "$ref": "#/definitions/io.openshift.config.v1.AWSServiceEndpoint"
},
"x-kubernetes-list-type": "atomic"
- },
- "observedGeneration": {
- "description": "observedGeneration reports which version of the spec is being synced. If this value is not equal to metadata.generation, then the desired and conditions fields may represent a previous version.",
- "type": "integer",
- "format": "int64",
- "default": 0
- },
- "versionHash": {
- "description": "versionHash is a fingerprint of the content that the cluster will be updated with. It is used by the operator to avoid unnecessary work and is for internal use only.",
- "type": "string",
- "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ClusterVersionStatus",
+ "Kind": "AWSPlatformStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ComponentOverride": {
- "description": "ComponentOverride allows overriding cluster version operator's behavior for a component.",
+ "io.openshift.config.v1.AWSResourceTag": {
+ "description": "AWSResourceTag is a tag to apply to AWS resources created for the cluster.",
"type": "object",
"required": [
- "kind",
- "group",
- "namespace",
- "name",
- "unmanaged"
+ "key",
+ "value"
],
"properties": {
- "group": {
- "description": "group identifies the API group that the kind is in.",
- "type": "string",
- "default": ""
- },
- "kind": {
- "description": "kind indentifies which object to override.",
- "type": "string",
- "default": ""
- },
- "name": {
- "description": "name is the component's name.",
+ "key": {
+ "description": "key is the key of the tag",
"type": "string",
"default": ""
},
- "namespace": {
- "description": "namespace is the component's namespace. If the resource is cluster scoped, the namespace should be empty.",
+ "value": {
+ "description": "value is the value of the tag. Some AWS service do not support empty values. Since tags are added to resources in many services, the length of the tag value must meet the requirements of all services.",
"type": "string",
"default": ""
- },
- "unmanaged": {
- "description": "unmanaged controls if cluster version operator should stop managing the resources in this cluster. Default: false",
- "type": "boolean",
- "default": false
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ComponentOverride",
+ "Kind": "AWSResourceTag",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ComponentRouteSpec": {
- "description": "ComponentRouteSpec allows for configuration of a route's hostname and serving certificate.",
+ "io.openshift.config.v1.AWSServiceEndpoint": {
+ "description": "AWSServiceEndpoint store the configuration of a custom url to override existing defaults of AWS Services.",
"type": "object",
"required": [
- "namespace",
"name",
- "hostname"
+ "url"
],
"properties": {
- "hostname": {
- "description": "hostname is the hostname that should be used by the route.",
- "type": "string",
- "default": ""
- },
"name": {
- "description": "name is the logical name of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.",
+ "description": "name is the name of the AWS service. The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html This must be provided and cannot be empty.",
"type": "string",
"default": ""
},
- "namespace": {
- "description": "namespace is the namespace of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.",
+ "url": {
+ "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.",
"type": "string",
"default": ""
- },
- "servingCertKeyPairSecret": {
- "description": "servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. If the custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ComponentRouteSpec",
+ "Kind": "AWSServiceEndpoint",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ComponentRouteStatus": {
- "description": "ComponentRouteStatus contains information allowing configuration of a route's hostname and serving certificate.",
+ "io.openshift.config.v1.AdmissionConfig": {
"type": "object",
- "required": [
- "namespace",
- "name",
- "defaultHostname",
- "relatedObjects"
- ],
"properties": {
- "conditions": {
- "description": "conditions are used to communicate the state of the componentRoutes entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf available is true, the content served by the route can be accessed by users. This includes cases where a default may continue to serve content while the customized route specified by the cluster-admin is being configured.\n\nIf Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. The currentHostnames field may or may not be in effect.\n\nIf Progressing is true, that means the component is taking some action related to the componentRoutes entry.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
- },
- "consumingUsers": {
- "description": "consumingUsers is a slice of ServiceAccounts that need to have read permission on the servingCertKeyPairSecret secret.",
+ "disabledPlugins": {
+ "description": "disabledPlugins is a list of admission plugins that must be off. Putting something in this list is almost always a mistake and likely to result in cluster instability.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "currentHostnames": {
- "description": "currentHostnames is the list of current names used by the route. Typically, this list should consist of a single hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list.",
+ "enabledPlugins": {
+ "description": "enabledPlugins is a list of admission plugins that must be on in addition to the default list. Some admission plugins are disabled by default, but certain configurations require them. This is fairly uncommon and can result in performance penalties and unexpected behavior.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "defaultHostname": {
- "description": "defaultHostname is the hostname of this route prior to customization.",
- "type": "string",
- "default": ""
- },
- "name": {
- "description": "name is the logical name of the route to customize. It does not have to be the actual name of a route resource but it cannot be renamed.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.",
- "type": "string",
- "default": ""
+ "pluginConfig": {
+ "type": "object",
+ "additionalProperties": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.AdmissionPluginConfig"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "AdmissionConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.AdmissionPluginConfig": {
+ "description": "AdmissionPluginConfig holds the necessary configuration options for admission plugins",
+ "type": "object",
+ "required": [
+ "location",
+ "configuration"
+ ],
+ "properties": {
+ "configuration": {
+ "description": "Configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
},
- "namespace": {
- "description": "namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace ensures that no two components will conflict and the same component can be installed multiple times.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.",
+ "location": {
+ "description": "Location is the path to a configuration file that contains the plugin's configuration",
"type": "string",
"default": ""
- },
- "relatedObjects": {
- "description": "relatedObjects is a list of resources which are useful when debugging or inspecting how spec.componentRoutes is applied.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ObjectReference"
- }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ComponentRouteStatus",
+ "Kind": "AdmissionPluginConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ConditionalUpdate": {
- "description": "ConditionalUpdate represents an update which is recommended to some clusters on the version the current cluster is reconciling, but which may not be recommended for the current cluster.",
+ "io.openshift.config.v1.AlibabaCloudPlatformSpec": {
+ "description": "AlibabaCloudPlatformSpec holds the desired state of the Alibaba Cloud infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "AlibabaCloudPlatformSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.AlibabaCloudPlatformStatus": {
+ "description": "AlibabaCloudPlatformStatus holds the current status of the Alibaba Cloud infrastructure provider.",
"type": "object",
"required": [
- "release",
- "risks"
+ "region"
],
"properties": {
- "conditions": {
- "description": "conditions represents the observations of the conditional update's current status. Known types are: * Recommended, for whether the update is recommended for the current cluster.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
+ "region": {
+ "description": "region specifies the region for Alibaba Cloud resources created for the cluster.",
+ "type": "string",
+ "default": ""
},
- "release": {
- "description": "release is the target of the update.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Release"
+ "resourceGroupID": {
+ "description": "resourceGroupID is the ID of the resource group for the cluster.",
+ "type": "string"
},
- "risks": {
- "description": "risks represents the range of issues associated with updating to the target release. The cluster-version operator will evaluate all entries, and only recommend the update if there is at least one entry and all entries recommend the update.",
+ "resourceTags": {
+ "description": "resourceTags is a list of additional tags to apply to Alibaba Cloud resources created for the cluster.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConditionalUpdateRisk"
+ "$ref": "#/definitions/io.openshift.config.v1.AlibabaCloudResourceTag"
},
"x-kubernetes-list-map-keys": [
- "name"
+ "key"
],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "name",
- "x-kubernetes-patch-strategy": "merge"
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConditionalUpdate",
+ "Kind": "AlibabaCloudPlatformStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ConditionalUpdateRisk": {
- "description": "ConditionalUpdateRisk represents a reason and cluster-state for not recommending a conditional update.",
+ "io.openshift.config.v1.AlibabaCloudResourceTag": {
+ "description": "AlibabaCloudResourceTag is the set of tags to add to apply to resources.",
"type": "object",
"required": [
- "url",
- "name",
- "message",
- "matchingRules"
+ "key",
+ "value"
],
"properties": {
- "matchingRules": {
- "description": "matchingRules is a slice of conditions for deciding which clusters match the risk and which do not. The slice is ordered by decreasing precedence. The cluster-version operator will walk the slice in order, and stop after the first it can successfully evaluate. If no condition can be successfully evaluated, the update will not be recommended.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClusterCondition"
- },
- "x-kubernetes-list-type": "atomic"
- },
- "message": {
- "description": "message provides additional information about the risk of updating, in the event that matchingRules match the cluster state. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.",
- "type": "string",
- "default": ""
- },
- "name": {
- "description": "name is the CamelCase reason for not recommending a conditional update, in the event that matchingRules match the cluster state.",
+ "key": {
+ "description": "key is the key of the tag.",
"type": "string",
"default": ""
},
- "url": {
- "description": "url contains information about this risk.",
+ "value": {
+ "description": "value is the value of the tag.",
"type": "string",
"default": ""
}
@@ -72002,22 +72988,103 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConditionalUpdateRisk",
+ "Kind": "AlibabaCloudResourceTag",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ConfigMapFileReference": {
- "description": "ConfigMapFileReference references a config map in a specific namespace. The namespace must be specified at the point of use.",
+ "io.openshift.config.v1.Audit": {
"type": "object",
- "required": [
- "name"
- ],
"properties": {
- "key": {
- "description": "Key allows pointing to a specific key/value inside of the configmap. This is useful for logical file references.",
+ "customRules": {
+ "description": "customRules specify profiles per group. These profile take precedence over the top-level profile field if they apply. They are evaluation from top to bottom and the first one that matches, applies.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.AuditCustomRule"
+ },
+ "x-kubernetes-list-map-keys": [
+ "group"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "profile": {
+ "description": "profile specifies the name of the desired top-level audit profile to be applied to all requests sent to any of the OpenShift-provided API servers in the cluster (kube-apiserver, openshift-apiserver and oauth-apiserver), with the exception of those requests that match one or more of the customRules.\n\nThe following profiles are provided: - Default: default policy which means MetaData level logging with the exception of events\n (not logged at all), oauthaccesstokens and oauthauthorizetokens (both logged at RequestBody\n level).\n- WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nWarning: It is not recommended to disable audit logging by using the `None` profile unless you are fully aware of the risks of not logging data that can be beneficial when troubleshooting issues. If you disable audit logging and a support situation arises, you might need to enable audit logging and reproduce the issue in order to troubleshoot properly.\n\nIf unset, the 'Default' profile is used as the default.",
"type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "Audit",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.AuditConfig": {
+ "description": "AuditConfig holds configuration for the audit capabilities",
+ "type": "object",
+ "required": [
+ "enabled",
+ "auditFilePath",
+ "maximumFileRetentionDays",
+ "maximumRetainedFiles",
+ "maximumFileSizeMegabytes",
+ "policyFile",
+ "policyConfiguration",
+ "logFormat",
+ "webHookKubeConfig",
+ "webHookMode"
+ ],
+ "properties": {
+ "auditFilePath": {
+ "description": "All requests coming to the apiserver will be logged to this file.",
+ "type": "string",
+ "default": ""
},
- "name": {
+ "enabled": {
+ "description": "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.",
+ "type": "boolean",
+ "default": false
+ },
+ "logFormat": {
+ "description": "Format of saved audits (legacy or json).",
+ "type": "string",
+ "default": ""
+ },
+ "maximumFileRetentionDays": {
+ "description": "Maximum number of days to retain old log files based on the timestamp encoded in their filename.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "maximumFileSizeMegabytes": {
+ "description": "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "maximumRetainedFiles": {
+ "description": "Maximum number of old log files to retain.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "policyConfiguration": {
+ "description": "PolicyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "policyFile": {
+ "description": "PolicyFile is a path to the file that defines the audit policy configuration.",
+ "type": "string",
+ "default": ""
+ },
+ "webHookKubeConfig": {
+ "description": "Path to a .kubeconfig formatted file that defines the audit webhook configuration.",
+ "type": "string",
+ "default": ""
+ },
+ "webHookMode": {
+ "description": "Strategy for sending audit events (block or batch).",
"type": "string",
"default": ""
}
@@ -72026,33 +73093,38 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConfigMapFileReference",
+ "Kind": "AuditConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ConfigMapNameReference": {
- "description": "ConfigMapNameReference references a config map in a specific namespace. The namespace must be specified at the point of use.",
+ "io.openshift.config.v1.AuditCustomRule": {
+ "description": "AuditCustomRule describes a custom rule for an audit profile that takes precedence over the top-level profile.",
"type": "object",
"required": [
- "name"
+ "group",
+ "profile"
],
"properties": {
- "name": {
- "description": "name is the metadata.name of the referenced config map",
+ "group": {
+ "description": "group is a name of group a request user must be member of in order to this profile to apply.",
"type": "string",
"default": ""
+ },
+ "profile": {
+ "description": "profile specifies the name of the desired audit policy configuration to be deployed to all OpenShift-provided API servers in the cluster.\n\nThe following profiles are provided: - Default: the existing default policy. - WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nIf unset, the 'Default' profile is used as the default.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConfigMapNameReference",
+ "Kind": "AuditCustomRule",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.Console": {
- "description": "Console holds cluster-wide configuration for the web console, including the logout URL, and reports the public URL of the console. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.Authentication": {
+ "description": "Authentication specifies cluster-wide settings for authentication (like OAuth and webhook token authenticators). The canonical name of an instance is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"spec"
@@ -72074,40 +73146,23 @@
"spec": {
"description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConsoleSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.AuthenticationSpec"
},
"status": {
"description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConsoleStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.AuthenticationStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "Console",
+ "Kind": "Authentication",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1.ConsoleAuthentication": {
- "description": "ConsoleAuthentication defines a list of optional configuration for console authentication.",
- "type": "object",
- "properties": {
- "logoutRedirect": {
- "description": "An optional, absolute URL to redirect web browsers to after logging out of the console. If not specified, it will redirect to the default login page. This is required when using an identity provider that supports single sign-on (SSO) such as: - OpenID (Keycloak, Azure) - RequestHeader (GSSAPI, SSPI, SAML) - OAuth (GitHub, GitLab, Google) Logging out of the console will destroy the user's token. The logoutRedirect provides the user the option to perform single logout (SLO) through the identity provider to destroy their single sign-on session.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleAuthentication",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.ConsoleList": {
+ "io.openshift.config.v1.AuthenticationList": {
"description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
@@ -72123,7 +73178,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Console"
+ "$ref": "#/definitions/io.openshift.config.v1.Authentication"
}
},
"kind": {
@@ -72140,86 +73195,254 @@
"Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleList",
+ "Kind": "AuthenticationList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ConsoleSpec": {
- "description": "ConsoleSpec is the specification of the desired behavior of the Console.",
+ "io.openshift.config.v1.AuthenticationSpec": {
"type": "object",
"properties": {
- "authentication": {
+ "oauthMetadata": {
+ "description": "oauthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for an external OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 If oauthMetadata.name is non-empty, this value has precedence over any metadata reference stored in status. The key \"oauthMetadata\" is used to locate the data. If specified and the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConsoleAuthentication"
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ },
+ "oidcProviders": {
+ "description": "OIDCProviders are OIDC identity providers that can issue tokens for this cluster Can only be set if \"Type\" is set to \"OIDC\".\n\nAt most one provider can be configured.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.OIDCProvider"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "serviceAccountIssuer": {
+ "description": "serviceAccountIssuer is the identifier of the bound service account token issuer. The default is https://kubernetes.default.svc WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the previous issuer value. Instead, the tokens issued by previous service account issuer will continue to be trusted for a time period chosen by the platform (currently set to 24h). This time period is subject to change over time. This allows internal components to transition to use new service account issuer without service distruption.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "type identifies the cluster managed, user facing authentication mode in use. Specifically, it manages the component that responds to login attempts. The default is IntegratedOAuth.",
+ "type": "string",
+ "default": ""
+ },
+ "webhookTokenAuthenticator": {
+ "description": "webhookTokenAuthenticator configures a remote token reviewer. These remote authentication webhooks can be used to verify bearer tokens via the tokenreviews.authentication.k8s.io REST API. This is required to honor bearer tokens that are provisioned by an external authentication service.\n\nCan only be set if \"Type\" is set to \"None\".",
+ "$ref": "#/definitions/io.openshift.config.v1.WebhookTokenAuthenticator"
+ },
+ "webhookTokenAuthenticators": {
+ "description": "webhookTokenAuthenticators is DEPRECATED, setting it has no effect.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.DeprecatedWebhookTokenAuthenticator"
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleSpec",
+ "Kind": "AuthenticationSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ConsoleStatus": {
- "description": "ConsoleStatus defines the observed status of the Console.",
+ "io.openshift.config.v1.AuthenticationStatus": {
"type": "object",
"required": [
- "consoleURL"
+ "integratedOAuthMetadata",
+ "oidcClients"
],
"properties": {
- "consoleURL": {
- "description": "The URL for the console. This will be derived from the host for the route that is created for the console.",
+ "integratedOAuthMetadata": {
+ "description": "integratedOAuthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for the in-cluster integrated OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This contains the observed value based on cluster state. An explicitly set value in spec.oauthMetadata has precedence over this field. This field has no meaning if authentication spec.type is not set to IntegratedOAuth. The key \"oauthMetadata\" is used to locate the data. If the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config-managed.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ },
+ "oidcClients": {
+ "description": "OIDCClients is where participating operators place the current OIDC client status for OIDC clients that can be customized by the cluster-admin.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.OIDCClientStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "componentNamespace",
+ "componentName"
+ ],
+ "x-kubernetes-list-type": "map"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "AuthenticationStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.AzurePlatformSpec": {
+ "description": "AzurePlatformSpec holds the desired state of the Azure infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "AzurePlatformSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.AzurePlatformStatus": {
+ "description": "AzurePlatformStatus holds the current status of the Azure infrastructure provider.",
+ "type": "object",
+ "required": [
+ "resourceGroupName"
+ ],
+ "properties": {
+ "armEndpoint": {
+ "description": "armEndpoint specifies a URL to use for resource management in non-soverign clouds such as Azure Stack.",
+ "type": "string"
+ },
+ "cloudName": {
+ "description": "cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to `AzurePublicCloud`.",
+ "type": "string"
+ },
+ "networkResourceGroupName": {
+ "description": "networkResourceGroupName is the Resource Group for network resources like the Virtual Network and Subnets used by the cluster. If empty, the value is same as ResourceGroupName.",
+ "type": "string"
+ },
+ "resourceGroupName": {
+ "description": "resourceGroupName is the Resource Group for new Azure resources created for the cluster.",
"type": "string",
"default": ""
+ },
+ "resourceTags": {
+ "description": "resourceTags is a list of additional tags to apply to Azure resources created for the cluster. See https://docs.microsoft.com/en-us/rest/api/resources/tags for information on tagging Azure resources. Due to limitations on Automation, Content Delivery Network, DNS Azure resources, a maximum of 15 tags may be applied. OpenShift reserves 5 tags for internal use, allowing 10 tags for user configuration.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.AzureResourceTag"
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleStatus",
+ "Kind": "AzurePlatformStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.CustomFeatureGates": {
+ "io.openshift.config.v1.AzureResourceTag": {
+ "description": "AzureResourceTag is a tag to apply to Azure resources created for the cluster.",
"type": "object",
+ "required": [
+ "key",
+ "value"
+ ],
"properties": {
- "disabled": {
- "description": "disabled is a list of all feature gates that you want to force off",
+ "key": {
+ "description": "key is the key part of the tag. A tag key can have a maximum of 128 characters and cannot be empty. Key must begin with a letter, end with a letter, number or underscore, and must contain only alphanumeric characters and the following special characters `_ . -`.",
+ "type": "string",
+ "default": ""
+ },
+ "value": {
+ "description": "value is the value part of the tag. A tag value can have a maximum of 256 characters and cannot be empty. Value must contain only alphanumeric characters and the following special characters `_ + , - . / : ; \u003c = \u003e ? @`.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "AzureResourceTag",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.BareMetalPlatformLoadBalancer": {
+ "description": "BareMetalPlatformLoadBalancer defines the load balancer used by the cluster on BareMetal platform.",
+ "type": "object",
+ "properties": {
+ "type": {
+ "description": "type defines the type of load balancer used by the cluster on BareMetal platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.",
+ "type": "string",
+ "default": "OpenShiftManagedDefault"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "BareMetalPlatformLoadBalancer",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {}
+ }
+ ]
+ },
+ "io.openshift.config.v1.BareMetalPlatformSpec": {
+ "description": "BareMetalPlatformSpec holds the desired state of the BareMetal infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "type": "object",
+ "properties": {
+ "apiServerInternalIPs": {
+ "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).",
"type": "array",
"items": {
"type": "string",
"default": ""
- }
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "enabled": {
- "description": "enabled is a list of all feature gates that you want to force on",
+ "ingressIPs": {
+ "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).",
"type": "array",
"items": {
"type": "string",
"default": ""
- }
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "machineNetworks": {
+ "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "CustomFeatureGates",
+ "Kind": "BareMetalPlatformSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.CustomTLSProfile": {
- "description": "CustomTLSProfile is a user-defined TLS security profile. Be extremely careful using a custom TLS profile as invalid configurations can be catastrophic.",
+ "io.openshift.config.v1.BareMetalPlatformStatus": {
+ "description": "BareMetalPlatformStatus holds the current status of the BareMetal infrastructure provider. For more information about the network architecture used with the BareMetal platform type, see: https://github.com/openshift/installer/blob/master/docs/design/baremetal/networking-infrastructure.md",
"type": "object",
"required": [
- "ciphers",
- "minTLSVersion"
+ "apiServerInternalIPs",
+ "ingressIPs"
],
"properties": {
- "ciphers": {
- "description": "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries their operands do not support. For example, to use DES-CBC3-SHA (yaml):\n\n ciphers:\n - DES-CBC3-SHA",
+ "apiServerInternalIP": {
+ "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.",
+ "type": "string"
+ },
+ "apiServerInternalIPs": {
+ "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.",
"type": "array",
"items": {
"type": "string",
@@ -72227,8 +73450,72 @@
},
"x-kubernetes-list-type": "atomic"
},
- "minTLSVersion": {
- "description": "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11\n\nNOTE: currently the highest minTLSVersion allowed is VersionTLS12",
+ "ingressIP": {
+ "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.",
+ "type": "string"
+ },
+ "ingressIPs": {
+ "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "loadBalancer": {
+ "description": "loadBalancer defines how the load balancer used by the cluster is configured.",
+ "default": {
+ "type": "OpenShiftManagedDefault"
+ },
+ "$ref": "#/definitions/io.openshift.config.v1.BareMetalPlatformLoadBalancer"
+ },
+ "machineNetworks": {
+ "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "nodeDNSIP": {
+ "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for BareMetal deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "BareMetalPlatformStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.BasicAuthIdentityProvider": {
+ "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials",
+ "type": "object",
+ "required": [
+ "url"
+ ],
+ "properties": {
+ "ca": {
+ "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ },
+ "tlsClientCert": {
+ "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ },
+ "tlsClientKey": {
+ "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ },
+ "url": {
+ "description": "url is the remote URL to connect to",
"type": "string",
"default": ""
}
@@ -72237,12 +73524,12 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "CustomTLSProfile",
+ "Kind": "BasicAuthIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.DNS": {
- "description": "DNS holds cluster-wide information about DNS. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.Build": {
+ "description": "Build configures the behavior of OpenShift builds for the entire cluster. This includes default settings that can be overridden in BuildConfig objects, and overrides which are applied to all builds.\n\nThe canonical name is \"cluster\"\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"spec"
@@ -72262,25 +73549,61 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec holds user settable values for configuration",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.DNSSpec"
- },
- "status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
+ "description": "Spec holds user-settable values for the build controller configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.DNSStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.BuildSpec"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "DNS",
+ "Kind": "Build",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1.DNSList": {
+ "io.openshift.config.v1.BuildDefaults": {
+ "type": "object",
+ "properties": {
+ "defaultProxy": {
+ "description": "DefaultProxy contains the default proxy settings for all build operations, including image pull/push and source download.\n\nValues can be overrode by setting the `HTTP_PROXY`, `HTTPS_PROXY`, and `NO_PROXY` environment variables in the build config's strategy.",
+ "$ref": "#/definitions/io.openshift.config.v1.ProxySpec"
+ },
+ "env": {
+ "description": "Env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
+ }
+ },
+ "gitProxy": {
+ "description": "GitProxy contains the proxy settings for git operations only. If set, this will override any Proxy settings for all git commands, such as git clone.\n\nValues that are not set here will be inherited from DefaultProxy.",
+ "$ref": "#/definitions/io.openshift.config.v1.ProxySpec"
+ },
+ "imageLabels": {
+ "description": "ImageLabels is a list of docker labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ImageLabel"
+ }
+ },
+ "resources": {
+ "description": "Resources defines resource requirements to execute the build.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "BuildDefaults",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.BuildList": {
"description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
@@ -72296,7 +73619,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.DNS"
+ "$ref": "#/definitions/io.openshift.config.v1.Build"
}
},
"kind": {
@@ -72313,212 +73636,85 @@
"Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "DNSList",
+ "Kind": "BuildList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.DNSPlatformSpec": {
- "description": "DNSPlatformSpec holds cloud-provider-specific configuration for DNS administration.",
+ "io.openshift.config.v1.BuildOverrides": {
"type": "object",
- "required": [
- "type"
- ],
"properties": {
- "aws": {
- "description": "aws contains DNS configuration specific to the Amazon Web Services cloud provider.",
- "$ref": "#/definitions/io.openshift.config.v1.AWSDNSSpec"
+ "forcePull": {
+ "description": "ForcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself",
+ "type": "boolean"
},
- "type": {
- "description": "type is the underlying infrastructure provider for the cluster. Allowed values: \"\", \"AWS\".\n\nIndividual components may not support all platforms, and must handle unrecognized platforms with best-effort defaults.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "DNSPlatformSpec",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "aws": "AWS"
+ "imageLabels": {
+ "description": "ImageLabels is a list of docker labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ImageLabel"
}
- }
- ]
- },
- "io.openshift.config.v1.DNSSpec": {
- "type": "object",
- "required": [
- "baseDomain"
- ],
- "properties": {
- "baseDomain": {
- "description": "baseDomain is the base domain of the cluster. All managed DNS records will be sub-domains of this base.\n\nFor example, given the base domain `openshift.example.com`, an API server DNS record may be created for `cluster-api.openshift.example.com`.\n\nOnce set, this field cannot be changed.",
- "type": "string",
- "default": ""
- },
- "platform": {
- "description": "platform holds configuration specific to the underlying infrastructure provider for DNS. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.DNSPlatformSpec"
- },
- "privateZone": {
- "description": "privateZone is the location where all the DNS records that are only available internally to the cluster exist.\n\nIf this field is nil, no private records should be created.\n\nOnce set, this field cannot be changed.",
- "$ref": "#/definitions/io.openshift.config.v1.DNSZone"
- },
- "publicZone": {
- "description": "publicZone is the location where all the DNS records that are publicly accessible to the internet exist.\n\nIf this field is nil, no public records should be created.\n\nOnce set, this field cannot be changed.",
- "$ref": "#/definitions/io.openshift.config.v1.DNSZone"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "DNSSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.DNSStatus": {
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "DNSStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.DNSZone": {
- "description": "DNSZone is used to define a DNS hosted zone. A zone can be identified by an ID or tags.",
- "type": "object",
- "properties": {
- "id": {
- "description": "id is the identifier that can be used to find the DNS hosted zone.\n\non AWS zone can be fetched using `ID` as id in [1] on Azure zone can be fetched using `ID` as a pre-determined name in [2], on GCP zone can be fetched using `ID` as a pre-determined name in [3].\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/route53/get-hosted-zone.html#options [2]: https://docs.microsoft.com/en-us/cli/azure/network/dns/zone?view=azure-cli-latest#az-network-dns-zone-show [3]: https://cloud.google.com/dns/docs/reference/v1/managedZones/get",
- "type": "string"
},
- "tags": {
- "description": "tags can be used to query the DNS hosted zone.\n\non AWS, resourcegroupstaggingapi [1] can be used to fetch a zone using `Tags` as tag-filters,\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html#options",
+ "nodeSelector": {
+ "description": "NodeSelector is a selector which must be true for the build pod to fit on a node",
"type": "object",
"additionalProperties": {
"type": "string",
"default": ""
}
+ },
+ "tolerations": {
+ "description": "Tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "DNSZone",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.DelegatedAuthentication": {
- "description": "DelegatedAuthentication allows authentication to be disabled.",
- "type": "object",
- "properties": {
- "disabled": {
- "description": "disabled indicates that authentication should be disabled. By default it will use delegated authentication.",
- "type": "boolean"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "DelegatedAuthentication",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.DelegatedAuthorization": {
- "description": "DelegatedAuthorization allows authorization to be disabled.",
- "type": "object",
- "properties": {
- "disabled": {
- "description": "disabled indicates that authorization should be disabled. By default it will use delegated authorization.",
- "type": "boolean"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "DelegatedAuthorization",
+ "Kind": "BuildOverrides",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.DeprecatedWebhookTokenAuthenticator": {
- "description": "deprecatedWebhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator. It's the same as WebhookTokenAuthenticator but it's missing the 'required' validation on KubeConfig field.",
+ "io.openshift.config.v1.BuildSpec": {
"type": "object",
- "required": [
- "kubeConfig"
- ],
"properties": {
- "kubeConfig": {
- "description": "kubeConfig contains kube config file data which describes how to access the remote webhook service. For further details, see: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication The key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored. The namespace for this secret is determined by the point of use.",
+ "additionalTrustedCA": {
+ "description": "AdditionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted for image pushes and pulls during builds. The namespace for this config map is openshift-config.\n\nDEPRECATED: Additional CAs for image pull and push should be set on image.config.openshift.io/cluster instead.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "DeprecatedWebhookTokenAuthenticator",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.EquinixMetalPlatformSpec": {
- "description": "EquinixMetalPlatformSpec holds the desired state of the Equinix Metal infrastructure provider. This only includes fields that can be modified in the cluster.",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "EquinixMetalPlatformSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.EquinixMetalPlatformStatus": {
- "description": "EquinixMetalPlatformStatus holds the current status of the Equinix Metal infrastructure provider.",
- "type": "object",
- "properties": {
- "apiServerInternalIP": {
- "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.",
- "type": "string"
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
},
- "ingressIP": {
- "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.",
- "type": "string"
+ "buildDefaults": {
+ "description": "BuildDefaults controls the default information for Builds",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.BuildDefaults"
+ },
+ "buildOverrides": {
+ "description": "BuildOverrides controls override settings for builds",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.BuildOverrides"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "EquinixMetalPlatformStatus",
+ "Kind": "BuildSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.EtcdConnectionInfo": {
- "description": "EtcdConnectionInfo holds information necessary for connecting to an etcd server",
+ "io.openshift.config.v1.CertInfo": {
+ "description": "CertInfo relates a certificate with a private key",
"type": "object",
"required": [
- "ca",
"certFile",
"keyFile"
],
"properties": {
- "ca": {
- "description": "CA is a file containing trusted roots for the etcd server certificates",
- "type": "string",
- "default": ""
- },
"certFile": {
"description": "CertFile is a file containing a PEM-encoded certificate",
"type": "string",
@@ -72528,167 +73724,200 @@
"description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
"type": "string",
"default": ""
- },
- "urls": {
- "description": "URLs are the URLs for etcd",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "EtcdConnectionInfo",
+ "Kind": "CertInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.EtcdStorageConfig": {
+ "io.openshift.config.v1.ClientConnectionOverrides": {
"type": "object",
"required": [
- "ca",
- "certFile",
- "keyFile",
- "storagePrefix"
+ "acceptContentTypes",
+ "contentType",
+ "qps",
+ "burst"
],
"properties": {
- "ca": {
- "description": "CA is a file containing trusted roots for the etcd server certificates",
+ "acceptContentTypes": {
+ "description": "acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.",
"type": "string",
"default": ""
},
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
- "type": "string",
- "default": ""
+ "burst": {
+ "description": "burst allows extra queries to accumulate when a client is exceeding its rate.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "keyFile": {
- "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "contentType": {
+ "description": "contentType is the content type used when sending data to the server from this client.",
"type": "string",
"default": ""
},
- "storagePrefix": {
- "description": "StoragePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located.",
+ "qps": {
+ "description": "qps controls the number of queries per second allowed for this connection.",
+ "type": "number",
+ "format": "float",
+ "default": 0
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "ClientConnectionOverrides",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.CloudControllerManagerStatus": {
+ "description": "CloudControllerManagerStatus holds the state of Cloud Controller Manager (a.k.a. CCM or CPI) related settings",
+ "type": "object",
+ "properties": {
+ "state": {
+ "description": "state determines whether or not an external Cloud Controller Manager is expected to be installed within the cluster. https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager\n\nValid values are \"External\", \"None\" and omitted. When set to \"External\", new nodes will be tainted as uninitialized when created, preventing them from running workloads until they are initialized by the cloud controller manager. When omitted or set to \"None\", new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.",
"type": "string",
"default": ""
- },
- "urls": {
- "description": "URLs are the URLs for etcd",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "EtcdStorageConfig",
+ "Kind": "CloudControllerManagerStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ExternalIPConfig": {
- "description": "ExternalIPConfig specifies some IP blocks relevant for the ExternalIP field of a Service resource.",
+ "io.openshift.config.v1.CloudLoadBalancerConfig": {
+ "description": "CloudLoadBalancerConfig contains an union discriminator indicating the type of DNS solution in use within the cluster. When the DNSType is `ClusterHosted`, the cloud's Load Balancer configuration needs to be provided so that the DNS solution hosted within the cluster can be configured with those values.",
"type": "object",
"properties": {
- "autoAssignCIDRs": {
- "description": "autoAssignCIDRs is a list of CIDRs from which to automatically assign Service.ExternalIP. These are assigned when the service is of type LoadBalancer. In general, this is only useful for bare-metal clusters. In Openshift 3.x, this was misleadingly called \"IngressIPs\". Automatically assigned External IPs are not affected by any ExternalIPPolicy rules. Currently, only one entry may be provided.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "clusterHosted": {
+ "description": "clusterHosted holds the IP addresses of API, API-Int and Ingress Load Balancers on Cloud Platforms. The DNS solution hosted within the cluster use these IP addresses to provide resolution for API, API-Int and Ingress services.",
+ "$ref": "#/definitions/io.openshift.config.v1.CloudLoadBalancerIPs"
},
- "policy": {
- "description": "policy is a set of restrictions applied to the ExternalIP field. If nil or empty, then ExternalIP is not allowed to be set.",
- "$ref": "#/definitions/io.openshift.config.v1.ExternalIPPolicy"
+ "dnsType": {
+ "description": "dnsType indicates the type of DNS solution in use within the cluster. Its default value of `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform. It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode, the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed. The cluster's use of the cloud's Load Balancers is unaffected by this setting. The value is immutable after it has been set at install time. Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS. Enabling this functionality allows the user to start their own DNS solution outside the cluster after installation is complete. The customer would be responsible for configuring this custom DNS solution, and it can be run in addition to the in-cluster DNS solution.",
+ "type": "string",
+ "default": "PlatformDefault"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ExternalIPConfig",
+ "Kind": "CloudLoadBalancerConfig",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "dnsType",
+ "fields-to-discriminateBy": {
+ "clusterHosted": "ClusterHosted"
+ }
+ }
+ ]
},
- "io.openshift.config.v1.ExternalIPPolicy": {
- "description": "ExternalIPPolicy configures exactly which IPs are allowed for the ExternalIP field in a Service. If the zero struct is supplied, then none are permitted. The policy controller always allows automatically assigned external IPs.",
+ "io.openshift.config.v1.CloudLoadBalancerIPs": {
+ "description": "CloudLoadBalancerIPs contains the Load Balancer IPs for the cloud's API, API-Int and Ingress Load balancers. They will be populated as soon as the respective Load Balancers have been configured. These values are utilized to configure the DNS solution hosted within the cluster.",
"type": "object",
"properties": {
- "allowedCIDRs": {
- "description": "allowedCIDRs is the list of allowed CIDRs.",
+ "apiIntLoadBalancerIPs": {
+ "description": "apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the apiIntLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.",
"type": "array",
"items": {
"type": "string",
"default": ""
},
- "x-kubernetes-list-type": "atomic"
+ "x-kubernetes-list-type": "set"
},
- "rejectedCIDRs": {
- "description": "rejectedCIDRs is the list of disallowed CIDRs. These take precedence over allowedCIDRs.",
+ "apiLoadBalancerIPs": {
+ "description": "apiLoadBalancerIPs holds Load Balancer IPs for the API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Could be empty for private clusters. Entries in the apiLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.",
"type": "array",
"items": {
"type": "string",
"default": ""
},
- "x-kubernetes-list-type": "atomic"
+ "x-kubernetes-list-type": "set"
+ },
+ "ingressLoadBalancerIPs": {
+ "description": "ingressLoadBalancerIPs holds IPs for Ingress Load Balancers. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the ingressLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "set"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ExternalIPPolicy",
+ "Kind": "CloudLoadBalancerIPs",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ExternalPlatformSpec": {
- "description": "ExternalPlatformSpec holds the desired state for the generic External infrastructure provider.",
+ "io.openshift.config.v1.ClusterCondition": {
+ "description": "ClusterCondition is a union of typed cluster conditions. The 'type' property determines which of the type-specific properties are relevant. When evaluated on a cluster, the condition may match, not match, or fail to evaluate.",
"type": "object",
+ "required": [
+ "type"
+ ],
"properties": {
- "platformName": {
- "description": "PlatformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time. This field is solely for informational and reporting purposes and is not expected to be used for decision-making.",
+ "promql": {
+ "description": "promQL represents a cluster condition based on PromQL.",
+ "$ref": "#/definitions/io.openshift.config.v1.PromQLClusterCondition"
+ },
+ "type": {
+ "description": "type represents the cluster-condition type. This defines the members and semantics of any additional properties.",
"type": "string",
- "default": "Unknown"
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ExternalPlatformSpec",
+ "Kind": "ClusterCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ExternalPlatformStatus": {
- "description": "ExternalPlatformStatus holds the current status of the generic External infrastructure provider.",
+ "io.openshift.config.v1.ClusterNetworkEntry": {
+ "description": "ClusterNetworkEntry is a contiguous block of IP addresses from which pod IPs are allocated.",
"type": "object",
+ "required": [
+ "cidr"
+ ],
"properties": {
- "cloudControllerManager": {
- "description": "cloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI). When omitted, new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.CloudControllerManagerStatus"
+ "cidr": {
+ "description": "The complete block for pod IPs.",
+ "type": "string",
+ "default": ""
+ },
+ "hostPrefix": {
+ "description": "The size (prefix) of block to allocate to each node. If this field is not used by the plugin, it can be left unset.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ExternalPlatformStatus",
+ "Kind": "ClusterNetworkEntry",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.FeatureGate": {
- "description": "Feature holds cluster-wide information about feature gates. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.ClusterOperator": {
+ "description": "ClusterOperator is the Custom Resource object which holds the current state of an operator. This object is used by operators to convey their state to the rest of the cluster.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"spec"
],
"properties": {
@@ -72706,82 +73935,26 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec holds user settable values for configuration",
+ "description": "spec holds configuration that could apply to any operator.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.FeatureGateSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorSpec"
},
"status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
+ "description": "status holds the information about the state of an operator. It is consistent with status information across the Kubernetes ecosystem.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.FeatureGateStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "FeatureGate",
+ "Kind": "ClusterOperator",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1.FeatureGateAttributes": {
- "type": "object",
- "required": [
- "name"
- ],
- "properties": {
- "name": {
- "description": "name is the name of the FeatureGate.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "FeatureGateAttributes",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.FeatureGateDetails": {
- "type": "object",
- "required": [
- "version"
- ],
- "properties": {
- "disabled": {
- "description": "disabled is a list of all feature gates that are disabled in the cluster for the named version.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.FeatureGateAttributes"
- }
- },
- "enabled": {
- "description": "enabled is a list of all feature gates that are enabled in the cluster for the named version.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.FeatureGateAttributes"
- }
- },
- "version": {
- "description": "version matches the version provided by the ClusterVersion and in the ClusterOperator.Status.Versions field.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "FeatureGateDetails",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.FeatureGateList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.ClusterOperatorList": {
+ "description": "ClusterOperatorList is a list of OperatorStatus resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -72796,7 +73969,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.FeatureGate"
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterOperator"
}
},
"kind": {
@@ -72813,695 +73986,617 @@
"Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "FeatureGateList",
+ "Kind": "ClusterOperatorList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.FeatureGateSelection": {
+ "io.openshift.config.v1.ClusterOperatorSpec": {
+ "description": "ClusterOperatorSpec is empty for now, but you could imagine holding information like \"pause\".",
"type": "object",
- "properties": {
- "customNoUpgrade": {
- "description": "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.",
- "$ref": "#/definitions/io.openshift.config.v1.CustomFeatureGates"
- },
- "featureSet": {
- "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.",
- "type": "string"
- }
- },
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "FeatureGateSelection",
+ "Kind": "ClusterOperatorSpec",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "featureSet",
- "fields-to-discriminateBy": {
- "customNoUpgrade": "CustomNoUpgrade"
- }
- }
- ]
+ }
},
- "io.openshift.config.v1.FeatureGateSpec": {
+ "io.openshift.config.v1.ClusterOperatorStatus": {
+ "description": "ClusterOperatorStatus provides information about the status of the operator.",
"type": "object",
"properties": {
- "customNoUpgrade": {
- "description": "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.",
- "$ref": "#/definitions/io.openshift.config.v1.CustomFeatureGates"
+ "conditions": {
+ "description": "conditions describes the state of the operator's managed and monitored components.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatusCondition"
+ },
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "featureSet": {
- "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.",
- "type": "string"
+ "extension": {
+ "description": "extension contains any additional status information specific to the operator which owns this status object.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "relatedObjects": {
+ "description": "relatedObjects is a list of objects that are \"interesting\" or related to this operator. Common uses are: 1. the detailed resource driving the operator 2. operator namespaces 3. operand namespaces",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ObjectReference"
+ }
+ },
+ "versions": {
+ "description": "versions is a slice of operator and operand version tuples. Operators which manage multiple operands will have multiple operand entries in the array. Available operators must report the version of the operator itself with the name \"operator\". An operator reports a new \"operator\" version when it has rolled out the new version to all of its operands.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.OperandVersion"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "FeatureGateSpec",
+ "Kind": "ClusterOperatorStatus",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "featureSet",
- "fields-to-discriminateBy": {
- "customNoUpgrade": "CustomNoUpgrade"
- }
- }
- ]
+ }
},
- "io.openshift.config.v1.FeatureGateStatus": {
+ "io.openshift.config.v1.ClusterOperatorStatusCondition": {
+ "description": "ClusterOperatorStatusCondition represents the state of the operator's managed and monitored components.",
"type": "object",
"required": [
- "featureGates"
+ "type",
+ "status",
+ "lastTransitionTime"
],
"properties": {
- "conditions": {
- "description": "conditions represent the observations of the current state. Known .status.conditions.type are: \"DeterminationDegraded\"",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
+ "lastTransitionTime": {
+ "description": "lastTransitionTime is the time of the last update to the current status property.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "featureGates": {
- "description": "featureGates contains a list of enabled and disabled featureGates that are keyed by payloadVersion. Operators other than the CVO and cluster-config-operator, must read the .status.featureGates, locate the version they are managing, find the enabled/disabled featuregates and make the operand and operator match. The enabled/disabled values for a particular version may change during the life of the cluster as various .spec.featureSet values are selected. Operators may choose to restart their processes to pick up these changes, but remembering past enable/disable lists is beyond the scope of this API and is the responsibility of individual operators. Only featureGates with .version in the ClusterVersion.status will be present in this list.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.FeatureGateDetails"
- },
- "x-kubernetes-list-map-keys": [
- "version"
- ],
- "x-kubernetes-list-type": "map"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "FeatureGateStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.FeatureGateTests": {
- "type": "object",
- "required": [
- "featureGate",
- "tests"
- ],
- "properties": {
- "featureGate": {
- "description": "FeatureGate is the name of the FeatureGate as it appears in The FeatureGate CR instance.",
+ "message": {
+ "description": "message provides additional information about the current condition. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.",
+ "type": "string"
+ },
+ "reason": {
+ "description": "reason is the CamelCase reason for the condition's current status.",
+ "type": "string"
+ },
+ "status": {
+ "description": "status of the condition, one of True, False, Unknown.",
"type": "string",
"default": ""
},
- "tests": {
- "description": "Tests contains an item for every TestName",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.TestDetails"
- }
+ "type": {
+ "description": "type specifies the aspect reported by this condition.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "FeatureGateTests",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.GCPPlatformSpec": {
- "description": "GCPPlatformSpec holds the desired state of the Google Cloud Platform infrastructure provider. This only includes fields that can be modified in the cluster.",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "GCPPlatformSpec",
+ "Kind": "ClusterOperatorStatusCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.GCPPlatformStatus": {
- "description": "GCPPlatformStatus holds the current status of the Google Cloud Platform infrastructure provider.",
+ "io.openshift.config.v1.ClusterVersion": {
+ "description": "ClusterVersion is the configuration for the ClusterVersionOperator. This is where parameters related to automatic updates can be set.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "projectID",
- "region"
+ "spec"
],
"properties": {
- "cloudLoadBalancerConfig": {
- "description": "cloudLoadBalancerConfig is a union that contains the IP addresses of API, API-Int and Ingress Load Balancers created on the cloud platform. These values would not be populated on on-prem platforms. These Load Balancer IPs are used to configure the in-cluster DNS instances for API, API-Int and Ingress services. `dnsType` is expected to be set to `ClusterHosted` when these Load Balancer IP addresses are populated and used.",
- "default": {
- "dnsType": "PlatformDefault"
- },
- "$ref": "#/definitions/io.openshift.config.v1.CloudLoadBalancerConfig"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "projectID": {
- "description": "resourceGroupName is the Project ID for new GCP resources created for the cluster.",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "region": {
- "description": "region holds the region for new GCP resources created for the cluster.",
- "type": "string",
- "default": ""
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "resourceLabels": {
- "description": "resourceLabels is a list of additional labels to apply to GCP resources created for the cluster. See https://cloud.google.com/compute/docs/labeling-resources for information on labeling GCP resources. GCP supports a maximum of 64 labels per resource. OpenShift reserves 32 labels for internal use, allowing 32 labels for user configuration.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.GCPResourceLabel"
- },
- "x-kubernetes-list-map-keys": [
- "key"
- ],
- "x-kubernetes-list-type": "map"
+ "spec": {
+ "description": "spec is the desired state of the cluster version - the operator will work to ensure that the desired version is applied to the cluster.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionSpec"
},
- "resourceTags": {
- "description": "resourceTags is a list of additional tags to apply to GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on tagging GCP resources. GCP supports a maximum of 50 tags per resource.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.GCPResourceTag"
- },
- "x-kubernetes-list-map-keys": [
- "key"
- ],
- "x-kubernetes-list-type": "map"
+ "status": {
+ "description": "status contains information about the available updates and any in-progress updates.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "GCPPlatformStatus",
- "Scope": "Namespaced"
+ "Kind": "ClusterVersion",
+ "Scope": "Clustered"
}
},
- "io.openshift.config.v1.GCPResourceLabel": {
- "description": "GCPResourceLabel is a label to apply to GCP resources created for the cluster.",
+ "io.openshift.config.v1.ClusterVersionCapabilitiesSpec": {
+ "description": "ClusterVersionCapabilitiesSpec selects the managed set of optional, core cluster components.",
"type": "object",
- "required": [
- "key",
- "value"
- ],
"properties": {
- "key": {
- "description": "key is the key part of the label. A label key can have a maximum of 63 characters and cannot be empty. Label key must begin with a lowercase letter, and must contain only lowercase letters, numeric characters, and the following special characters `_-`. Label key must not have the reserved prefixes `kubernetes-io` and `openshift-io`.",
- "type": "string",
- "default": ""
+ "additionalEnabledCapabilities": {
+ "description": "additionalEnabledCapabilities extends the set of managed capabilities beyond the baseline defined in baselineCapabilitySet. The default is an empty set.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "value": {
- "description": "value is the value part of the label. A label value can have a maximum of 63 characters and cannot be empty. Value must contain only lowercase letters, numeric characters, and the following special characters `_-`.",
- "type": "string",
- "default": ""
+ "baselineCapabilitySet": {
+ "description": "baselineCapabilitySet selects an initial set of optional capabilities to enable, which can be extended via additionalEnabledCapabilities. If unset, the cluster will choose a default, and the default may change over time. The current default is vCurrent.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "GCPResourceLabel",
+ "Kind": "ClusterVersionCapabilitiesSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.GCPResourceTag": {
- "description": "GCPResourceTag is a tag to apply to GCP resources created for the cluster.",
+ "io.openshift.config.v1.ClusterVersionCapabilitiesStatus": {
+ "description": "ClusterVersionCapabilitiesStatus describes the state of optional, core cluster components.",
"type": "object",
- "required": [
- "parentID",
- "key",
- "value"
- ],
"properties": {
- "key": {
- "description": "key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty. Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `._-`.",
- "type": "string",
- "default": ""
- },
- "parentID": {
- "description": "parentID is the ID of the hierarchical resource where the tags are defined, e.g. at the Organization or the Project level. To find the Organization or Project ID refer to the following pages: https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id, https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects. An OrganizationID must consist of decimal numbers, and cannot have leading zeroes. A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.",
- "type": "string",
- "default": ""
+ "enabledCapabilities": {
+ "description": "enabledCapabilities lists all the capabilities that are currently managed.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "value": {
- "description": "value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty. Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `_-.@%=+:,*#\u0026(){}[]` and spaces.",
- "type": "string",
- "default": ""
+ "knownCapabilities": {
+ "description": "knownCapabilities lists all the capabilities known to the current cluster.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "GCPResourceTag",
+ "Kind": "ClusterVersionCapabilitiesStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.GenericAPIServerConfig": {
- "description": "GenericAPIServerConfig is an inline-able struct for aggregated apiservers that need to store data in etcd",
+ "io.openshift.config.v1.ClusterVersionList": {
+ "description": "ClusterVersionList is a list of ClusterVersion resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "servingInfo",
- "corsAllowedOrigins",
- "auditConfig",
- "storageConfig",
- "admission",
- "kubeClientConfig"
+ "metadata",
+ "items"
],
"properties": {
- "admission": {
- "description": "admissionConfig holds information about how to configure admission.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig"
- },
- "auditConfig": {
- "description": "auditConfig describes how to configure audit information",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.AuditConfig"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "corsAllowedOrigins": {
- "description": "corsAllowedOrigins",
+ "items": {
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterVersion"
}
},
- "kubeClientConfig": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig"
- },
- "servingInfo": {
- "description": "servingInfo describes how to start serving",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "storageConfig": {
- "description": "storageConfig contains information about how to use",
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "GenericAPIServerConfig",
+ "Kind": "ClusterVersionList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.GenericControllerConfig": {
- "description": "GenericControllerConfig provides information to configure a controller",
+ "io.openshift.config.v1.ClusterVersionSpec": {
+ "description": "ClusterVersionSpec is the desired version state of the cluster. It includes the version the cluster should be at, how the cluster is identified, and where the cluster should look for version updates.",
"type": "object",
"required": [
- "servingInfo",
- "leaderElection",
- "authentication",
- "authorization"
+ "clusterID"
],
"properties": {
- "authentication": {
- "description": "authentication allows configuration of authentication for the endpoints",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.DelegatedAuthentication"
+ "capabilities": {
+ "description": "capabilities configures the installation of optional, core cluster components. A null value here is identical to an empty object; see the child properties for default semantics.",
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionCapabilitiesSpec"
},
- "authorization": {
- "description": "authorization allows configuration of authentication for the endpoints",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.DelegatedAuthorization"
+ "channel": {
+ "description": "channel is an identifier for explicitly requesting that a non-default set of updates be applied to this cluster. The default channel will be contain stable updates that are appropriate for production clusters.",
+ "type": "string"
},
- "leaderElection": {
- "description": "leaderElection provides information to elect a leader. Only override this if you have a specific need",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.LeaderElection"
+ "clusterID": {
+ "description": "clusterID uniquely identifies this cluster. This is expected to be an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx in hexadecimal values). This is a required field.",
+ "type": "string",
+ "default": ""
},
- "servingInfo": {
- "description": "ServingInfo is the HTTP serving information for the controller's endpoints",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
+ "desiredUpdate": {
+ "description": "desiredUpdate is an optional field that indicates the desired value of the cluster version. Setting this value will trigger an upgrade (if the current version does not match the desired version). The set of recommended update values is listed as part of available updates in status, and setting values outside that range may cause the upgrade to fail.\n\nSome of the fields are inter-related with restrictions and meanings described here. 1. image is specified, version is specified, architecture is specified. API validation error. 2. image is specified, version is specified, architecture is not specified. You should not do this. version is silently ignored and image is used. 3. image is specified, version is not specified, architecture is specified. API validation error. 4. image is specified, version is not specified, architecture is not specified. image is used. 5. image is not specified, version is specified, architecture is specified. version and desired architecture are used to select an image. 6. image is not specified, version is specified, architecture is not specified. version and current architecture are used to select an image. 7. image is not specified, version is not specified, architecture is specified. API validation error. 8. image is not specified, version is not specified, architecture is not specified. API validation error.\n\nIf an upgrade fails the operator will halt and report status about the failing component. Setting the desired update value back to the previous version will cause a rollback to be attempted. Not all rollbacks will succeed.",
+ "$ref": "#/definitions/io.openshift.config.v1.Update"
+ },
+ "overrides": {
+ "description": "overrides is list of overides for components that are managed by cluster version operator. Marking a component unmanaged will prevent the operator from creating or updating the object.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ComponentOverride"
+ },
+ "x-kubernetes-list-map-keys": [
+ "kind",
+ "group",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "signatureStores": {
+ "description": "signatureStores contains the upstream URIs to verify release signatures and optional reference to a config map by name containing the PEM-encoded CA bundle.\n\nBy default, CVO will use existing signature stores if this property is empty. The CVO will check the release signatures in the local ConfigMaps first. It will search for a valid signature in these stores in parallel only when local ConfigMaps did not include a valid signature. Validation will fail if none of the signature stores reply with valid signature before timeout. Setting signatureStores will replace the default signature stores with custom signature stores. Default stores can be used with custom signature stores by adding them manually.\n\nA maximum of 32 signature stores may be configured.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SignatureStore"
+ },
+ "x-kubernetes-list-map-keys": [
+ "url"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "upstream": {
+ "description": "upstream may be used to specify the preferred update server. By default it will use the appropriate update server for the cluster and region.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "GenericControllerConfig",
+ "Kind": "ClusterVersionSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.GitHubIdentityProvider": {
- "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials",
+ "io.openshift.config.v1.ClusterVersionStatus": {
+ "description": "ClusterVersionStatus reports the status of the cluster versioning, including any upgrades that are in progress. The current field will be set to whichever version the cluster is reconciling to, and the conditions array will report whether the update succeeded, is in progress, or is failing.",
"type": "object",
"required": [
- "clientID",
- "clientSecret"
+ "desired",
+ "observedGeneration",
+ "versionHash",
+ "capabilities",
+ "availableUpdates"
],
"properties": {
- "ca": {
- "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value. The namespace for this config map is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
- },
- "clientID": {
- "description": "clientID is the oauth client ID",
- "type": "string",
- "default": ""
+ "availableUpdates": {
+ "description": "availableUpdates contains updates recommended for this cluster. Updates which appear in conditionalUpdates but not in availableUpdates may expose this cluster to known issues. This list may be empty if no updates are recommended, if the update service is unavailable, or if an invalid channel has been specified.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.Release"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "clientSecret": {
- "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.",
+ "capabilities": {
+ "description": "capabilities describes the state of optional, core cluster components.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionCapabilitiesStatus"
},
- "hostname": {
- "description": "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value configured at /setup/settings#hostname.",
- "type": "string",
- "default": ""
+ "conditionalUpdates": {
+ "description": "conditionalUpdates contains the list of updates that may be recommended for this cluster if it meets specific required conditions. Consumers interested in the set of updates that are actually recommended for this cluster should use availableUpdates. This list may be empty if no updates are recommended, if the update service is unavailable, or if an empty or invalid channel has been specified.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConditionalUpdate"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "organizations": {
- "description": "organizations optionally restricts which organizations are allowed to log in",
+ "conditions": {
+ "description": "conditions provides information about the cluster version. The condition \"Available\" is set to true if the desiredUpdate has been reached. The condition \"Progressing\" is set to true if an update is being applied. The condition \"Degraded\" is set to true if an update is currently blocked by a temporary or permanent error. Conditions are only valid for the current desiredUpdate when metadata.generation is equal to status.generation.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
- }
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatusCondition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "teams": {
- "description": "teams optionally restricts which teams are allowed to log in. Format is \u003corg\u003e/\u003cteam\u003e.",
+ "desired": {
+ "description": "desired is the version that the cluster is reconciling towards. If the cluster is not yet fully initialized desired will be set with the information available, which may be an image or a tag.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.Release"
+ },
+ "history": {
+ "description": "history contains a list of the most recent versions applied to the cluster. This value may be empty during cluster startup, and then will be updated when a new update is being applied. The newest update is first in the list and it is ordered by recency. Updates in the history have state Completed if the rollout completed - if an update was failing or halfway applied the state will be Partial. Only a limited amount of update history is preserved.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
- }
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.UpdateHistory"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "observedGeneration": {
+ "description": "observedGeneration reports which version of the spec is being synced. If this value is not equal to metadata.generation, then the desired and conditions fields may represent a previous version.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "versionHash": {
+ "description": "versionHash is a fingerprint of the content that the cluster will be updated with. It is used by the operator to avoid unnecessary work and is for internal use only.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "GitHubIdentityProvider",
+ "Kind": "ClusterVersionStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.GitLabIdentityProvider": {
- "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials",
+ "io.openshift.config.v1.ComponentOverride": {
+ "description": "ComponentOverride allows overriding cluster version operator's behavior for a component.",
"type": "object",
"required": [
- "clientID",
- "clientSecret",
- "url"
+ "kind",
+ "group",
+ "namespace",
+ "name",
+ "unmanaged"
],
"properties": {
- "ca": {
- "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ "group": {
+ "description": "group identifies the API group that the kind is in.",
+ "type": "string",
+ "default": ""
},
- "clientID": {
- "description": "clientID is the oauth client ID",
+ "kind": {
+ "description": "kind indentifies which object to override.",
"type": "string",
"default": ""
},
- "clientSecret": {
- "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ "name": {
+ "description": "name is the component's name.",
+ "type": "string",
+ "default": ""
},
- "url": {
- "description": "url is the oauth server base URL",
+ "namespace": {
+ "description": "namespace is the component's namespace. If the resource is cluster scoped, the namespace should be empty.",
"type": "string",
"default": ""
+ },
+ "unmanaged": {
+ "description": "unmanaged controls if cluster version operator should stop managing the resources in this cluster. Default: false",
+ "type": "boolean",
+ "default": false
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "GitLabIdentityProvider",
+ "Kind": "ComponentOverride",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.GoogleIdentityProvider": {
- "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials",
+ "io.openshift.config.v1.ComponentRouteSpec": {
+ "description": "ComponentRouteSpec allows for configuration of a route's hostname and serving certificate.",
"type": "object",
"required": [
- "clientID",
- "clientSecret"
+ "namespace",
+ "name",
+ "hostname"
],
"properties": {
- "clientID": {
- "description": "clientID is the oauth client ID",
+ "hostname": {
+ "description": "hostname is the hostname that should be used by the route.",
"type": "string",
"default": ""
},
- "clientSecret": {
- "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ "name": {
+ "description": "name is the logical name of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.",
+ "type": "string",
+ "default": ""
},
- "hostedDomain": {
- "description": "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to",
+ "namespace": {
+ "description": "namespace is the namespace of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.",
"type": "string",
"default": ""
+ },
+ "servingCertKeyPairSecret": {
+ "description": "servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. If the custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "GoogleIdentityProvider",
+ "Kind": "ComponentRouteSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.HTPasswdIdentityProvider": {
- "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials",
+ "io.openshift.config.v1.ComponentRouteStatus": {
+ "description": "ComponentRouteStatus contains information allowing configuration of a route's hostname and serving certificate.",
"type": "object",
"required": [
- "fileData"
- ],
- "properties": {
- "fileData": {
- "description": "fileData is a required reference to a secret by name containing the data to use as the htpasswd file. The key \"htpasswd\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. If the specified htpasswd data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "HTPasswdIdentityProvider",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.HTTPServingInfo": {
- "description": "HTTPServingInfo holds configuration for serving HTTP",
- "type": "object",
- "required": [
- "bindAddress",
- "bindNetwork",
- "certFile",
- "keyFile",
- "maxRequestsInFlight",
- "requestTimeoutSeconds"
+ "namespace",
+ "name",
+ "defaultHostname",
+ "relatedObjects"
],
"properties": {
- "bindAddress": {
- "description": "BindAddress is the ip:port to serve on",
- "type": "string",
- "default": ""
- },
- "bindNetwork": {
- "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"",
- "type": "string",
- "default": ""
- },
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
- "type": "string",
- "default": ""
+ "conditions": {
+ "description": "conditions are used to communicate the state of the componentRoutes entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf available is true, the content served by the route can be accessed by users. This includes cases where a default may continue to serve content while the customized route specified by the cluster-admin is being configured.\n\nIf Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. The currentHostnames field may or may not be in effect.\n\nIf Progressing is true, that means the component is taking some action related to the componentRoutes entry.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "cipherSuites": {
- "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants",
+ "consumingUsers": {
+ "description": "consumingUsers is a slice of ServiceAccounts that need to have read permission on the servingCertKeyPairSecret secret.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "clientCA": {
- "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates",
- "type": "string"
+ "currentHostnames": {
+ "description": "currentHostnames is the list of current names used by the route. Typically, this list should consist of a single hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "keyFile": {
- "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "defaultHostname": {
+ "description": "defaultHostname is the hostname of this route prior to customization.",
"type": "string",
"default": ""
},
- "maxRequestsInFlight": {
- "description": "MaxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "name": {
+ "description": "name is the logical name of the route to customize. It does not have to be the actual name of a route resource but it cannot be renamed.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.",
+ "type": "string",
+ "default": ""
},
- "minTLSVersion": {
- "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants",
- "type": "string"
+ "namespace": {
+ "description": "namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace ensures that no two components will conflict and the same component can be installed multiple times.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.",
+ "type": "string",
+ "default": ""
},
- "namedCertificates": {
- "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames",
+ "relatedObjects": {
+ "description": "relatedObjects is a list of resources which are useful when debugging or inspecting how spec.componentRoutes is applied.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NamedCertificate"
+ "$ref": "#/definitions/io.openshift.config.v1.ObjectReference"
}
- },
- "requestTimeoutSeconds": {
- "description": "RequestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.",
- "type": "integer",
- "format": "int64",
- "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "HTTPServingInfo",
+ "Kind": "ComponentRouteStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.HubSource": {
- "description": "HubSource is used to specify the hub source and its configuration",
+ "io.openshift.config.v1.ConditionalUpdate": {
+ "description": "ConditionalUpdate represents an update which is recommended to some clusters on the version the current cluster is reconciling, but which may not be recommended for the current cluster.",
"type": "object",
"required": [
- "name",
- "disabled"
+ "release",
+ "risks"
],
"properties": {
- "disabled": {
- "description": "disabled is used to disable a default hub source on cluster",
- "type": "boolean",
- "default": false
- },
- "name": {
- "description": "name is the name of one of the default hub sources",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "HubSource",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.HubSourceStatus": {
- "description": "HubSourceStatus is used to reflect the current state of applying the configuration to a default source",
- "type": "object",
- "properties": {
- "message": {
- "description": "message provides more information regarding failures",
- "type": "string"
- },
- "status": {
- "description": "status indicates success or failure in applying the configuration",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "HubSourceStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.IBMCloudPlatformSpec": {
- "description": "IBMCloudPlatformSpec holds the desired state of the IBMCloud infrastructure provider. This only includes fields that can be modified in the cluster.",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "IBMCloudPlatformSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.IBMCloudPlatformStatus": {
- "description": "IBMCloudPlatformStatus holds the current status of the IBMCloud infrastructure provider.",
- "type": "object",
- "properties": {
- "cisInstanceCRN": {
- "description": "CISInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain",
- "type": "string"
- },
- "dnsInstanceCRN": {
- "description": "DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain",
- "type": "string"
- },
- "location": {
- "description": "Location is where the cluster has been deployed",
- "type": "string"
- },
- "providerType": {
- "description": "ProviderType indicates the type of cluster that was created",
- "type": "string"
+ "conditions": {
+ "description": "conditions represents the observations of the conditional update's current status. Known types are: * Recommended, for whether the update is recommended for the current cluster.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "resourceGroupName": {
- "description": "ResourceGroupName is the Resource Group for new IBMCloud resources created for the cluster.",
- "type": "string"
+ "release": {
+ "description": "release is the target of the update.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.Release"
},
- "serviceEndpoints": {
- "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of an IBM Cloud service. These endpoints are consumed by components within the cluster to reach the respective IBM Cloud Services.",
+ "risks": {
+ "description": "risks represents the range of issues associated with updating to the target release. The cluster-version operator will evaluate all entries, and only recommend the update if there is at least one entry and all entries recommend the update.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.IBMCloudServiceEndpoint"
+ "$ref": "#/definitions/io.openshift.config.v1.ConditionalUpdateRisk"
},
"x-kubernetes-list-map-keys": [
"name"
],
- "x-kubernetes-list-type": "map"
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "name",
+ "x-kubernetes-patch-strategy": "merge"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "IBMCloudPlatformStatus",
+ "Kind": "ConditionalUpdate",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.IBMCloudServiceEndpoint": {
- "description": "IBMCloudServiceEndpoint stores the configuration of a custom url to override existing defaults of IBM Cloud Services.",
+ "io.openshift.config.v1.ConditionalUpdateRisk": {
+ "description": "ConditionalUpdateRisk represents a reason and cluster-state for not recommending a conditional update.",
"type": "object",
"required": [
+ "url",
"name",
- "url"
+ "message",
+ "matchingRules"
],
"properties": {
+ "matchingRules": {
+ "description": "matchingRules is a slice of conditions for deciding which clusters match the risk and which do not. The slice is ordered by decreasing precedence. The cluster-version operator will walk the slice in order, and stop after the first it can successfully evaluate. If no condition can be successfully evaluated, the update will not be recommended.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterCondition"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "message": {
+ "description": "message provides additional information about the risk of updating, in the event that matchingRules match the cluster state. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.",
+ "type": "string",
+ "default": ""
+ },
"name": {
- "description": "name is the name of the IBM Cloud service. Possible values are: CIS, COS, COSConfig, DNSServices, GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect, IAM, KeyProtect, ResourceController, ResourceManager, or VPC. For example, the IBM Cloud Private IAM service could be configured with the service `name` of `IAM` and `url` of `https://private.iam.cloud.ibm.com` Whereas the IBM Cloud Private VPC service for US South (Dallas) could be configured with the service `name` of `VPC` and `url` of `https://us.south.private.iaas.cloud.ibm.com`",
+ "description": "name is the CamelCase reason for not recommending a conditional update, in the event that matchingRules match the cluster state.",
"type": "string",
"default": ""
},
"url": {
- "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.",
+ "description": "url contains information about this risk.",
"type": "string",
"default": ""
}
@@ -73510,65 +74605,22 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "IBMCloudServiceEndpoint",
+ "Kind": "ConditionalUpdateRisk",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.IdentityProvider": {
- "description": "IdentityProvider provides identities for users authenticating using credentials",
+ "io.openshift.config.v1.ConfigMapFileReference": {
+ "description": "ConfigMapFileReference references a config map in a specific namespace. The namespace must be specified at the point of use.",
"type": "object",
"required": [
- "name",
- "type"
+ "name"
],
"properties": {
- "basicAuth": {
- "description": "basicAuth contains configuration options for the BasicAuth IdP",
- "$ref": "#/definitions/io.openshift.config.v1.BasicAuthIdentityProvider"
- },
- "github": {
- "description": "github enables user authentication using GitHub credentials",
- "$ref": "#/definitions/io.openshift.config.v1.GitHubIdentityProvider"
- },
- "gitlab": {
- "description": "gitlab enables user authentication using GitLab credentials",
- "$ref": "#/definitions/io.openshift.config.v1.GitLabIdentityProvider"
- },
- "google": {
- "description": "google enables user authentication using Google credentials",
- "$ref": "#/definitions/io.openshift.config.v1.GoogleIdentityProvider"
- },
- "htpasswd": {
- "description": "htpasswd enables user authentication using an HTPasswd file to validate credentials",
- "$ref": "#/definitions/io.openshift.config.v1.HTPasswdIdentityProvider"
- },
- "keystone": {
- "description": "keystone enables user authentication using keystone password credentials",
- "$ref": "#/definitions/io.openshift.config.v1.KeystoneIdentityProvider"
- },
- "ldap": {
- "description": "ldap enables user authentication using LDAP credentials",
- "$ref": "#/definitions/io.openshift.config.v1.LDAPIdentityProvider"
- },
- "mappingMethod": {
- "description": "mappingMethod determines how identities from this provider are mapped to users Defaults to \"claim\"",
+ "key": {
+ "description": "Key allows pointing to a specific key/value inside of the configmap. This is useful for logical file references.",
"type": "string"
},
"name": {
- "description": "name is used to qualify the identities returned by this provider. - It MUST be unique and not shared by any other identity provider used - It MUST be a valid path segment: name cannot equal \".\" or \"..\" or contain \"/\" or \"%\" or \":\"\n Ref: https://godoc.org/github.com/openshift/origin/pkg/user/apis/user/validation#ValidateIdentityProviderName",
- "type": "string",
- "default": ""
- },
- "openID": {
- "description": "openID enables user authentication using OpenID credentials",
- "$ref": "#/definitions/io.openshift.config.v1.OpenIDIdentityProvider"
- },
- "requestHeader": {
- "description": "requestHeader enables user authentication using request header credentials",
- "$ref": "#/definitions/io.openshift.config.v1.RequestHeaderIdentityProvider"
- },
- "type": {
- "description": "type identifies the identity provider type for this entry.",
"type": "string",
"default": ""
}
@@ -73577,55 +74629,19 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "IdentityProvider",
+ "Kind": "ConfigMapFileReference",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.IdentityProviderConfig": {
- "description": "IdentityProviderConfig contains configuration for using a specific identity provider",
+ "io.openshift.config.v1.ConfigMapNameReference": {
+ "description": "ConfigMapNameReference references a config map in a specific namespace. The namespace must be specified at the point of use.",
"type": "object",
"required": [
- "type"
+ "name"
],
"properties": {
- "basicAuth": {
- "description": "basicAuth contains configuration options for the BasicAuth IdP",
- "$ref": "#/definitions/io.openshift.config.v1.BasicAuthIdentityProvider"
- },
- "github": {
- "description": "github enables user authentication using GitHub credentials",
- "$ref": "#/definitions/io.openshift.config.v1.GitHubIdentityProvider"
- },
- "gitlab": {
- "description": "gitlab enables user authentication using GitLab credentials",
- "$ref": "#/definitions/io.openshift.config.v1.GitLabIdentityProvider"
- },
- "google": {
- "description": "google enables user authentication using Google credentials",
- "$ref": "#/definitions/io.openshift.config.v1.GoogleIdentityProvider"
- },
- "htpasswd": {
- "description": "htpasswd enables user authentication using an HTPasswd file to validate credentials",
- "$ref": "#/definitions/io.openshift.config.v1.HTPasswdIdentityProvider"
- },
- "keystone": {
- "description": "keystone enables user authentication using keystone password credentials",
- "$ref": "#/definitions/io.openshift.config.v1.KeystoneIdentityProvider"
- },
- "ldap": {
- "description": "ldap enables user authentication using LDAP credentials",
- "$ref": "#/definitions/io.openshift.config.v1.LDAPIdentityProvider"
- },
- "openID": {
- "description": "openID enables user authentication using OpenID credentials",
- "$ref": "#/definitions/io.openshift.config.v1.OpenIDIdentityProvider"
- },
- "requestHeader": {
- "description": "requestHeader enables user authentication using request header credentials",
- "$ref": "#/definitions/io.openshift.config.v1.RequestHeaderIdentityProvider"
- },
- "type": {
- "description": "type identifies the identity provider type for this entry.",
+ "name": {
+ "description": "name is the metadata.name of the referenced config map",
"type": "string",
"default": ""
}
@@ -73634,12 +74650,12 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "IdentityProviderConfig",
+ "Kind": "ConfigMapNameReference",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.Image": {
- "description": "Image governs policies related to imagestream imports and runtime configuration for external registries. It allows cluster admins to configure which registries OpenShift is allowed to import images from, extra CA trust bundles for external registries, and policies to block or allow registry hostnames. When exposing OpenShift's image registry to the public, this also lets cluster admins specify the external hostname.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.Console": {
+ "description": "Console holds cluster-wide configuration for the web console, including the logout URL, and reports the public URL of the console. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"spec"
@@ -73661,58 +74677,41 @@
"spec": {
"description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.ConsoleSpec"
},
"status": {
"description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.ConsoleStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "Image",
+ "Kind": "Console",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1.ImageContentPolicy": {
- "description": "ImageContentPolicy holds cluster-wide information about how to handle registry mirror rules. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.ConsoleAuthentication": {
+ "description": "ConsoleAuthentication defines a list of optional configuration for console authentication.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "logoutRedirect": {
+ "description": "An optional, absolute URL to redirect web browsers to after logging out of the console. If not specified, it will redirect to the default login page. This is required when using an identity provider that supports single sign-on (SSO) such as: - OpenID (Keycloak, Azure) - RequestHeader (GSSAPI, SSPI, SAML) - OAuth (GitHub, GitLab, Google) Logging out of the console will destroy the user's token. The logoutRedirect provides the user the option to perform single logout (SLO) through the identity provider to destroy their single sign-on session.",
"type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec holds user settable values for configuration",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageContentPolicySpec"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageContentPolicy",
- "Scope": "Clustered"
+ "Kind": "ConsoleAuthentication",
+ "Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageContentPolicyList": {
- "description": "ImageContentPolicyList lists the items in the ImageContentPolicy CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.ConsoleList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -73727,7 +74726,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageContentPolicy"
+ "$ref": "#/definitions/io.openshift.config.v1.Console"
}
},
"kind": {
@@ -73744,37 +74743,109 @@
"Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageContentPolicyList",
+ "Kind": "ConsoleList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageContentPolicySpec": {
- "description": "ImageContentPolicySpec is the specification of the ImageContentPolicy CRD.",
+ "io.openshift.config.v1.ConsoleSpec": {
+ "description": "ConsoleSpec is the specification of the desired behavior of the Console.",
"type": "object",
"properties": {
- "repositoryDigestMirrors": {
- "description": "repositoryDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in RepositoryDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To pull image from mirrors by tags, should set the \"allowMirrorByTags\".\n\nEach “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.",
+ "authentication": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConsoleAuthentication"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.ConsoleStatus": {
+ "description": "ConsoleStatus defines the observed status of the Console.",
+ "type": "object",
+ "required": [
+ "consoleURL"
+ ],
+ "properties": {
+ "consoleURL": {
+ "description": "The URL for the console. This will be derived from the host for the route that is created for the console.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.CustomFeatureGates": {
+ "type": "object",
+ "properties": {
+ "disabled": {
+ "description": "disabled is a list of all feature gates that you want to force off",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.RepositoryDigestMirrors"
+ "type": "string",
+ "default": ""
+ }
+ },
+ "enabled": {
+ "description": "enabled is a list of all feature gates that you want to force on",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "CustomFeatureGates",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.CustomTLSProfile": {
+ "description": "CustomTLSProfile is a user-defined TLS security profile. Be extremely careful using a custom TLS profile as invalid configurations can be catastrophic.",
+ "type": "object",
+ "required": [
+ "ciphers",
+ "minTLSVersion"
+ ],
+ "properties": {
+ "ciphers": {
+ "description": "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries their operands do not support. For example, to use DES-CBC3-SHA (yaml):\n\n ciphers:\n - DES-CBC3-SHA",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
},
- "x-kubernetes-list-map-keys": [
- "source"
- ],
- "x-kubernetes-list-type": "map"
+ "x-kubernetes-list-type": "atomic"
+ },
+ "minTLSVersion": {
+ "description": "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11\n\nNOTE: currently the highest minTLSVersion allowed is VersionTLS12",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageContentPolicySpec",
+ "Kind": "CustomTLSProfile",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageDigestMirrorSet": {
- "description": "ImageDigestMirrorSet holds cluster-wide information about how to handle registry mirror rules on using digest pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.DNS": {
+ "description": "DNS holds cluster-wide information about DNS. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"spec"
@@ -73796,24 +74867,24 @@
"spec": {
"description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrorSetSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.DNSSpec"
},
"status": {
- "description": "status contains the observed state of the resource.",
+ "description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrorSetStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.DNSStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageDigestMirrorSet",
+ "Kind": "DNS",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1.ImageDigestMirrorSetList": {
- "description": "ImageDigestMirrorSetList lists the items in the ImageDigestMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.DNSList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -73828,7 +74899,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrorSet"
+ "$ref": "#/definitions/io.openshift.config.v1.DNS"
}
},
"kind": {
@@ -73845,305 +74916,330 @@
"Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageDigestMirrorSetList",
+ "Kind": "DNSList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageDigestMirrorSetSpec": {
- "description": "ImageDigestMirrorSetSpec is the specification of the ImageDigestMirrorSet CRD.",
+ "io.openshift.config.v1.DNSPlatformSpec": {
+ "description": "DNSPlatformSpec holds cloud-provider-specific configuration for DNS administration.",
"type": "object",
- "properties": {
- "imageDigestMirrors": {
- "description": "imageDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using tag specification, users should configure a list of mirrors using \"ImageTagMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagedigestmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a specific order of mirrors, should configure them into one list of mirrors using the expected order.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrors"
- },
- "x-kubernetes-list-type": "atomic"
+ "required": [
+ "type"
+ ],
+ "properties": {
+ "aws": {
+ "description": "aws contains DNS configuration specific to the Amazon Web Services cloud provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.AWSDNSSpec"
+ },
+ "type": {
+ "description": "type is the underlying infrastructure provider for the cluster. Allowed values: \"\", \"AWS\".\n\nIndividual components may not support all platforms, and must handle unrecognized platforms with best-effort defaults.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageDigestMirrorSetSpec",
+ "Kind": "DNSPlatformSpec",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "aws": "AWS"
+ }
+ }
+ ]
+ },
+ "io.openshift.config.v1.DNSSpec": {
+ "type": "object",
+ "required": [
+ "baseDomain"
+ ],
+ "properties": {
+ "baseDomain": {
+ "description": "baseDomain is the base domain of the cluster. All managed DNS records will be sub-domains of this base.\n\nFor example, given the base domain `openshift.example.com`, an API server DNS record may be created for `cluster-api.openshift.example.com`.\n\nOnce set, this field cannot be changed.",
+ "type": "string",
+ "default": ""
+ },
+ "platform": {
+ "description": "platform holds configuration specific to the underlying infrastructure provider for DNS. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.DNSPlatformSpec"
+ },
+ "privateZone": {
+ "description": "privateZone is the location where all the DNS records that are only available internally to the cluster exist.\n\nIf this field is nil, no private records should be created.\n\nOnce set, this field cannot be changed.",
+ "$ref": "#/definitions/io.openshift.config.v1.DNSZone"
+ },
+ "publicZone": {
+ "description": "publicZone is the location where all the DNS records that are publicly accessible to the internet exist.\n\nIf this field is nil, no public records should be created.\n\nOnce set, this field cannot be changed.",
+ "$ref": "#/definitions/io.openshift.config.v1.DNSZone"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "DNSSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageDigestMirrorSetStatus": {
+ "io.openshift.config.v1.DNSStatus": {
"type": "object",
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageDigestMirrorSetStatus",
+ "Kind": "DNSStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageDigestMirrors": {
- "description": "ImageDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.",
+ "io.openshift.config.v1.DNSZone": {
+ "description": "DNSZone is used to define a DNS hosted zone. A zone can be identified by an ID or tags.",
"type": "object",
- "required": [
- "source"
- ],
"properties": {
- "mirrorSourcePolicy": {
- "description": "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.",
+ "id": {
+ "description": "id is the identifier that can be used to find the DNS hosted zone.\n\non AWS zone can be fetched using `ID` as id in [1] on Azure zone can be fetched using `ID` as a pre-determined name in [2], on GCP zone can be fetched using `ID` as a pre-determined name in [3].\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/route53/get-hosted-zone.html#options [2]: https://docs.microsoft.com/en-us/cli/azure/network/dns/zone?view=azure-cli-latest#az-network-dns-zone-show [3]: https://cloud.google.com/dns/docs/reference/v1/managedZones/get",
"type": "string"
},
- "mirrors": {
- "description": "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their digests. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\" Other cluster configuration, including (but not limited to) other imageDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table",
- "type": "array",
- "items": {
+ "tags": {
+ "description": "tags can be used to query the DNS hosted zone.\n\non AWS, resourcegroupstaggingapi [1] can be used to fetch a zone using `Tags` as tag-filters,\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html#options",
+ "type": "object",
+ "additionalProperties": {
"type": "string",
"default": ""
- },
- "x-kubernetes-list-type": "set"
- },
- "source": {
- "description": "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table",
- "type": "string",
- "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageDigestMirrors",
+ "Kind": "DNSZone",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageLabel": {
+ "io.openshift.config.v1.DelegatedAuthentication": {
+ "description": "DelegatedAuthentication allows authentication to be disabled.",
"type": "object",
- "required": [
- "name"
- ],
"properties": {
- "name": {
- "description": "Name defines the name of the label. It must have non-zero length.",
- "type": "string",
- "default": ""
- },
- "value": {
- "description": "Value defines the literal value of the label.",
- "type": "string"
+ "disabled": {
+ "description": "disabled indicates that authentication should be disabled. By default it will use delegated authentication.",
+ "type": "boolean"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageLabel",
+ "Kind": "DelegatedAuthentication",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.DelegatedAuthorization": {
+ "description": "DelegatedAuthorization allows authorization to be disabled.",
+ "type": "object",
+ "properties": {
+ "disabled": {
+ "description": "disabled indicates that authorization should be disabled. By default it will use delegated authorization.",
+ "type": "boolean"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "DelegatedAuthorization",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.DeprecatedWebhookTokenAuthenticator": {
+ "description": "deprecatedWebhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator. It's the same as WebhookTokenAuthenticator but it's missing the 'required' validation on KubeConfig field.",
"type": "object",
"required": [
- "metadata",
- "items"
+ "kubeConfig"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Image"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "kubeConfig": {
+ "description": "kubeConfig contains kube config file data which describes how to access the remote webhook service. For further details, see: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication The key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored. The namespace for this secret is determined by the point of use.",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
}
},
"x-fabric8-info": {
- "Type": "list",
+ "Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageList",
+ "Kind": "DeprecatedWebhookTokenAuthenticator",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageSpec": {
+ "io.openshift.config.v1.EquinixMetalPlatformSpec": {
+ "description": "EquinixMetalPlatformSpec holds the desired state of the Equinix Metal infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "EquinixMetalPlatformSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.EquinixMetalPlatformStatus": {
+ "description": "EquinixMetalPlatformStatus holds the current status of the Equinix Metal infrastructure provider.",
"type": "object",
"properties": {
- "additionalTrustedCA": {
- "description": "additionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted during imagestream import, pod image pull, build image pull, and imageregistry pullthrough. The namespace for this config map is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
- },
- "allowedRegistriesForImport": {
- "description": "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.RegistryLocation"
- },
- "x-kubernetes-list-type": "atomic"
- },
- "externalRegistryHostnames": {
- "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "imageStreamImportMode": {
- "description": "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be set to `Legacy` or `PreserveOriginal` or the empty string. If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. When empty, the behaviour will be decided based on the payload type advertised by the ClusterVersion status, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.",
- "type": "string",
- "default": "",
- "enum": [
- "Legacy",
- "PreserveOriginal"
- ]
+ "apiServerInternalIP": {
+ "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.",
+ "type": "string"
},
- "registrySources": {
- "description": "registrySources contains configuration that determines how the container runtime should treat individual registries when accessing images for builds+pods. (e.g. whether or not to allow insecure access). It does not contain configuration for the internal cluster registry.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.RegistrySources"
+ "ingressIP": {
+ "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageSpec",
+ "Kind": "EquinixMetalPlatformStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageStatus": {
+ "io.openshift.config.v1.EtcdConnectionInfo": {
+ "description": "EtcdConnectionInfo holds information necessary for connecting to an etcd server",
"type": "object",
+ "required": [
+ "ca",
+ "certFile",
+ "keyFile"
+ ],
"properties": {
- "externalRegistryHostnames": {
- "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.",
+ "ca": {
+ "description": "CA is a file containing trusted roots for the etcd server certificates",
+ "type": "string",
+ "default": ""
+ },
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
+ "type": "string",
+ "default": ""
+ },
+ "keyFile": {
+ "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "type": "string",
+ "default": ""
+ },
+ "urls": {
+ "description": "URLs are the URLs for etcd",
"type": "array",
"items": {
"type": "string",
"default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "imageStreamImportMode": {
- "description": "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. This value will be reconciled based on either the spec value or if no spec value is specified, the image registry operator would look at the ClusterVersion status to determine the payload type and set the import mode accordingly, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.",
- "type": "string",
- "enum": [
- "Legacy",
- "PreserveOriginal"
- ]
- },
- "internalRegistryHostname": {
- "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. This value is set by the image registry operator which controls the internal registry hostname.",
- "type": "string"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageStatus",
+ "Kind": "EtcdConnectionInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageTagMirrorSet": {
- "description": "ImageTagMirrorSet holds cluster-wide information about how to handle registry mirror rules on using tag pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.EtcdStorageConfig": {
"type": "object",
"required": [
- "spec"
+ "ca",
+ "certFile",
+ "keyFile",
+ "storagePrefix"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "ca": {
+ "description": "CA is a file containing trusted roots for the etcd server certificates",
+ "type": "string",
+ "default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
+ "type": "string",
+ "default": ""
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "keyFile": {
+ "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "type": "string",
+ "default": ""
},
- "spec": {
- "description": "spec holds user settable values for configuration",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrorSetSpec"
+ "storagePrefix": {
+ "description": "StoragePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located.",
+ "type": "string",
+ "default": ""
},
- "status": {
- "description": "status contains the observed state of the resource.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrorSetStatus"
+ "urls": {
+ "description": "URLs are the URLs for etcd",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageTagMirrorSet",
- "Scope": "Clustered"
+ "Kind": "EtcdStorageConfig",
+ "Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageTagMirrorSetList": {
- "description": "ImageTagMirrorSetList lists the items in the ImageTagMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.ExternalIPConfig": {
+ "description": "ExternalIPConfig specifies some IP blocks relevant for the ExternalIP field of a Service resource.",
"type": "object",
- "required": [
- "metadata",
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
+ "autoAssignCIDRs": {
+ "description": "autoAssignCIDRs is a list of CIDRs from which to automatically assign Service.ExternalIP. These are assigned when the service is of type LoadBalancer. In general, this is only useful for bare-metal clusters. In Openshift 3.x, this was misleadingly called \"IngressIPs\". Automatically assigned External IPs are not affected by any ExternalIPPolicy rules. Currently, only one entry may be provided.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrorSet"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "policy": {
+ "description": "policy is a set of restrictions applied to the ExternalIP field. If nil or empty, then ExternalIP is not allowed to be set.",
+ "$ref": "#/definitions/io.openshift.config.v1.ExternalIPPolicy"
}
},
"x-fabric8-info": {
- "Type": "list",
+ "Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageTagMirrorSetList",
+ "Kind": "ExternalIPConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageTagMirrorSetSpec": {
- "description": "ImageTagMirrorSetSpec is the specification of the ImageTagMirrorSet CRD.",
+ "io.openshift.config.v1.ExternalIPPolicy": {
+ "description": "ExternalIPPolicy configures exactly which IPs are allowed for the ExternalIP field in a Service. If the zero struct is supplied, then none are permitted. The policy controller always allows automatically assigned external IPs.",
"type": "object",
"properties": {
- "imageTagMirrors": {
- "description": "imageTagMirrors allows images referenced by image tags in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageTagMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using digest specification only, users should configure a list of mirrors using \"ImageDigestMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagetagmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a deterministic order of mirrors, should configure them into one list of mirrors using the expected order.",
+ "allowedCIDRs": {
+ "description": "allowedCIDRs is the list of allowed CIDRs.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrors"
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "rejectedCIDRs": {
+ "description": "rejectedCIDRs is the list of disallowed CIDRs. These take precedence over allowedCIDRs.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
},
"x-kubernetes-list-type": "atomic"
}
@@ -74152,56 +75248,48 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageTagMirrorSetSpec",
+ "Kind": "ExternalIPPolicy",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageTagMirrorSetStatus": {
+ "io.openshift.config.v1.ExternalPlatformSpec": {
+ "description": "ExternalPlatformSpec holds the desired state for the generic External infrastructure provider.",
"type": "object",
+ "properties": {
+ "platformName": {
+ "description": "PlatformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time. This field is solely for informational and reporting purposes and is not expected to be used for decision-making.",
+ "type": "string",
+ "default": "Unknown"
+ }
+ },
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageTagMirrorSetStatus",
+ "Kind": "ExternalPlatformSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ImageTagMirrors": {
- "description": "ImageTagMirrors holds cluster-wide information about how to handle mirrors in the registries config.",
+ "io.openshift.config.v1.ExternalPlatformStatus": {
+ "description": "ExternalPlatformStatus holds the current status of the generic External infrastructure provider.",
"type": "object",
- "required": [
- "source"
- ],
"properties": {
- "mirrorSourcePolicy": {
- "description": "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.",
- "type": "string"
- },
- "mirrors": {
- "description": "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their tags. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Configuring a list of mirrors using \"ImageDigestMirrorSet\" CRD and forcing digest-pulls for mirrors avoids that issue. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\". Other cluster configuration, including (but not limited to) other imageTagMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "set"
- },
- "source": {
- "description": "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table",
- "type": "string",
- "default": ""
+ "cloudControllerManager": {
+ "description": "cloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI). When omitted, new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.CloudControllerManagerStatus"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ImageTagMirrors",
+ "Kind": "ExternalPlatformStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.Infrastructure": {
- "description": "Infrastructure holds cluster-wide information about Infrastructure. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.FeatureGate": {
+ "description": "Feature holds cluster-wide information about feature gates. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"spec"
@@ -74223,24 +75311,80 @@
"spec": {
"description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.InfrastructureSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.FeatureGateSpec"
},
"status": {
"description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.InfrastructureStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.FeatureGateStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "Infrastructure",
+ "Kind": "FeatureGate",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1.InfrastructureList": {
- "description": "InfrastructureList is\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.FeatureGateAttributes": {
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "name": {
+ "description": "name is the name of the FeatureGate.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "FeatureGateAttributes",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.FeatureGateDetails": {
+ "type": "object",
+ "required": [
+ "version"
+ ],
+ "properties": {
+ "disabled": {
+ "description": "disabled is a list of all feature gates that are disabled in the cluster for the named version.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.FeatureGateAttributes"
+ }
+ },
+ "enabled": {
+ "description": "enabled is a list of all feature gates that are enabled in the cluster for the named version.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.FeatureGateAttributes"
+ }
+ },
+ "version": {
+ "description": "version matches the version provided by the ClusterVersion and in the ClusterOperator.Status.Versions field.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "FeatureGateDetails",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.FeatureGateList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -74255,7 +75399,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Infrastructure"
+ "$ref": "#/definitions/io.openshift.config.v1.FeatureGate"
}
},
"kind": {
@@ -74272,274 +75416,218 @@
"Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "InfrastructureList",
+ "Kind": "FeatureGateList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.InfrastructureSpec": {
- "description": "InfrastructureSpec contains settings that apply to the cluster infrastructure.",
+ "io.openshift.config.v1.FeatureGateSelection": {
"type": "object",
"properties": {
- "cloudConfig": {
- "description": "cloudConfig is a reference to a ConfigMap containing the cloud provider configuration file. This configuration file is used to configure the Kubernetes cloud provider integration when using the built-in cloud provider integration or the external cloud controller manager. The namespace for this config map is openshift-config.\n\ncloudConfig should only be consumed by the kube_cloud_config controller. The controller is responsible for using the user configuration in the spec for various platforms and combining that with the user provided ConfigMap in this field to create a stitched kube cloud config. The controller generates a ConfigMap `kube-cloud-config` in `openshift-config-managed` namespace with the kube cloud config is stored in `cloud.conf` key. All the clients are expected to use the generated ConfigMap only.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapFileReference"
+ "customNoUpgrade": {
+ "description": "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.",
+ "$ref": "#/definitions/io.openshift.config.v1.CustomFeatureGates"
},
- "platformSpec": {
- "description": "platformSpec holds desired information specific to the underlying infrastructure provider.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.PlatformSpec"
- }
- },
+ "featureSet": {
+ "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.",
+ "type": "string"
+ }
+ },
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "InfrastructureSpec",
+ "Kind": "FeatureGateSelection",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "featureSet",
+ "fields-to-discriminateBy": {
+ "customNoUpgrade": "CustomNoUpgrade"
+ }
+ }
+ ]
},
- "io.openshift.config.v1.InfrastructureStatus": {
- "description": "InfrastructureStatus describes the infrastructure the cluster is leveraging.",
+ "io.openshift.config.v1.FeatureGateSpec": {
"type": "object",
- "required": [
- "infrastructureName",
- "etcdDiscoveryDomain",
- "apiServerURL",
- "apiServerInternalURI",
- "controlPlaneTopology",
- "infrastructureTopology"
- ],
"properties": {
- "apiServerInternalURI": {
- "description": "apiServerInternalURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerInternalURL can be used by components like kubelets, to contact the Kubernetes API server using the infrastructure provider rather than Kubernetes networking.",
- "type": "string",
- "default": ""
- },
- "apiServerURL": {
- "description": "apiServerURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerURL can be used by components like the web console to tell users where to find the Kubernetes API.",
- "type": "string",
- "default": ""
- },
- "controlPlaneTopology": {
- "description": "controlPlaneTopology expresses the expectations for operands that normally run on control nodes. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation The 'External' mode indicates that the control plane is hosted externally to the cluster and that its components are not visible within the cluster.",
- "type": "string",
- "default": ""
- },
- "cpuPartitioning": {
- "description": "cpuPartitioning expresses if CPU partitioning is a currently enabled feature in the cluster. CPU Partitioning means that this cluster can support partitioning workloads to specific CPU Sets. Valid values are \"None\" and \"AllNodes\". When omitted, the default value is \"None\". The default value of \"None\" indicates that no nodes will be setup with CPU partitioning. The \"AllNodes\" value indicates that all nodes have been setup with CPU partitioning, and can then be further configured via the PerformanceProfile API.",
- "type": "string",
- "default": "None"
- },
- "etcdDiscoveryDomain": {
- "description": "etcdDiscoveryDomain is the domain used to fetch the SRV records for discovering etcd servers and clients. For more info: https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery deprecated: as of 4.7, this field is no longer set or honored. It will be removed in a future release.",
- "type": "string",
- "default": ""
- },
- "infrastructureName": {
- "description": "infrastructureName uniquely identifies a cluster with a human friendly name. Once set it should not be changed. Must be of max length 27 and must have only alphanumeric or hyphen characters.",
- "type": "string",
- "default": ""
- },
- "infrastructureTopology": {
- "description": "infrastructureTopology expresses the expectations for infrastructure services that do not run on control plane nodes, usually indicated by a node selector for a `role` value other than `master`. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation NOTE: External topology mode is not applicable for this field.",
- "type": "string",
- "default": ""
+ "customNoUpgrade": {
+ "description": "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.",
+ "$ref": "#/definitions/io.openshift.config.v1.CustomFeatureGates"
},
- "platform": {
- "description": "platform is the underlying infrastructure provider for the cluster.\n\nDeprecated: Use platformStatus.type instead.",
+ "featureSet": {
+ "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.",
"type": "string"
- },
- "platformStatus": {
- "description": "platformStatus holds status information specific to the underlying infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.PlatformStatus"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "InfrastructureStatus",
+ "Kind": "FeatureGateSpec",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "featureSet",
+ "fields-to-discriminateBy": {
+ "customNoUpgrade": "CustomNoUpgrade"
+ }
+ }
+ ]
},
- "io.openshift.config.v1.Ingress": {
- "description": "Ingress holds cluster-wide information about ingress, including the default ingress domain used for routes. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.FeatureGateStatus": {
"type": "object",
"required": [
- "spec"
+ "featureGates"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec holds user settable values for configuration",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.IngressSpec"
+ "conditions": {
+ "description": "conditions represent the observations of the current state. Known .status.conditions.type are: \"DeterminationDegraded\"",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.IngressStatus"
+ "featureGates": {
+ "description": "featureGates contains a list of enabled and disabled featureGates that are keyed by payloadVersion. Operators other than the CVO and cluster-config-operator, must read the .status.featureGates, locate the version they are managing, find the enabled/disabled featuregates and make the operand and operator match. The enabled/disabled values for a particular version may change during the life of the cluster as various .spec.featureSet values are selected. Operators may choose to restart their processes to pick up these changes, but remembering past enable/disable lists is beyond the scope of this API and is the responsibility of individual operators. Only featureGates with .version in the ClusterVersion.status will be present in this list.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.FeatureGateDetails"
+ },
+ "x-kubernetes-list-map-keys": [
+ "version"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "Ingress",
- "Scope": "Clustered"
+ "Kind": "FeatureGateStatus",
+ "Scope": "Namespaced"
}
},
- "io.openshift.config.v1.IngressList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.FeatureGateTests": {
"type": "object",
"required": [
- "metadata",
- "items"
+ "featureGate",
+ "tests"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "featureGate": {
+ "description": "FeatureGate is the name of the FeatureGate as it appears in The FeatureGate CR instance.",
+ "type": "string",
+ "default": ""
},
- "items": {
+ "tests": {
+ "description": "Tests contains an item for every TestName",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Ingress"
+ "$ref": "#/definitions/io.openshift.config.v1.TestDetails"
}
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "list",
+ "Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "IngressList",
+ "Kind": "FeatureGateTests",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.IngressPlatformSpec": {
- "description": "IngressPlatformSpec holds the desired state of Ingress specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.",
+ "io.openshift.config.v1.GCPPlatformSpec": {
+ "description": "GCPPlatformSpec holds the desired state of the Google Cloud Platform infrastructure provider. This only includes fields that can be modified in the cluster.",
"type": "object",
- "required": [
- "type"
- ],
- "properties": {
- "aws": {
- "description": "aws contains settings specific to the Amazon Web Services infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.AWSIngressSpec"
- },
- "type": {
- "description": "type is the underlying infrastructure provider for the cluster. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.",
- "type": "string",
- "default": ""
- }
- },
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "IngressPlatformSpec",
+ "Kind": "GCPPlatformSpec",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "aws": "AWS"
- }
- }
- ]
+ }
},
- "io.openshift.config.v1.IngressSpec": {
+ "io.openshift.config.v1.GCPPlatformStatus": {
+ "description": "GCPPlatformStatus holds the current status of the Google Cloud Platform infrastructure provider.",
"type": "object",
"required": [
- "domain"
+ "projectID",
+ "region"
],
"properties": {
- "appsDomain": {
- "description": "appsDomain is an optional domain to use instead of the one specified in the domain field when a Route is created without specifying an explicit host. If appsDomain is nonempty, this value is used to generate default host values for Route. Unlike domain, appsDomain may be modified after installation. This assumes a new ingresscontroller has been setup with a wildcard certificate.",
- "type": "string"
+ "cloudLoadBalancerConfig": {
+ "description": "cloudLoadBalancerConfig is a union that contains the IP addresses of API, API-Int and Ingress Load Balancers created on the cloud platform. These values would not be populated on on-prem platforms. These Load Balancer IPs are used to configure the in-cluster DNS instances for API, API-Int and Ingress services. `dnsType` is expected to be set to `ClusterHosted` when these Load Balancer IP addresses are populated and used.",
+ "default": {
+ "dnsType": "PlatformDefault"
+ },
+ "$ref": "#/definitions/io.openshift.config.v1.CloudLoadBalancerConfig"
},
- "componentRoutes": {
- "description": "componentRoutes is an optional list of routes that are managed by OpenShift components that a cluster-admin is able to configure the hostname and serving certificate for. The namespace and name of each route in this list should match an existing entry in the status.componentRoutes list.\n\nTo determine the set of configurable Routes, look at namespace and name of entries in the .status.componentRoutes list, where participating operators write the status of configurable routes.",
+ "projectID": {
+ "description": "resourceGroupName is the Project ID for new GCP resources created for the cluster.",
+ "type": "string",
+ "default": ""
+ },
+ "region": {
+ "description": "region holds the region for new GCP resources created for the cluster.",
+ "type": "string",
+ "default": ""
+ },
+ "resourceLabels": {
+ "description": "resourceLabels is a list of additional labels to apply to GCP resources created for the cluster. See https://cloud.google.com/compute/docs/labeling-resources for information on labeling GCP resources. GCP supports a maximum of 64 labels per resource. OpenShift reserves 32 labels for internal use, allowing 32 labels for user configuration.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ComponentRouteSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.GCPResourceLabel"
},
"x-kubernetes-list-map-keys": [
- "namespace",
- "name"
+ "key"
],
"x-kubernetes-list-type": "map"
},
- "domain": {
- "description": "domain is used to generate a default host name for a route when the route's host name is empty. The generated host name will follow this pattern: \"\u003croute-name\u003e.\u003croute-namespace\u003e.\u003cdomain\u003e\".\n\nIt is also used as the default wildcard domain suffix for ingress. The default ingresscontroller domain will follow this pattern: \"*.\u003cdomain\u003e\".\n\nOnce set, changing domain is not currently supported.",
- "type": "string",
- "default": ""
- },
- "loadBalancer": {
- "description": "loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure provider of the current cluster and are required for Ingress Controller to work on OpenShift.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.LoadBalancer"
- },
- "requiredHSTSPolicies": {
- "description": "requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes matching the domainPattern/s and namespaceSelector/s that are specified in the policy. Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route annotation, and affect route admission.\n\nA candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: \"haproxy.router.openshift.io/hsts_header\" E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains\n\n- For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route is rejected. - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies determines the route's admission status. - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, then it may use any HSTS Policy annotation.\n\nThe HSTS policy configuration may be changed after routes have already been created. An update to a previously admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working.\n\nNote that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid.",
+ "resourceTags": {
+ "description": "resourceTags is a list of additional tags to apply to GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on tagging GCP resources. GCP supports a maximum of 50 tags per resource.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.RequiredHSTSPolicy"
- }
+ "$ref": "#/definitions/io.openshift.config.v1.GCPResourceTag"
+ },
+ "x-kubernetes-list-map-keys": [
+ "key"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "IngressSpec",
+ "Kind": "GCPPlatformStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.IngressStatus": {
+ "io.openshift.config.v1.GCPResourceLabel": {
+ "description": "GCPResourceLabel is a label to apply to GCP resources created for the cluster.",
"type": "object",
+ "required": [
+ "key",
+ "value"
+ ],
"properties": {
- "componentRoutes": {
- "description": "componentRoutes is where participating operators place the current route status for routes whose hostnames and serving certificates can be customized by the cluster-admin.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ComponentRouteStatus"
- },
- "x-kubernetes-list-map-keys": [
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "key": {
+ "description": "key is the key part of the label. A label key can have a maximum of 63 characters and cannot be empty. Label key must begin with a lowercase letter, and must contain only lowercase letters, numeric characters, and the following special characters `_-`. Label key must not have the reserved prefixes `kubernetes-io` and `openshift-io`.",
+ "type": "string",
+ "default": ""
},
- "defaultPlacement": {
- "description": "defaultPlacement is set at installation time to control which nodes will host the ingress router pods by default. The options are control-plane nodes or worker nodes.\n\nThis field works by dictating how the Cluster Ingress Operator will consider unset replicas and nodePlacement fields in IngressController resources when creating the corresponding Deployments.\n\nSee the documentation for the IngressController replicas and nodePlacement fields for more information.\n\nWhen omitted, the default value is Workers",
+ "value": {
+ "description": "value is the value part of the label. A label value can have a maximum of 63 characters and cannot be empty. Value must contain only lowercase letters, numeric characters, and the following special characters `_-`.",
"type": "string",
"default": ""
}
@@ -74548,51 +75636,31 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "IngressStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.IntermediateTLSProfile": {
- "description": "IntermediateTLSProfile is a TLS security profile based on: https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "IntermediateTLSProfile",
+ "Kind": "GCPResourceLabel",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.KeystoneIdentityProvider": {
- "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials",
+ "io.openshift.config.v1.GCPResourceTag": {
+ "description": "GCPResourceTag is a tag to apply to GCP resources created for the cluster.",
"type": "object",
"required": [
- "url",
- "domainName"
+ "parentID",
+ "key",
+ "value"
],
"properties": {
- "ca": {
- "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
- },
- "domainName": {
- "description": "domainName is required for keystone v3",
+ "key": {
+ "description": "key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty. Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `._-`.",
"type": "string",
"default": ""
},
- "tlsClientCert": {
- "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
- },
- "tlsClientKey": {
- "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ "parentID": {
+ "description": "parentID is the ID of the hierarchical resource where the tags are defined, e.g. at the Organization or the Project level. To find the Organization or Project ID refer to the following pages: https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id, https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects. An OrganizationID must consist of decimal numbers, and cannot have leading zeroes. A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.",
+ "type": "string",
+ "default": ""
},
- "url": {
- "description": "url is the remote URL to connect to",
+ "value": {
+ "description": "value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty. Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `_-.@%=+:,*#\u0026(){}[]` and spaces.",
"type": "string",
"default": ""
}
@@ -74601,101 +75669,140 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "KeystoneIdentityProvider",
+ "Kind": "GCPResourceTag",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.KubeClientConfig": {
+ "io.openshift.config.v1.GenericAPIServerConfig": {
+ "description": "GenericAPIServerConfig is an inline-able struct for aggregated apiservers that need to store data in etcd",
"type": "object",
"required": [
- "kubeConfig",
- "connectionOverrides"
+ "servingInfo",
+ "corsAllowedOrigins",
+ "auditConfig",
+ "storageConfig",
+ "admission",
+ "kubeClientConfig"
],
"properties": {
- "connectionOverrides": {
- "description": "connectionOverrides specifies client overrides for system components to loop back to this master.",
+ "admission": {
+ "description": "admissionConfig holds information about how to configure admission.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClientConnectionOverrides"
+ "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig"
},
- "kubeConfig": {
- "description": "kubeConfig is a .kubeconfig filename for going to the owning kube-apiserver. Empty uses an in-cluster-config",
- "type": "string",
- "default": ""
+ "auditConfig": {
+ "description": "auditConfig describes how to configure audit information",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.AuditConfig"
+ },
+ "corsAllowedOrigins": {
+ "description": "corsAllowedOrigins",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "kubeClientConfig": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig"
+ },
+ "servingInfo": {
+ "description": "servingInfo describes how to start serving",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
+ },
+ "storageConfig": {
+ "description": "storageConfig contains information about how to use",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "KubeClientConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.KubevirtPlatformSpec": {
- "description": "KubevirtPlatformSpec holds the desired state of the kubevirt infrastructure provider. This only includes fields that can be modified in the cluster.",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "KubevirtPlatformSpec",
+ "Kind": "GenericAPIServerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.KubevirtPlatformStatus": {
- "description": "KubevirtPlatformStatus holds the current status of the kubevirt infrastructure provider.",
+ "io.openshift.config.v1.GenericControllerConfig": {
+ "description": "GenericControllerConfig provides information to configure a controller",
"type": "object",
+ "required": [
+ "servingInfo",
+ "leaderElection",
+ "authentication",
+ "authorization"
+ ],
"properties": {
- "apiServerInternalIP": {
- "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.",
- "type": "string"
+ "authentication": {
+ "description": "authentication allows configuration of authentication for the endpoints",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.DelegatedAuthentication"
},
- "ingressIP": {
- "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.",
- "type": "string"
+ "authorization": {
+ "description": "authorization allows configuration of authentication for the endpoints",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.DelegatedAuthorization"
+ },
+ "leaderElection": {
+ "description": "leaderElection provides information to elect a leader. Only override this if you have a specific need",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.LeaderElection"
+ },
+ "servingInfo": {
+ "description": "ServingInfo is the HTTP serving information for the controller's endpoints",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "KubevirtPlatformStatus",
+ "Kind": "GenericControllerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.LDAPAttributeMapping": {
- "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields",
+ "io.openshift.config.v1.GitHubIdentityProvider": {
+ "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials",
"type": "object",
"required": [
- "id"
+ "clientID",
+ "clientSecret"
],
"properties": {
- "email": {
- "description": "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "ca": {
+ "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value. The namespace for this config map is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
},
- "id": {
- "description": "id is the list of attributes whose values should be used as the user ID. Required. First non-empty attribute is used. At least one attribute is required. If none of the listed attribute have a value, authentication fails. LDAP standard identity attribute is \"dn\"",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "clientID": {
+ "description": "clientID is the oauth client ID",
+ "type": "string",
+ "default": ""
},
- "name": {
- "description": "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"",
+ "clientSecret": {
+ "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ },
+ "hostname": {
+ "description": "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value configured at /setup/settings#hostname.",
+ "type": "string",
+ "default": ""
+ },
+ "organizations": {
+ "description": "organizations optionally restricts which organizations are allowed to log in",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "preferredUsername": {
- "description": "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"",
+ "teams": {
+ "description": "teams optionally restricts which teams are allowed to log in. Format is \u003corg\u003e/\u003cteam\u003e.",
"type": "array",
"items": {
"type": "string",
@@ -74707,46 +75814,36 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "LDAPAttributeMapping",
+ "Kind": "GitHubIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.LDAPIdentityProvider": {
- "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials",
+ "io.openshift.config.v1.GitLabIdentityProvider": {
+ "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials",
"type": "object",
"required": [
- "url",
- "insecure",
- "attributes"
+ "clientID",
+ "clientSecret",
+ "url"
],
"properties": {
- "attributes": {
- "description": "attributes maps LDAP attributes to identities",
+ "ca": {
+ "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.LDAPAttributeMapping"
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
},
- "bindDN": {
- "description": "bindDN is an optional DN to bind with during the search phase.",
+ "clientID": {
+ "description": "clientID is the oauth client ID",
"type": "string",
"default": ""
},
- "bindPassword": {
- "description": "bindPassword is an optional reference to a secret by name containing a password to bind with during the search phase. The key \"bindPassword\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.",
+ "clientSecret": {
+ "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.",
"default": {},
"$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
},
- "ca": {
- "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
- },
- "insecure": {
- "description": "insecure, if true, indicates the connection should not use TLS WARNING: Should not be set to `true` with the URL scheme \"ldaps://\" as \"ldaps://\" URLs always\n attempt to connect using TLS, even when `insecure` is set to `true`\nWhen `true`, \"ldap://\" URLS connect insecurely. When `false`, \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830.",
- "type": "boolean",
- "default": false
- },
"url": {
- "description": "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is: ldap://host:port/basedn?attribute?scope?filter",
+ "description": "url is the oauth server base URL",
"type": "string",
"default": ""
}
@@ -74755,187 +75852,397 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "LDAPIdentityProvider",
+ "Kind": "GitLabIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.LeaderElection": {
- "description": "LeaderElection provides information to elect a leader",
+ "io.openshift.config.v1.GoogleIdentityProvider": {
+ "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials",
"type": "object",
"required": [
- "leaseDuration",
- "renewDeadline",
- "retryPeriod"
+ "clientID",
+ "clientSecret"
],
"properties": {
- "disable": {
- "description": "disable allows leader election to be suspended while allowing a fully defaulted \"normal\" startup case.",
- "type": "boolean"
- },
- "leaseDuration": {
- "description": "leaseDuration is the duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "name": {
- "description": "name indicates what name to use for the resource",
- "type": "string"
- },
- "namespace": {
- "description": "namespace indicates which namespace the resource is in",
- "type": "string"
+ "clientID": {
+ "description": "clientID is the oauth client ID",
+ "type": "string",
+ "default": ""
},
- "renewDeadline": {
- "description": "renewDeadline is the interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "clientSecret": {
+ "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
},
- "retryPeriod": {
- "description": "retryPeriod is the duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "hostedDomain": {
+ "description": "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "LeaderElection",
+ "Kind": "GoogleIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.LoadBalancer": {
+ "io.openshift.config.v1.HTPasswdIdentityProvider": {
+ "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials",
"type": "object",
+ "required": [
+ "fileData"
+ ],
"properties": {
- "platform": {
- "description": "platform holds configuration specific to the underlying infrastructure provider for the ingress load balancers. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.",
+ "fileData": {
+ "description": "fileData is a required reference to a secret by name containing the data to use as the htpasswd file. The key \"htpasswd\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. If the specified htpasswd data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.IngressPlatformSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "LoadBalancer",
+ "Kind": "HTPasswdIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.MTUMigration": {
- "description": "MTUMigration contains infomation about MTU migration.",
+ "io.openshift.config.v1.HTTPServingInfo": {
+ "description": "HTTPServingInfo holds configuration for serving HTTP",
"type": "object",
+ "required": [
+ "bindAddress",
+ "bindNetwork",
+ "certFile",
+ "keyFile",
+ "maxRequestsInFlight",
+ "requestTimeoutSeconds"
+ ],
"properties": {
- "machine": {
- "description": "Machine contains MTU migration configuration for the machine's uplink.",
- "$ref": "#/definitions/io.openshift.config.v1.MTUMigrationValues"
+ "bindAddress": {
+ "description": "BindAddress is the ip:port to serve on",
+ "type": "string",
+ "default": ""
},
- "network": {
- "description": "Network contains MTU migration configuration for the default network.",
- "$ref": "#/definitions/io.openshift.config.v1.MTUMigrationValues"
+ "bindNetwork": {
+ "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"",
+ "type": "string",
+ "default": ""
+ },
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
+ "type": "string",
+ "default": ""
+ },
+ "cipherSuites": {
+ "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "clientCA": {
+ "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates",
+ "type": "string"
+ },
+ "keyFile": {
+ "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "type": "string",
+ "default": ""
+ },
+ "maxRequestsInFlight": {
+ "description": "MaxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "minTLSVersion": {
+ "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants",
+ "type": "string"
+ },
+ "namedCertificates": {
+ "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.NamedCertificate"
+ }
+ },
+ "requestTimeoutSeconds": {
+ "description": "RequestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "MTUMigration",
+ "Kind": "HTTPServingInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.MTUMigrationValues": {
- "description": "MTUMigrationValues contains the values for a MTU migration.",
+ "io.openshift.config.v1.HubSource": {
+ "description": "HubSource is used to specify the hub source and its configuration",
"type": "object",
"required": [
- "to"
+ "name",
+ "disabled"
],
"properties": {
- "from": {
- "description": "From is the MTU to migrate from.",
- "type": "integer",
- "format": "int64"
+ "disabled": {
+ "description": "disabled is used to disable a default hub source on cluster",
+ "type": "boolean",
+ "default": false
},
- "to": {
- "description": "To is the MTU to migrate to.",
- "type": "integer",
- "format": "int64"
+ "name": {
+ "description": "name is the name of one of the default hub sources",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "MTUMigrationValues",
+ "Kind": "HubSource",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.MaxAgePolicy": {
- "description": "MaxAgePolicy contains a numeric range for specifying a compliant HSTS max-age for the enclosing RequiredHSTSPolicy",
+ "io.openshift.config.v1.HubSourceStatus": {
+ "description": "HubSourceStatus is used to reflect the current state of applying the configuration to a default source",
"type": "object",
"properties": {
- "largestMaxAge": {
- "description": "The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age This value can be left unspecified, in which case no upper limit is enforced.",
- "type": "integer",
- "format": "int32"
+ "message": {
+ "description": "message provides more information regarding failures",
+ "type": "string"
},
- "smallestMaxAge": {
- "description": "The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary tool for administrators to quickly correct mistakes. This value can be left unspecified, in which case no lower limit is enforced.",
- "type": "integer",
- "format": "int32"
+ "status": {
+ "description": "status indicates success or failure in applying the configuration",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "MaxAgePolicy",
+ "Kind": "HubSourceStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ModernTLSProfile": {
- "description": "ModernTLSProfile is a TLS security profile based on: https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility",
+ "io.openshift.config.v1.IBMCloudPlatformSpec": {
+ "description": "IBMCloudPlatformSpec holds the desired state of the IBMCloud infrastructure provider. This only includes fields that can be modified in the cluster.",
"type": "object",
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ModernTLSProfile",
+ "Kind": "IBMCloudPlatformSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.NamedCertificate": {
- "description": "NamedCertificate specifies a certificate/key, and the names it should be served for",
+ "io.openshift.config.v1.IBMCloudPlatformStatus": {
+ "description": "IBMCloudPlatformStatus holds the current status of the IBMCloud infrastructure provider.",
+ "type": "object",
+ "properties": {
+ "cisInstanceCRN": {
+ "description": "CISInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain",
+ "type": "string"
+ },
+ "dnsInstanceCRN": {
+ "description": "DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain",
+ "type": "string"
+ },
+ "location": {
+ "description": "Location is where the cluster has been deployed",
+ "type": "string"
+ },
+ "providerType": {
+ "description": "ProviderType indicates the type of cluster that was created",
+ "type": "string"
+ },
+ "resourceGroupName": {
+ "description": "ResourceGroupName is the Resource Group for new IBMCloud resources created for the cluster.",
+ "type": "string"
+ },
+ "serviceEndpoints": {
+ "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of an IBM Cloud service. These endpoints are consumed by components within the cluster to reach the respective IBM Cloud Services.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.IBMCloudServiceEndpoint"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "IBMCloudPlatformStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.IBMCloudServiceEndpoint": {
+ "description": "IBMCloudServiceEndpoint stores the configuration of a custom url to override existing defaults of IBM Cloud Services.",
"type": "object",
"required": [
- "certFile",
- "keyFile"
+ "name",
+ "url"
],
"properties": {
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
+ "name": {
+ "description": "name is the name of the IBM Cloud service. Possible values are: CIS, COS, COSConfig, DNSServices, GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect, IAM, KeyProtect, ResourceController, ResourceManager, or VPC. For example, the IBM Cloud Private IAM service could be configured with the service `name` of `IAM` and `url` of `https://private.iam.cloud.ibm.com` Whereas the IBM Cloud Private VPC service for US South (Dallas) could be configured with the service `name` of `VPC` and `url` of `https://us.south.private.iaas.cloud.ibm.com`",
"type": "string",
"default": ""
},
- "keyFile": {
- "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "url": {
+ "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "IBMCloudServiceEndpoint",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.IdentityProvider": {
+ "description": "IdentityProvider provides identities for users authenticating using credentials",
+ "type": "object",
+ "required": [
+ "name",
+ "type"
+ ],
+ "properties": {
+ "basicAuth": {
+ "description": "basicAuth contains configuration options for the BasicAuth IdP",
+ "$ref": "#/definitions/io.openshift.config.v1.BasicAuthIdentityProvider"
+ },
+ "github": {
+ "description": "github enables user authentication using GitHub credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.GitHubIdentityProvider"
+ },
+ "gitlab": {
+ "description": "gitlab enables user authentication using GitLab credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.GitLabIdentityProvider"
+ },
+ "google": {
+ "description": "google enables user authentication using Google credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.GoogleIdentityProvider"
+ },
+ "htpasswd": {
+ "description": "htpasswd enables user authentication using an HTPasswd file to validate credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.HTPasswdIdentityProvider"
+ },
+ "keystone": {
+ "description": "keystone enables user authentication using keystone password credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.KeystoneIdentityProvider"
+ },
+ "ldap": {
+ "description": "ldap enables user authentication using LDAP credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.LDAPIdentityProvider"
+ },
+ "mappingMethod": {
+ "description": "mappingMethod determines how identities from this provider are mapped to users Defaults to \"claim\"",
+ "type": "string"
+ },
+ "name": {
+ "description": "name is used to qualify the identities returned by this provider. - It MUST be unique and not shared by any other identity provider used - It MUST be a valid path segment: name cannot equal \".\" or \"..\" or contain \"/\" or \"%\" or \":\"\n Ref: https://godoc.org/github.com/openshift/origin/pkg/user/apis/user/validation#ValidateIdentityProviderName",
"type": "string",
"default": ""
},
- "names": {
- "description": "Names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "openID": {
+ "description": "openID enables user authentication using OpenID credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.OpenIDIdentityProvider"
+ },
+ "requestHeader": {
+ "description": "requestHeader enables user authentication using request header credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.RequestHeaderIdentityProvider"
+ },
+ "type": {
+ "description": "type identifies the identity provider type for this entry.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "NamedCertificate",
+ "Kind": "IdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.Network": {
- "description": "Network holds cluster-wide information about Network. The canonical name is `cluster`. It is used to configure the desired network configuration, such as: IP address pools for services/pod IPs, network plugin, etc. Please view network.spec for an explanation on what applies when configuring this resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.IdentityProviderConfig": {
+ "description": "IdentityProviderConfig contains configuration for using a specific identity provider",
+ "type": "object",
+ "required": [
+ "type"
+ ],
+ "properties": {
+ "basicAuth": {
+ "description": "basicAuth contains configuration options for the BasicAuth IdP",
+ "$ref": "#/definitions/io.openshift.config.v1.BasicAuthIdentityProvider"
+ },
+ "github": {
+ "description": "github enables user authentication using GitHub credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.GitHubIdentityProvider"
+ },
+ "gitlab": {
+ "description": "gitlab enables user authentication using GitLab credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.GitLabIdentityProvider"
+ },
+ "google": {
+ "description": "google enables user authentication using Google credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.GoogleIdentityProvider"
+ },
+ "htpasswd": {
+ "description": "htpasswd enables user authentication using an HTPasswd file to validate credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.HTPasswdIdentityProvider"
+ },
+ "keystone": {
+ "description": "keystone enables user authentication using keystone password credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.KeystoneIdentityProvider"
+ },
+ "ldap": {
+ "description": "ldap enables user authentication using LDAP credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.LDAPIdentityProvider"
+ },
+ "openID": {
+ "description": "openID enables user authentication using OpenID credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.OpenIDIdentityProvider"
+ },
+ "requestHeader": {
+ "description": "requestHeader enables user authentication using request header credentials",
+ "$ref": "#/definitions/io.openshift.config.v1.RequestHeaderIdentityProvider"
+ },
+ "type": {
+ "description": "type identifies the identity provider type for this entry.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "IdentityProviderConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.Image": {
+ "description": "Image governs policies related to imagestream imports and runtime configuration for external registries. It allows cluster admins to configure which registries OpenShift is allowed to import images from, extra CA trust bundles for external registries, and policies to block or allow registry hostnames. When exposing OpenShift's image registry to the public, this also lets cluster admins specify the external hostname.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"spec"
@@ -74955,322 +76262,161 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec holds user settable values for configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.",
+ "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NetworkSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.ImageSpec"
},
"status": {
"description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NetworkStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.ImageStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "Network",
+ "Kind": "Image",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1.NetworkDiagnostics": {
+ "io.openshift.config.v1.ImageContentPolicy": {
+ "description": "ImageContentPolicy holds cluster-wide information about how to handle registry mirror rules. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
- "mode": {
- "description": "mode controls the network diagnostics mode\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is All.",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "sourcePlacement": {
- "description": "sourcePlacement controls the scheduling of network diagnostics source deployment\n\nSee NetworkDiagnosticsSourcePlacement for more details about default values.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NetworkDiagnosticsSourcePlacement"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "targetPlacement": {
- "description": "targetPlacement controls the scheduling of network diagnostics target daemonset\n\nSee NetworkDiagnosticsTargetPlacement for more details about default values.",
+ "spec": {
+ "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NetworkDiagnosticsTargetPlacement"
+ "$ref": "#/definitions/io.openshift.config.v1.ImageContentPolicySpec"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "NetworkDiagnostics",
- "Scope": "Namespaced"
+ "Kind": "ImageContentPolicy",
+ "Scope": "Clustered"
}
},
- "io.openshift.config.v1.NetworkDiagnosticsSourcePlacement": {
- "description": "NetworkDiagnosticsSourcePlacement defines node scheduling configuration network diagnostics source components",
+ "io.openshift.config.v1.ImageContentPolicyList": {
+ "description": "ImageContentPolicyList lists the items in the ImageContentPolicy CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
"properties": {
- "nodeSelector": {
- "description": "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "tolerations": {
- "description": "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is an empty list.",
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/io.openshift.config.v1.ImageContentPolicy"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "NetworkDiagnosticsSourcePlacement",
+ "Kind": "ImageContentPolicyList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.NetworkDiagnosticsTargetPlacement": {
- "description": "NetworkDiagnosticsTargetPlacement defines node scheduling configuration network diagnostics target components",
+ "io.openshift.config.v1.ImageContentPolicySpec": {
+ "description": "ImageContentPolicySpec is the specification of the ImageContentPolicy CRD.",
"type": "object",
"properties": {
- "nodeSelector": {
- "description": "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "tolerations": {
- "description": "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `- operator: \"Exists\"` which means that all taints are tolerated.",
+ "repositoryDigestMirrors": {
+ "description": "repositoryDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in RepositoryDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To pull image from mirrors by tags, should set the \"allowMirrorByTags\".\n\nEach “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
+ "$ref": "#/definitions/io.openshift.config.v1.RepositoryDigestMirrors"
},
- "x-kubernetes-list-type": "atomic"
+ "x-kubernetes-list-map-keys": [
+ "source"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "NetworkDiagnosticsTargetPlacement",
+ "Kind": "ImageContentPolicySpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.NetworkList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.ImageDigestMirrorSet": {
+ "description": "ImageDigestMirrorSet holds cluster-wide information about how to handle registry mirror rules on using digest pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
- "items"
+ "spec"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Network"
- }
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
- }
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "NetworkList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.NetworkMigration": {
- "description": "NetworkMigration represents the network migration status.",
- "type": "object",
- "properties": {
- "mtu": {
- "description": "MTU is the MTU configuration that is being deployed.",
- "$ref": "#/definitions/io.openshift.config.v1.MTUMigration"
- },
- "networkType": {
- "description": "NetworkType is the target plugin that is being deployed. DEPRECATED: network type migration is no longer supported, so this should always be unset.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "NetworkMigration",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.NetworkSpec": {
- "description": "NetworkSpec is the desired network configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.",
- "type": "object",
- "required": [
- "clusterNetwork",
- "serviceNetwork",
- "networkType"
- ],
- "properties": {
- "clusterNetwork": {
- "description": "IP address pool to use for pod IPs. This field is immutable after installation.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClusterNetworkEntry"
- },
- "x-kubernetes-list-type": "atomic"
- },
- "externalIP": {
- "description": "externalIP defines configuration for controllers that affect Service.ExternalIP. If nil, then ExternalIP is not allowed to be set.",
- "$ref": "#/definitions/io.openshift.config.v1.ExternalIPConfig"
- },
- "networkDiagnostics": {
- "description": "networkDiagnostics defines network diagnostics configuration.\n\nTakes precedence over spec.disableNetworkDiagnostics in network.operator.openshift.io. If networkDiagnostics is not specified or is empty, and the spec.disableNetworkDiagnostics flag in network.operator.openshift.io is set to true, the network diagnostics feature will be disabled.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NetworkDiagnostics"
- },
- "networkType": {
- "description": "NetworkType is the plugin that is to be deployed (e.g. OVNKubernetes). This should match a value that the cluster-network-operator understands, or else no networking will be installed. Currently supported values are: - OVNKubernetes This field is immutable after installation.",
- "type": "string",
- "default": ""
- },
- "serviceNetwork": {
- "description": "IP address pool for services. Currently, we only support a single entry here. This field is immutable after installation.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "serviceNodePortRange": {
- "description": "The port range allowed for Services of type NodePort. If not specified, the default of 30000-32767 will be used. Such Services without a NodePort specified will have one automatically allocated from this range. This parameter can be updated after the cluster is installed.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "NetworkSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.NetworkStatus": {
- "description": "NetworkStatus is the current network configuration.",
- "type": "object",
- "properties": {
- "clusterNetwork": {
- "description": "IP address pool to use for pod IPs.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClusterNetworkEntry"
- },
- "x-kubernetes-list-type": "atomic"
- },
- "clusterNetworkMTU": {
- "description": "ClusterNetworkMTU is the MTU for inter-pod networking.",
- "type": "integer",
- "format": "int32"
- },
- "conditions": {
- "description": "conditions represents the observations of a network.config current state. Known .status.conditions.type are: \"NetworkDiagnosticsAvailable\"",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "migration": {
- "description": "Migration contains the cluster network migration configuration.",
- "$ref": "#/definitions/io.openshift.config.v1.NetworkMigration"
- },
- "networkType": {
- "description": "NetworkType is the plugin that is deployed (e.g. OVNKubernetes).",
- "type": "string"
- },
- "serviceNetwork": {
- "description": "IP address pool for services. Currently, we only support a single entry here.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "NetworkStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.Node": {
- "description": "Node holds cluster-wide information about node specific features.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "required": [
- "spec"
- ],
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
"description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NodeSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrorSetSpec"
},
"status": {
- "description": "status holds observed values.",
+ "description": "status contains the observed state of the resource.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NodeStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrorSetStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "Node",
+ "Kind": "ImageDigestMirrorSet",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1.NodeList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.ImageDigestMirrorSetList": {
+ "description": "ImageDigestMirrorSetList lists the items in the ImageDigestMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -75285,7 +76431,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Node"
+ "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrorSet"
}
},
"kind": {
@@ -75302,289 +76448,208 @@
"Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "NodeList",
+ "Kind": "ImageDigestMirrorSetList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.NodeSpec": {
+ "io.openshift.config.v1.ImageDigestMirrorSetSpec": {
+ "description": "ImageDigestMirrorSetSpec is the specification of the ImageDigestMirrorSet CRD.",
"type": "object",
"properties": {
- "cgroupMode": {
- "description": "CgroupMode determines the cgroups version on the node",
- "type": "string"
- },
- "workerLatencyProfile": {
- "description": "WorkerLatencyProfile determins the how fast the kubelet is updating the status and corresponding reaction of the cluster",
- "type": "string"
+ "imageDigestMirrors": {
+ "description": "imageDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using tag specification, users should configure a list of mirrors using \"ImageTagMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagedigestmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a specific order of mirrors, should configure them into one list of mirrors using the expected order.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrors"
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "NodeSpec",
+ "Kind": "ImageDigestMirrorSetSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.NodeStatus": {
+ "io.openshift.config.v1.ImageDigestMirrorSetStatus": {
"type": "object",
- "properties": {
- "conditions": {
- "description": "conditions contain the details and the current state of the nodes.config object",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- }
- },
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "NodeStatus",
+ "Kind": "ImageDigestMirrorSetStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.NutanixFailureDomain": {
- "description": "NutanixFailureDomain configures failure domain information for the Nutanix platform.",
+ "io.openshift.config.v1.ImageDigestMirrors": {
+ "description": "ImageDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.",
"type": "object",
"required": [
- "name",
- "cluster",
- "subnets"
+ "source"
],
"properties": {
- "cluster": {
- "description": "cluster is to identify the cluster (the Prism Element under management of the Prism Central), in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NutanixResourceIdentifier"
- },
- "name": {
- "description": "name defines the unique name of a failure domain. Name is required and must be at most 64 characters in length. It must consist of only lower case alphanumeric characters and hyphens (-). It must start and end with an alphanumeric character. This value is arbitrary and is used to identify the failure domain within the platform.",
- "type": "string",
- "default": ""
+ "mirrorSourcePolicy": {
+ "description": "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.",
+ "type": "string"
},
- "subnets": {
- "description": "subnets holds a list of identifiers (one or more) of the cluster's network subnets for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.",
+ "mirrors": {
+ "description": "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their digests. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\" Other cluster configuration, including (but not limited to) other imageDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NutanixResourceIdentifier"
+ "type": "string",
+ "default": ""
},
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
+ "x-kubernetes-list-type": "set"
+ },
+ "source": {
+ "description": "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "NutanixFailureDomain",
+ "Kind": "ImageDigestMirrors",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.NutanixPlatformLoadBalancer": {
- "description": "NutanixPlatformLoadBalancer defines the load balancer used by the cluster on Nutanix platform.",
+ "io.openshift.config.v1.ImageLabel": {
"type": "object",
+ "required": [
+ "name"
+ ],
"properties": {
- "type": {
- "description": "type defines the type of load balancer used by the cluster on Nutanix platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.",
+ "name": {
+ "description": "Name defines the name of the label. It must have non-zero length.",
"type": "string",
- "default": "OpenShiftManagedDefault"
+ "default": ""
+ },
+ "value": {
+ "description": "Value defines the literal value of the label.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "NutanixPlatformLoadBalancer",
+ "Kind": "ImageLabel",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {}
- }
- ]
+ }
},
- "io.openshift.config.v1.NutanixPlatformSpec": {
- "description": "NutanixPlatformSpec holds the desired state of the Nutanix infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "io.openshift.config.v1.ImageList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "prismCentral",
- "prismElements"
+ "metadata",
+ "items"
],
"properties": {
- "failureDomains": {
- "description": "failureDomains configures failure domains information for the Nutanix platform. When set, the failure domains defined here may be used to spread Machines across prism element clusters to improve fault tolerance of the cluster.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NutanixFailureDomain"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "$ref": "#/definitions/io.openshift.config.v1.Image"
+ }
},
- "prismCentral": {
- "description": "prismCentral holds the endpoint address and port to access the Nutanix Prism Central. When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NutanixPrismEndpoint"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "prismElements": {
- "description": "prismElements holds one or more endpoint address and port data to access the Nutanix Prism Elements (clusters) of the Nutanix Prism Central. Currently we only support one Prism Element (cluster) for an OpenShift cluster, where all the Nutanix resources (VMs, subnets, volumes, etc.) used in the OpenShift cluster are located. In the future, we may support Nutanix resources (VMs, etc.) spread over multiple Prism Elements (clusters) of the Prism Central.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NutanixPrismElementEndpoint"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "NutanixPlatformSpec",
+ "Kind": "ImageList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.NutanixPlatformStatus": {
- "description": "NutanixPlatformStatus holds the current status of the Nutanix infrastructure provider.",
+ "io.openshift.config.v1.ImageSpec": {
"type": "object",
- "required": [
- "apiServerInternalIPs",
- "ingressIPs"
- ],
"properties": {
- "apiServerInternalIP": {
- "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.",
- "type": "string"
+ "additionalTrustedCA": {
+ "description": "additionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted during imagestream import, pod image pull, build image pull, and imageregistry pullthrough. The namespace for this config map is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
},
- "apiServerInternalIPs": {
- "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.",
+ "allowedRegistriesForImport": {
+ "description": "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.RegistryLocation"
},
- "x-kubernetes-list-type": "set"
- },
- "ingressIP": {
- "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.",
- "type": "string"
+ "x-kubernetes-list-type": "atomic"
},
- "ingressIPs": {
- "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.",
+ "externalRegistryHostnames": {
+ "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.",
"type": "array",
"items": {
"type": "string",
"default": ""
},
- "x-kubernetes-list-type": "set"
- },
- "loadBalancer": {
- "description": "loadBalancer defines how the load balancer used by the cluster is configured.",
- "default": {
- "type": "OpenShiftManagedDefault"
- },
- "$ref": "#/definitions/io.openshift.config.v1.NutanixPlatformLoadBalancer"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "NutanixPlatformStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.NutanixPrismElementEndpoint": {
- "description": "NutanixPrismElementEndpoint holds the name and endpoint data for a Prism Element (cluster)",
- "type": "object",
- "required": [
- "name",
- "endpoint"
- ],
- "properties": {
- "endpoint": {
- "description": "endpoint holds the endpoint address and port data of the Prism Element (cluster). When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NutanixPrismEndpoint"
+ "x-kubernetes-list-type": "atomic"
},
- "name": {
- "description": "name is the name of the Prism Element (cluster). This value will correspond with the cluster field configured on other resources (eg Machines, PVCs, etc).",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "NutanixPrismElementEndpoint",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.NutanixPrismEndpoint": {
- "description": "NutanixPrismEndpoint holds the endpoint address and port to access the Nutanix Prism Central or Element (cluster)",
- "type": "object",
- "required": [
- "address",
- "port"
- ],
- "properties": {
- "address": {
- "description": "address is the endpoint address (DNS name or IP address) of the Nutanix Prism Central or Element (cluster)",
+ "imageStreamImportMode": {
+ "description": "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be set to `Legacy` or `PreserveOriginal` or the empty string. If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. When empty, the behaviour will be decided based on the payload type advertised by the ClusterVersion status, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.",
"type": "string",
- "default": ""
+ "default": "",
+ "enum": [
+ "Legacy",
+ "PreserveOriginal"
+ ]
},
- "port": {
- "description": "port is the port number to access the Nutanix Prism Central or Element (cluster)",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "registrySources": {
+ "description": "registrySources contains configuration that determines how the container runtime should treat individual registries when accessing images for builds+pods. (e.g. whether or not to allow insecure access). It does not contain configuration for the internal cluster registry.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.RegistrySources"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "NutanixPrismEndpoint",
+ "Kind": "ImageSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.NutanixResourceIdentifier": {
- "description": "NutanixResourceIdentifier holds the identity of a Nutanix PC resource (cluster, image, subnet, etc.)",
+ "io.openshift.config.v1.ImageStatus": {
"type": "object",
- "required": [
- "type"
- ],
"properties": {
- "name": {
- "description": "name is the resource name in the PC. It cannot be empty if the type is Name.",
- "type": "string"
+ "externalRegistryHostnames": {
+ "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "type": {
- "description": "type is the identifier type to use for this resource.",
+ "imageStreamImportMode": {
+ "description": "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. This value will be reconciled based on either the spec value or if no spec value is specified, the image registry operator would look at the ClusterVersion status to determine the payload type and set the import mode accordingly, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.",
"type": "string",
- "default": ""
+ "enum": [
+ "Legacy",
+ "PreserveOriginal"
+ ]
},
- "uuid": {
- "description": "uuid is the UUID of the resource in the PC. It cannot be empty if the type is UUID.",
+ "internalRegistryHostname": {
+ "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. This value is set by the image registry operator which controls the internal registry hostname.",
"type": "string"
}
},
@@ -75592,24 +76657,14 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "NutanixResourceIdentifier",
+ "Kind": "ImageStatus",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "name": "Name",
- "uuid": "UUID"
- }
- }
- ]
+ }
},
- "io.openshift.config.v1.OAuth": {
- "description": "OAuth holds cluster-wide information about OAuth. The canonical name is `cluster`. It is used to configure the integrated OAuth server. This configuration is only honored when the top level Authentication config has type set to IntegratedOAuth.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.ImageTagMirrorSet": {
+ "description": "ImageTagMirrorSet holds cluster-wide information about how to handle registry mirror rules on using tag pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"spec"
],
"properties": {
@@ -75629,24 +76684,24 @@
"spec": {
"description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.OAuthSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrorSetSpec"
},
"status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
+ "description": "status contains the observed state of the resource.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.OAuthStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrorSetStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OAuth",
+ "Kind": "ImageTagMirrorSet",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1.OAuthList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.ImageTagMirrorSetList": {
+ "description": "ImageTagMirrorSetList lists the items in the ImageTagMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -75661,7 +76716,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.OAuth"
+ "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrorSet"
}
},
"kind": {
@@ -75678,619 +76733,623 @@
"Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OAuthList",
+ "Kind": "ImageTagMirrorSetList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OAuthRemoteConnectionInfo": {
- "description": "OAuthRemoteConnectionInfo holds information necessary for establishing a remote connection",
+ "io.openshift.config.v1.ImageTagMirrorSetSpec": {
+ "description": "ImageTagMirrorSetSpec is the specification of the ImageTagMirrorSet CRD.",
"type": "object",
- "required": [
- "url"
- ],
"properties": {
- "ca": {
- "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
- },
- "tlsClientCert": {
- "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
- },
- "tlsClientKey": {
- "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
- },
- "url": {
- "description": "url is the remote URL to connect to",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "OAuthRemoteConnectionInfo",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.OAuthSpec": {
- "description": "OAuthSpec contains desired cluster auth configuration",
- "type": "object",
- "required": [
- "tokenConfig"
- ],
- "properties": {
- "identityProviders": {
- "description": "identityProviders is an ordered list of ways for a user to identify themselves. When this list is empty, no identities are provisioned for users.",
+ "imageTagMirrors": {
+ "description": "imageTagMirrors allows images referenced by image tags in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageTagMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using digest specification only, users should configure a list of mirrors using \"ImageDigestMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagetagmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a deterministic order of mirrors, should configure them into one list of mirrors using the expected order.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.IdentityProvider"
+ "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrors"
},
"x-kubernetes-list-type": "atomic"
- },
- "templates": {
- "description": "templates allow you to customize pages like the login page.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.OAuthTemplates"
- },
- "tokenConfig": {
- "description": "tokenConfig contains options for authorization and access tokens",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.TokenConfig"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OAuthSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.OAuthStatus": {
- "description": "OAuthStatus shows current known state of OAuth server in the cluster",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "OAuthStatus",
+ "Kind": "ImageTagMirrorSetSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OAuthTemplates": {
- "description": "OAuthTemplates allow for customization of pages like the login page",
+ "io.openshift.config.v1.ImageTagMirrorSetStatus": {
"type": "object",
- "properties": {
- "error": {
- "description": "error is the name of a secret that specifies a go template to use to render error pages during the authentication or grant flow. The key \"errors.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default error page is used. If the specified template is not valid, the default error page is used. If unspecified, the default error page is used. The namespace for this secret is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
- },
- "login": {
- "description": "login is the name of a secret that specifies a go template to use to render the login page. The key \"login.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default login page is used. If the specified template is not valid, the default login page is used. If unspecified, the default login page is used. The namespace for this secret is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
- },
- "providerSelection": {
- "description": "providerSelection is the name of a secret that specifies a go template to use to render the provider selection page. The key \"providers.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default provider selection page is used. If the specified template is not valid, the default provider selection page is used. If unspecified, the default provider selection page is used. The namespace for this secret is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
- }
- },
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OAuthTemplates",
+ "Kind": "ImageTagMirrorSetStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OIDCClientConfig": {
+ "io.openshift.config.v1.ImageTagMirrors": {
+ "description": "ImageTagMirrors holds cluster-wide information about how to handle mirrors in the registries config.",
"type": "object",
"required": [
- "componentName",
- "componentNamespace",
- "clientID",
- "clientSecret",
- "extraScopes"
+ "source"
],
"properties": {
- "clientID": {
- "description": "ClientID is the identifier of the OIDC client from the OIDC provider",
- "type": "string",
- "default": ""
- },
- "clientSecret": {
- "description": "ClientSecret refers to a secret in the `openshift-config` namespace that contains the client secret in the `clientSecret` key of the `.data` field",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
- },
- "componentName": {
- "description": "ComponentName is the name of the component that is supposed to consume this client configuration",
- "type": "string",
- "default": ""
- },
- "componentNamespace": {
- "description": "ComponentNamespace is the namespace of the component that is supposed to consume this client configuration",
- "type": "string",
- "default": ""
+ "mirrorSourcePolicy": {
+ "description": "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.",
+ "type": "string"
},
- "extraScopes": {
- "description": "ExtraScopes is an optional set of scopes to request tokens with.",
+ "mirrors": {
+ "description": "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their tags. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Configuring a list of mirrors using \"ImageDigestMirrorSet\" CRD and forcing digest-pulls for mirrors avoids that issue. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\". Other cluster configuration, including (but not limited to) other imageTagMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table",
"type": "array",
"items": {
"type": "string",
"default": ""
},
"x-kubernetes-list-type": "set"
+ },
+ "source": {
+ "description": "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OIDCClientConfig",
+ "Kind": "ImageTagMirrors",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OIDCClientReference": {
+ "io.openshift.config.v1.Infrastructure": {
+ "description": "Infrastructure holds cluster-wide information about Infrastructure. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "oidcProviderName",
- "issuerURL",
- "clientID"
+ "spec"
],
"properties": {
- "clientID": {
- "description": "ClientID is the identifier of the OIDC client from the OIDC provider",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "issuerURL": {
- "description": "URL is the serving URL of the token issuer. Must use the https:// scheme.",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "oidcProviderName": {
- "description": "OIDCName refers to the `name` of the provider from `oidcProviders`",
- "type": "string",
- "default": ""
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec holds user settable values for configuration",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.InfrastructureSpec"
+ },
+ "status": {
+ "description": "status holds observed values from the cluster. They may not be overridden.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.InfrastructureStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OIDCClientReference",
- "Scope": "Namespaced"
+ "Kind": "Infrastructure",
+ "Scope": "Clustered"
}
},
- "io.openshift.config.v1.OIDCClientStatus": {
+ "io.openshift.config.v1.InfrastructureList": {
+ "description": "InfrastructureList is\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "componentName",
- "componentNamespace",
- "currentOIDCClients",
- "consumingUsers"
+ "metadata",
+ "items"
],
"properties": {
- "componentName": {
- "description": "ComponentName is the name of the component that will consume a client configuration.",
- "type": "string",
- "default": ""
- },
- "componentNamespace": {
- "description": "ComponentNamespace is the namespace of the component that will consume a client configuration.",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "conditions": {
- "description": "Conditions are used to communicate the state of the `oidcClients` entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf Available is true, the component is successfully using the configured client. If Degraded is true, that means something has gone wrong trying to handle the client configuration. If Progressing is true, that means the component is taking some action related to the `oidcClients` entry.",
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
+ "$ref": "#/definitions/io.openshift.config.v1.Infrastructure"
+ }
},
- "consumingUsers": {
- "description": "ConsumingUsers is a slice of ServiceAccounts that need to have read permission on the `clientSecret` secret.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "set"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "currentOIDCClients": {
- "description": "CurrentOIDCClients is a list of clients that the component is currently using.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.OIDCClientReference"
- },
- "x-kubernetes-list-map-keys": [
- "issuerURL",
- "clientID"
- ],
- "x-kubernetes-list-type": "map"
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OIDCClientStatus",
+ "Kind": "InfrastructureList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OIDCProvider": {
+ "io.openshift.config.v1.InfrastructureSpec": {
+ "description": "InfrastructureSpec contains settings that apply to the cluster infrastructure.",
"type": "object",
- "required": [
- "name",
- "issuer",
- "oidcClients",
- "claimMappings"
- ],
"properties": {
- "claimMappings": {
- "description": "ClaimMappings describes rules on how to transform information from an ID token into a cluster identity",
+ "cloudConfig": {
+ "description": "cloudConfig is a reference to a ConfigMap containing the cloud provider configuration file. This configuration file is used to configure the Kubernetes cloud provider integration when using the built-in cloud provider integration or the external cloud controller manager. The namespace for this config map is openshift-config.\n\ncloudConfig should only be consumed by the kube_cloud_config controller. The controller is responsible for using the user configuration in the spec for various platforms and combining that with the user provided ConfigMap in this field to create a stitched kube cloud config. The controller generates a ConfigMap `kube-cloud-config` in `openshift-config-managed` namespace with the kube cloud config is stored in `cloud.conf` key. All the clients are expected to use the generated ConfigMap only.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.TokenClaimMappings"
- },
- "claimValidationRules": {
- "description": "ClaimValidationRules are rules that are applied to validate token claims to authenticate users.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.TokenClaimValidationRule"
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapFileReference"
},
- "issuer": {
- "description": "Issuer describes atributes of the OIDC token issuer",
+ "platformSpec": {
+ "description": "platformSpec holds desired information specific to the underlying infrastructure provider.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.TokenIssuer"
- },
- "name": {
- "description": "Name of the OIDC provider",
- "type": "string",
- "default": ""
- },
- "oidcClients": {
- "description": "OIDCClients contains configuration for the platform's clients that need to request tokens from the issuer",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.OIDCClientConfig"
- },
- "x-kubernetes-list-map-keys": [
- "componentNamespace",
- "componentName"
- ],
- "x-kubernetes-list-type": "map"
+ "$ref": "#/definitions/io.openshift.config.v1.PlatformSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OIDCProvider",
+ "Kind": "InfrastructureSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ObjectReference": {
- "description": "ObjectReference contains enough information to let you inspect or modify the referred object.",
+ "io.openshift.config.v1.InfrastructureStatus": {
+ "description": "InfrastructureStatus describes the infrastructure the cluster is leveraging.",
"type": "object",
"required": [
- "group",
- "resource",
- "name"
+ "infrastructureName",
+ "etcdDiscoveryDomain",
+ "apiServerURL",
+ "apiServerInternalURI",
+ "controlPlaneTopology",
+ "infrastructureTopology"
],
"properties": {
- "group": {
- "description": "group of the referent.",
+ "apiServerInternalURI": {
+ "description": "apiServerInternalURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerInternalURL can be used by components like kubelets, to contact the Kubernetes API server using the infrastructure provider rather than Kubernetes networking.",
"type": "string",
"default": ""
},
- "name": {
- "description": "name of the referent.",
+ "apiServerURL": {
+ "description": "apiServerURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerURL can be used by components like the web console to tell users where to find the Kubernetes API.",
"type": "string",
"default": ""
},
- "namespace": {
- "description": "namespace of the referent.",
- "type": "string"
+ "controlPlaneTopology": {
+ "description": "controlPlaneTopology expresses the expectations for operands that normally run on control nodes. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation The 'External' mode indicates that the control plane is hosted externally to the cluster and that its components are not visible within the cluster.",
+ "type": "string",
+ "default": ""
},
- "resource": {
- "description": "resource of the referent.",
+ "cpuPartitioning": {
+ "description": "cpuPartitioning expresses if CPU partitioning is a currently enabled feature in the cluster. CPU Partitioning means that this cluster can support partitioning workloads to specific CPU Sets. Valid values are \"None\" and \"AllNodes\". When omitted, the default value is \"None\". The default value of \"None\" indicates that no nodes will be setup with CPU partitioning. The \"AllNodes\" value indicates that all nodes have been setup with CPU partitioning, and can then be further configured via the PerformanceProfile API.",
+ "type": "string",
+ "default": "None"
+ },
+ "etcdDiscoveryDomain": {
+ "description": "etcdDiscoveryDomain is the domain used to fetch the SRV records for discovering etcd servers and clients. For more info: https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery deprecated: as of 4.7, this field is no longer set or honored. It will be removed in a future release.",
"type": "string",
"default": ""
+ },
+ "infrastructureName": {
+ "description": "infrastructureName uniquely identifies a cluster with a human friendly name. Once set it should not be changed. Must be of max length 27 and must have only alphanumeric or hyphen characters.",
+ "type": "string",
+ "default": ""
+ },
+ "infrastructureTopology": {
+ "description": "infrastructureTopology expresses the expectations for infrastructure services that do not run on control plane nodes, usually indicated by a node selector for a `role` value other than `master`. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation NOTE: External topology mode is not applicable for this field.",
+ "type": "string",
+ "default": ""
+ },
+ "platform": {
+ "description": "platform is the underlying infrastructure provider for the cluster.\n\nDeprecated: Use platformStatus.type instead.",
+ "type": "string"
+ },
+ "platformStatus": {
+ "description": "platformStatus holds status information specific to the underlying infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.PlatformStatus"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ObjectReference",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.OldTLSProfile": {
- "description": "OldTLSProfile is a TLS security profile based on: https://wiki.mozilla.org/Security/Server_Side_TLS#Old_backward_compatibility",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "OldTLSProfile",
+ "Kind": "InfrastructureStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OpenIDClaims": {
- "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider",
+ "io.openshift.config.v1.Ingress": {
+ "description": "Ingress holds cluster-wide information about ingress, including the default ingress domain used for routes. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
- "email": {
- "description": "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "groups": {
- "description": "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user. If multiple claims are specified, the first one with a non-empty value is used.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "name": {
- "description": "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "preferredUsername": {
- "description": "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the sub claim",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "spec": {
+ "description": "spec holds user settable values for configuration",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.IngressSpec"
+ },
+ "status": {
+ "description": "status holds observed values from the cluster. They may not be overridden.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.IngressStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OpenIDClaims",
- "Scope": "Namespaced"
+ "Kind": "Ingress",
+ "Scope": "Clustered"
}
},
- "io.openshift.config.v1.OpenIDIdentityProvider": {
- "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials",
+ "io.openshift.config.v1.IngressList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "clientID",
- "clientSecret",
- "issuer",
- "claims"
+ "metadata",
+ "items"
],
"properties": {
- "ca": {
- "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
- },
- "claims": {
- "description": "claims mappings",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.OpenIDClaims"
- },
- "clientID": {
- "description": "clientID is the oauth client ID",
- "type": "string",
- "default": ""
- },
- "clientSecret": {
- "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
- },
- "extraAuthorizeParameters": {
- "description": "extraAuthorizeParameters are any custom parameters to add to the authorize request.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "extraScopes": {
- "description": "extraScopes are any scopes to request in addition to the standard \"openid\" scope.",
+ "items": {
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.Ingress"
}
},
- "issuer": {
- "description": "issuer is the URL that the OpenID Provider asserts as its Issuer Identifier. It must use the https scheme with no query or fragment component.",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OpenIDIdentityProvider",
+ "Kind": "IngressList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OpenStackPlatformLoadBalancer": {
- "description": "OpenStackPlatformLoadBalancer defines the load balancer used by the cluster on OpenStack platform.",
+ "io.openshift.config.v1.IngressPlatformSpec": {
+ "description": "IngressPlatformSpec holds the desired state of Ingress specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.",
"type": "object",
+ "required": [
+ "type"
+ ],
"properties": {
+ "aws": {
+ "description": "aws contains settings specific to the Amazon Web Services infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.AWSIngressSpec"
+ },
"type": {
- "description": "type defines the type of load balancer used by the cluster on OpenStack platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.",
+ "description": "type is the underlying infrastructure provider for the cluster. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.",
"type": "string",
- "default": "OpenShiftManagedDefault"
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OpenStackPlatformLoadBalancer",
+ "Kind": "IngressPlatformSpec",
"Scope": "Namespaced"
},
"x-kubernetes-unions": [
{
"discriminator": "type",
- "fields-to-discriminateBy": {}
+ "fields-to-discriminateBy": {
+ "aws": "AWS"
+ }
}
]
},
- "io.openshift.config.v1.OpenStackPlatformSpec": {
- "description": "OpenStackPlatformSpec holds the desired state of the OpenStack infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "io.openshift.config.v1.IngressSpec": {
"type": "object",
+ "required": [
+ "domain"
+ ],
"properties": {
- "apiServerInternalIPs": {
- "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "appsDomain": {
+ "description": "appsDomain is an optional domain to use instead of the one specified in the domain field when a Route is created without specifying an explicit host. If appsDomain is nonempty, this value is used to generate default host values for Route. Unlike domain, appsDomain may be modified after installation. This assumes a new ingresscontroller has been setup with a wildcard certificate.",
+ "type": "string"
},
- "ingressIPs": {
- "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).",
+ "componentRoutes": {
+ "description": "componentRoutes is an optional list of routes that are managed by OpenShift components that a cluster-admin is able to configure the hostname and serving certificate for. The namespace and name of each route in this list should match an existing entry in the status.componentRoutes list.\n\nTo determine the set of configurable Routes, look at namespace and name of entries in the .status.componentRoutes list, where participating operators write the status of configurable routes.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ComponentRouteSpec"
},
- "x-kubernetes-list-type": "atomic"
+ "x-kubernetes-list-map-keys": [
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "machineNetworks": {
- "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".",
+ "domain": {
+ "description": "domain is used to generate a default host name for a route when the route's host name is empty. The generated host name will follow this pattern: \"\u003croute-name\u003e.\u003croute-namespace\u003e.\u003cdomain\u003e\".\n\nIt is also used as the default wildcard domain suffix for ingress. The default ingresscontroller domain will follow this pattern: \"*.\u003cdomain\u003e\".\n\nOnce set, changing domain is not currently supported.",
+ "type": "string",
+ "default": ""
+ },
+ "loadBalancer": {
+ "description": "loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure provider of the current cluster and are required for Ingress Controller to work on OpenShift.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.LoadBalancer"
+ },
+ "requiredHSTSPolicies": {
+ "description": "requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes matching the domainPattern/s and namespaceSelector/s that are specified in the policy. Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route annotation, and affect route admission.\n\nA candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: \"haproxy.router.openshift.io/hsts_header\" E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains\n\n- For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route is rejected. - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies determines the route's admission status. - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, then it may use any HSTS Policy annotation.\n\nThe HSTS policy configuration may be changed after routes have already been created. An update to a previously admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working.\n\nNote that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.RequiredHSTSPolicy"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "IngressSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.IngressStatus": {
+ "type": "object",
+ "properties": {
+ "componentRoutes": {
+ "description": "componentRoutes is where participating operators place the current route status for routes whose hostnames and serving certificates can be customized by the cluster-admin.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ComponentRouteStatus"
},
- "x-kubernetes-list-type": "atomic"
+ "x-kubernetes-list-map-keys": [
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "defaultPlacement": {
+ "description": "defaultPlacement is set at installation time to control which nodes will host the ingress router pods by default. The options are control-plane nodes or worker nodes.\n\nThis field works by dictating how the Cluster Ingress Operator will consider unset replicas and nodePlacement fields in IngressController resources when creating the corresponding Deployments.\n\nSee the documentation for the IngressController replicas and nodePlacement fields for more information.\n\nWhen omitted, the default value is Workers",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OpenStackPlatformSpec",
+ "Kind": "IngressStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OpenStackPlatformStatus": {
- "description": "OpenStackPlatformStatus holds the current status of the OpenStack infrastructure provider.",
+ "io.openshift.config.v1.IntermediateTLSProfile": {
+ "description": "IntermediateTLSProfile is a TLS security profile based on: https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "IntermediateTLSProfile",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.KeystoneIdentityProvider": {
+ "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials",
"type": "object",
"required": [
- "apiServerInternalIPs",
- "ingressIPs"
+ "url",
+ "domainName"
+ ],
+ "properties": {
+ "ca": {
+ "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ },
+ "domainName": {
+ "description": "domainName is required for keystone v3",
+ "type": "string",
+ "default": ""
+ },
+ "tlsClientCert": {
+ "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ },
+ "tlsClientKey": {
+ "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ },
+ "url": {
+ "description": "url is the remote URL to connect to",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "KeystoneIdentityProvider",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.KubeClientConfig": {
+ "type": "object",
+ "required": [
+ "kubeConfig",
+ "connectionOverrides"
],
+ "properties": {
+ "connectionOverrides": {
+ "description": "connectionOverrides specifies client overrides for system components to loop back to this master.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ClientConnectionOverrides"
+ },
+ "kubeConfig": {
+ "description": "kubeConfig is a .kubeconfig filename for going to the owning kube-apiserver. Empty uses an in-cluster-config",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "KubeClientConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.KubevirtPlatformSpec": {
+ "description": "KubevirtPlatformSpec holds the desired state of the kubevirt infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "KubevirtPlatformSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.KubevirtPlatformStatus": {
+ "description": "KubevirtPlatformStatus holds the current status of the kubevirt infrastructure provider.",
+ "type": "object",
"properties": {
"apiServerInternalIP": {
- "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.",
+ "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.",
"type": "string"
},
- "apiServerInternalIPs": {
- "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.",
+ "ingressIP": {
+ "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "KubevirtPlatformStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.LDAPAttributeMapping": {
+ "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields",
+ "type": "object",
+ "required": [
+ "id"
+ ],
+ "properties": {
+ "email": {
+ "description": "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity",
"type": "array",
"items": {
"type": "string",
"default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "cloudName": {
- "description": "cloudName is the name of the desired OpenStack cloud in the client configuration file (`clouds.yaml`).",
- "type": "string"
- },
- "ingressIP": {
- "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.",
- "type": "string"
+ }
},
- "ingressIPs": {
- "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.",
+ "id": {
+ "description": "id is the list of attributes whose values should be used as the user ID. Required. First non-empty attribute is used. At least one attribute is required. If none of the listed attribute have a value, authentication fails. LDAP standard identity attribute is \"dn\"",
"type": "array",
"items": {
"type": "string",
"default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "loadBalancer": {
- "description": "loadBalancer defines how the load balancer used by the cluster is configured.",
- "default": {
- "type": "OpenShiftManagedDefault"
- },
- "$ref": "#/definitions/io.openshift.config.v1.OpenStackPlatformLoadBalancer"
+ }
},
- "machineNetworks": {
- "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.",
+ "name": {
+ "description": "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"",
"type": "array",
"items": {
"type": "string",
"default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ }
},
- "nodeDNSIP": {
- "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for OpenStack deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.",
- "type": "string"
+ "preferredUsername": {
+ "description": "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OpenStackPlatformStatus",
+ "Kind": "LDAPAttributeMapping",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OperandVersion": {
+ "io.openshift.config.v1.LDAPIdentityProvider": {
+ "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials",
"type": "object",
"required": [
- "name",
- "version"
+ "url",
+ "insecure",
+ "attributes"
],
"properties": {
- "name": {
- "description": "name is the name of the particular operand this version is for. It usually matches container images, not operators.",
+ "attributes": {
+ "description": "attributes maps LDAP attributes to identities",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.LDAPAttributeMapping"
+ },
+ "bindDN": {
+ "description": "bindDN is an optional DN to bind with during the search phase.",
"type": "string",
"default": ""
},
- "version": {
- "description": "version indicates which version of a particular operand is currently being managed. It must always match the Available operand. If 1.0.0 is Available, then this must indicate 1.0.0 even if the operator is trying to rollout 1.1.0",
+ "bindPassword": {
+ "description": "bindPassword is an optional reference to a secret by name containing a password to bind with during the search phase. The key \"bindPassword\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ },
+ "ca": {
+ "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ },
+ "insecure": {
+ "description": "insecure, if true, indicates the connection should not use TLS WARNING: Should not be set to `true` with the URL scheme \"ldaps://\" as \"ldaps://\" URLs always\n attempt to connect using TLS, even when `insecure` is set to `true`\nWhen `true`, \"ldap://\" URLS connect insecurely. When `false`, \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830.",
+ "type": "boolean",
+ "default": false
+ },
+ "url": {
+ "description": "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is: ldap://host:port/basedn?attribute?scope?filter",
"type": "string",
"default": ""
}
@@ -76299,525 +77358,483 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OperandVersion",
+ "Kind": "LDAPIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OperatorHub": {
- "description": "OperatorHub is the Schema for the operatorhubs API. It can be used to change the state of the default hub sources for OperatorHub on the cluster from enabled to disabled and vice versa.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.LeaderElection": {
+ "description": "LeaderElection provides information to elect a leader",
"type": "object",
"required": [
- "metadata",
- "spec",
- "status"
+ "leaseDuration",
+ "renewDeadline",
+ "retryPeriod"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "disable": {
+ "description": "disable allows leader election to be suspended while allowing a fully defaulted \"normal\" startup case.",
+ "type": "boolean"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "leaseDuration": {
+ "description": "leaseDuration is the duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "name": {
+ "description": "name indicates what name to use for the resource",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "namespace": {
+ "description": "namespace indicates which namespace the resource is in",
+ "type": "string"
},
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.OperatorHubSpec"
+ "renewDeadline": {
+ "description": "renewDeadline is the interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
},
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.OperatorHubStatus"
+ "retryPeriod": {
+ "description": "retryPeriod is the duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OperatorHub",
- "Scope": "Clustered"
+ "Kind": "LeaderElection",
+ "Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OperatorHubList": {
- "description": "OperatorHubList contains a list of OperatorHub\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.LoadBalancer": {
"type": "object",
- "required": [
- "metadata",
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.OperatorHub"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "platform": {
+ "description": "platform holds configuration specific to the underlying infrastructure provider for the ingress load balancers. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "$ref": "#/definitions/io.openshift.config.v1.IngressPlatformSpec"
}
},
"x-fabric8-info": {
- "Type": "list",
+ "Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OperatorHubList",
+ "Kind": "LoadBalancer",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OperatorHubSpec": {
- "description": "OperatorHubSpec defines the desired state of OperatorHub",
+ "io.openshift.config.v1.MTUMigration": {
+ "description": "MTUMigration contains infomation about MTU migration.",
"type": "object",
"properties": {
- "disableAllDefaultSources": {
- "description": "disableAllDefaultSources allows you to disable all the default hub sources. If this is true, a specific entry in sources can be used to enable a default source. If this is false, a specific entry in sources can be used to disable or enable a default source.",
- "type": "boolean"
+ "machine": {
+ "description": "Machine contains MTU migration configuration for the machine's uplink.",
+ "$ref": "#/definitions/io.openshift.config.v1.MTUMigrationValues"
},
- "sources": {
- "description": "sources is the list of default hub sources and their configuration. If the list is empty, it implies that the default hub sources are enabled on the cluster unless disableAllDefaultSources is true. If disableAllDefaultSources is true and sources is not empty, the configuration present in sources will take precedence. The list of default hub sources and their current state will always be reflected in the status block.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.HubSource"
- }
+ "network": {
+ "description": "Network contains MTU migration configuration for the default network.",
+ "$ref": "#/definitions/io.openshift.config.v1.MTUMigrationValues"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OperatorHubSpec",
+ "Kind": "MTUMigration",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OperatorHubStatus": {
- "description": "OperatorHubStatus defines the observed state of OperatorHub. The current state of the default hub sources will always be reflected here.",
+ "io.openshift.config.v1.MTUMigrationValues": {
+ "description": "MTUMigrationValues contains the values for a MTU migration.",
"type": "object",
+ "required": [
+ "to"
+ ],
"properties": {
- "sources": {
- "description": "sources encapsulates the result of applying the configuration for each hub source",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.HubSourceStatus"
- }
+ "from": {
+ "description": "From is the MTU to migrate from.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "to": {
+ "description": "To is the MTU to migrate to.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OperatorHubStatus",
+ "Kind": "MTUMigrationValues",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OvirtPlatformLoadBalancer": {
- "description": "OvirtPlatformLoadBalancer defines the load balancer used by the cluster on Ovirt platform.",
+ "io.openshift.config.v1.MaxAgePolicy": {
+ "description": "MaxAgePolicy contains a numeric range for specifying a compliant HSTS max-age for the enclosing RequiredHSTSPolicy",
"type": "object",
"properties": {
- "type": {
- "description": "type defines the type of load balancer used by the cluster on Ovirt platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.",
- "type": "string",
- "default": "OpenShiftManagedDefault"
+ "largestMaxAge": {
+ "description": "The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age This value can be left unspecified, in which case no upper limit is enforced.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "smallestMaxAge": {
+ "description": "The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary tool for administrators to quickly correct mistakes. This value can be left unspecified, in which case no lower limit is enforced.",
+ "type": "integer",
+ "format": "int32"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OvirtPlatformLoadBalancer",
+ "Kind": "MaxAgePolicy",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {}
- }
- ]
+ }
},
- "io.openshift.config.v1.OvirtPlatformSpec": {
- "description": "OvirtPlatformSpec holds the desired state of the oVirt infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "io.openshift.config.v1.ModernTLSProfile": {
+ "description": "ModernTLSProfile is a TLS security profile based on: https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility",
"type": "object",
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OvirtPlatformSpec",
+ "Kind": "ModernTLSProfile",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.OvirtPlatformStatus": {
- "description": "OvirtPlatformStatus holds the current status of the oVirt infrastructure provider.",
+ "io.openshift.config.v1.NamedCertificate": {
+ "description": "NamedCertificate specifies a certificate/key, and the names it should be served for",
"type": "object",
"required": [
- "apiServerInternalIPs",
- "ingressIPs"
+ "certFile",
+ "keyFile"
],
"properties": {
- "apiServerInternalIP": {
- "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.",
- "type": "string"
- },
- "apiServerInternalIPs": {
- "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "set"
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
+ "type": "string",
+ "default": ""
},
- "ingressIP": {
- "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.",
- "type": "string"
+ "keyFile": {
+ "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "type": "string",
+ "default": ""
},
- "ingressIPs": {
- "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.",
+ "names": {
+ "description": "Names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.",
"type": "array",
"items": {
"type": "string",
"default": ""
- },
- "x-kubernetes-list-type": "set"
- },
- "loadBalancer": {
- "description": "loadBalancer defines how the load balancer used by the cluster is configured.",
- "default": {
- "type": "OpenShiftManagedDefault"
- },
- "$ref": "#/definitions/io.openshift.config.v1.OvirtPlatformLoadBalancer"
- },
- "nodeDNSIP": {
- "description": "deprecated: as of 4.6, this field is no longer set or honored. It will be removed in a future release.",
- "type": "string"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "OvirtPlatformStatus",
+ "Kind": "NamedCertificate",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.PlatformSpec": {
- "description": "PlatformSpec holds the desired state specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.",
+ "io.openshift.config.v1.Network": {
+ "description": "Network holds cluster-wide information about Network. The canonical name is `cluster`. It is used to configure the desired network configuration, such as: IP address pools for services/pod IPs, network plugin, etc. Please view network.spec for an explanation on what applies when configuring this resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "type"
+ "spec"
],
"properties": {
- "alibabaCloud": {
- "description": "AlibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.AlibabaCloudPlatformSpec"
- },
- "aws": {
- "description": "AWS contains settings specific to the Amazon Web Services infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.AWSPlatformSpec"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "azure": {
- "description": "Azure contains settings specific to the Azure infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.AzurePlatformSpec"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "baremetal": {
- "description": "BareMetal contains settings specific to the BareMetal platform.",
- "$ref": "#/definitions/io.openshift.config.v1.BareMetalPlatformSpec"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "equinixMetal": {
- "description": "EquinixMetal contains settings specific to the Equinix Metal infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.EquinixMetalPlatformSpec"
- },
- "external": {
- "description": "ExternalPlatformType represents generic infrastructure provider. Platform-specific components should be supplemented separately.",
- "$ref": "#/definitions/io.openshift.config.v1.ExternalPlatformSpec"
- },
- "gcp": {
- "description": "GCP contains settings specific to the Google Cloud Platform infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.GCPPlatformSpec"
- },
- "ibmcloud": {
- "description": "IBMCloud contains settings specific to the IBMCloud infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.IBMCloudPlatformSpec"
- },
- "kubevirt": {
- "description": "Kubevirt contains settings specific to the kubevirt infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.KubevirtPlatformSpec"
- },
- "nutanix": {
- "description": "Nutanix contains settings specific to the Nutanix infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.NutanixPlatformSpec"
- },
- "openstack": {
- "description": "OpenStack contains settings specific to the OpenStack infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.OpenStackPlatformSpec"
- },
- "ovirt": {
- "description": "Ovirt contains settings specific to the oVirt infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.OvirtPlatformSpec"
- },
- "powervs": {
- "description": "PowerVS contains settings specific to the IBM Power Systems Virtual Servers infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.PowerVSPlatformSpec"
+ "spec": {
+ "description": "spec holds user settable values for configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.NetworkSpec"
},
- "type": {
- "description": "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.",
+ "status": {
+ "description": "status holds observed values from the cluster. They may not be overridden.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.NetworkStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "Network",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.config.v1.NetworkDiagnostics": {
+ "type": "object",
+ "properties": {
+ "mode": {
+ "description": "mode controls the network diagnostics mode\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is All.",
"type": "string",
"default": ""
},
- "vsphere": {
- "description": "VSphere contains settings specific to the VSphere infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformSpec"
+ "sourcePlacement": {
+ "description": "sourcePlacement controls the scheduling of network diagnostics source deployment\n\nSee NetworkDiagnosticsSourcePlacement for more details about default values.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.NetworkDiagnosticsSourcePlacement"
+ },
+ "targetPlacement": {
+ "description": "targetPlacement controls the scheduling of network diagnostics target daemonset\n\nSee NetworkDiagnosticsTargetPlacement for more details about default values.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.NetworkDiagnosticsTargetPlacement"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "PlatformSpec",
+ "Kind": "NetworkDiagnostics",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.PlatformStatus": {
- "description": "PlatformStatus holds the current status specific to the underlying infrastructure provider of the current cluster. Since these are used at status-level for the underlying cluster, it is supposed that only one of the status structs is set.",
+ "io.openshift.config.v1.NetworkDiagnosticsSourcePlacement": {
+ "description": "NetworkDiagnosticsSourcePlacement defines node scheduling configuration network diagnostics source components",
"type": "object",
- "required": [
- "type"
- ],
"properties": {
- "alibabaCloud": {
- "description": "AlibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.AlibabaCloudPlatformStatus"
- },
- "aws": {
- "description": "AWS contains settings specific to the Amazon Web Services infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.AWSPlatformStatus"
- },
- "azure": {
- "description": "Azure contains settings specific to the Azure infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.AzurePlatformStatus"
- },
- "baremetal": {
- "description": "BareMetal contains settings specific to the BareMetal platform.",
- "$ref": "#/definitions/io.openshift.config.v1.BareMetalPlatformStatus"
- },
- "equinixMetal": {
- "description": "EquinixMetal contains settings specific to the Equinix Metal infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.EquinixMetalPlatformStatus"
- },
- "external": {
- "description": "External contains settings specific to the generic External infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.ExternalPlatformStatus"
- },
- "gcp": {
- "description": "GCP contains settings specific to the Google Cloud Platform infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.GCPPlatformStatus"
- },
- "ibmcloud": {
- "description": "IBMCloud contains settings specific to the IBMCloud infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.IBMCloudPlatformStatus"
- },
- "kubevirt": {
- "description": "Kubevirt contains settings specific to the kubevirt infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.KubevirtPlatformStatus"
- },
- "nutanix": {
- "description": "Nutanix contains settings specific to the Nutanix infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.NutanixPlatformStatus"
- },
- "openstack": {
- "description": "OpenStack contains settings specific to the OpenStack infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.OpenStackPlatformStatus"
- },
- "ovirt": {
- "description": "Ovirt contains settings specific to the oVirt infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.OvirtPlatformStatus"
- },
- "powervs": {
- "description": "PowerVS contains settings specific to the Power Systems Virtual Servers infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.PowerVSPlatformStatus"
- },
- "type": {
- "description": "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.\n\nThis value will be synced with to the `status.platform` and `status.platformStatus.type`. Currently this value cannot be changed once set.",
- "type": "string",
- "default": ""
+ "nodeSelector": {
+ "description": "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
},
- "vsphere": {
- "description": "VSphere contains settings specific to the VSphere infrastructure provider.",
- "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformStatus"
+ "tolerations": {
+ "description": "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is an empty list.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "PlatformStatus",
+ "Kind": "NetworkDiagnosticsSourcePlacement",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.PowerVSPlatformSpec": {
- "description": "PowerVSPlatformSpec holds the desired state of the IBM Power Systems Virtual Servers infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "io.openshift.config.v1.NetworkDiagnosticsTargetPlacement": {
+ "description": "NetworkDiagnosticsTargetPlacement defines node scheduling configuration network diagnostics target components",
"type": "object",
"properties": {
- "serviceEndpoints": {
- "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.",
+ "nodeSelector": {
+ "description": "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "tolerations": {
+ "description": "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `- operator: \"Exists\"` which means that all taints are tolerated.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.PowerVSServiceEndpoint"
+ "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
},
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "PowerVSPlatformSpec",
+ "Kind": "NetworkDiagnosticsTargetPlacement",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.PowerVSPlatformStatus": {
- "description": "PowerVSPlatformStatus holds the current status of the IBM Power Systems Virtual Servers infrastrucutre provider.",
+ "io.openshift.config.v1.NetworkList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "region",
- "zone"
+ "metadata",
+ "items"
],
"properties": {
- "cisInstanceCRN": {
- "description": "CISInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain",
- "type": "string"
- },
- "dnsInstanceCRN": {
- "description": "DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "region": {
- "description": "region holds the default Power VS region for new Power VS resources created by the cluster.",
- "type": "string",
- "default": ""
- },
- "resourceGroup": {
- "description": "resourceGroup is the resource group name for new IBMCloud resources created for a cluster. The resource group specified here will be used by cluster-image-registry-operator to set up a COS Instance in IBMCloud for the cluster registry. More about resource groups can be found here: https://cloud.ibm.com/docs/account?topic=account-rgs. When omitted, the image registry operator won't be able to configure storage, which results in the image registry cluster operator not being in an available state.",
- "type": "string",
- "default": ""
- },
- "serviceEndpoints": {
- "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.",
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.PowerVSServiceEndpoint"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "$ref": "#/definitions/io.openshift.config.v1.Network"
+ }
},
- "zone": {
- "description": "zone holds the default zone for the new Power VS resources created by the cluster. Note: Currently only single-zone OCP clusters are supported",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "PowerVSPlatformStatus",
+ "Kind": "NetworkList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.PowerVSServiceEndpoint": {
- "description": "PowervsServiceEndpoint stores the configuration of a custom url to override existing defaults of PowerVS Services.",
+ "io.openshift.config.v1.NetworkMigration": {
+ "description": "NetworkMigration represents the network migration status.",
"type": "object",
- "required": [
- "name",
- "url"
- ],
"properties": {
- "name": {
- "description": "name is the name of the Power VS service. Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller Power Cloud - https://cloud.ibm.com/apidocs/power-cloud",
- "type": "string",
- "default": ""
+ "mtu": {
+ "description": "MTU is the MTU configuration that is being deployed.",
+ "$ref": "#/definitions/io.openshift.config.v1.MTUMigration"
},
- "url": {
- "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.",
- "type": "string",
- "default": ""
+ "networkType": {
+ "description": "NetworkType is the target plugin that is being deployed. DEPRECATED: network type migration is no longer supported, so this should always be unset.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "PowerVSServiceEndpoint",
+ "Kind": "NetworkMigration",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.PrefixedClaimMapping": {
+ "io.openshift.config.v1.NetworkSpec": {
+ "description": "NetworkSpec is the desired network configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.",
"type": "object",
"required": [
- "claim",
- "prefix"
+ "clusterNetwork",
+ "serviceNetwork",
+ "networkType"
],
"properties": {
- "claim": {
- "description": "Claim is a JWT token claim to be used in the mapping",
- "type": "string",
- "default": ""
+ "clusterNetwork": {
+ "description": "IP address pool to use for pod IPs. This field is immutable after installation.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterNetworkEntry"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "prefix": {
- "description": "Prefix is a string to prefix the value from the token in the result of the claim mapping.\n\nBy default, no prefixing occurs.\n\nExample: if `prefix` is set to \"myoidc:\"\" and the `claim` in JWT contains an array of strings \"a\", \"b\" and \"c\", the mapping will result in an array of string \"myoidc:a\", \"myoidc:b\" and \"myoidc:c\".",
+ "externalIP": {
+ "description": "externalIP defines configuration for controllers that affect Service.ExternalIP. If nil, then ExternalIP is not allowed to be set.",
+ "$ref": "#/definitions/io.openshift.config.v1.ExternalIPConfig"
+ },
+ "networkDiagnostics": {
+ "description": "networkDiagnostics defines network diagnostics configuration.\n\nTakes precedence over spec.disableNetworkDiagnostics in network.operator.openshift.io. If networkDiagnostics is not specified or is empty, and the spec.disableNetworkDiagnostics flag in network.operator.openshift.io is set to true, the network diagnostics feature will be disabled.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.NetworkDiagnostics"
+ },
+ "networkType": {
+ "description": "NetworkType is the plugin that is to be deployed (e.g. OVNKubernetes). This should match a value that the cluster-network-operator understands, or else no networking will be installed. Currently supported values are: - OVNKubernetes This field is immutable after installation.",
"type": "string",
"default": ""
+ },
+ "serviceNetwork": {
+ "description": "IP address pool for services. Currently, we only support a single entry here. This field is immutable after installation.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "serviceNodePortRange": {
+ "description": "The port range allowed for Services of type NodePort. If not specified, the default of 30000-32767 will be used. Such Services without a NodePort specified will have one automatically allocated from this range. This parameter can be updated after the cluster is installed.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "PrefixedClaimMapping",
+ "Kind": "NetworkSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ProfileCustomizations": {
- "description": "ProfileCustomizations contains various parameters for modifying the default behavior of certain profiles",
+ "io.openshift.config.v1.NetworkStatus": {
+ "description": "NetworkStatus is the current network configuration.",
"type": "object",
"properties": {
- "dynamicResourceAllocation": {
- "description": "dynamicResourceAllocation allows to enable or disable dynamic resource allocation within the scheduler. Dynamic resource allocation is an API for requesting and sharing resources between pods and containers inside a pod. Third-party resource drivers are responsible for tracking and allocating resources. Different kinds of resources support arbitrary parameters for defining requirements and initialization. Valid values are Enabled, Disabled and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Disabled.",
- "type": "string",
- "default": ""
+ "clusterNetwork": {
+ "description": "IP address pool to use for pod IPs.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterNetworkEntry"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "clusterNetworkMTU": {
+ "description": "ClusterNetworkMTU is the MTU for inter-pod networking.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "conditions": {
+ "description": "conditions represents the observations of a network.config current state. Known .status.conditions.type are: \"NetworkDiagnosticsAvailable\"",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
+ },
+ "migration": {
+ "description": "Migration contains the cluster network migration configuration.",
+ "$ref": "#/definitions/io.openshift.config.v1.NetworkMigration"
+ },
+ "networkType": {
+ "description": "NetworkType is the plugin that is deployed (e.g. OVNKubernetes).",
+ "type": "string"
+ },
+ "serviceNetwork": {
+ "description": "IP address pool for services. Currently, we only support a single entry here.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ProfileCustomizations",
+ "Kind": "NetworkStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.Project": {
- "description": "Project holds cluster-wide information about Project. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.Node": {
+ "description": "Node holds cluster-wide information about node specific features.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"spec"
@@ -76839,23 +77856,23 @@
"spec": {
"description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ProjectSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.NodeSpec"
},
"status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
+ "description": "status holds observed values.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ProjectStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.NodeStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "Project",
+ "Kind": "Node",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1.ProjectList": {
+ "io.openshift.config.v1.NodeList": {
"description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
@@ -76871,7 +77888,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Project"
+ "$ref": "#/definitions/io.openshift.config.v1.Node"
}
},
"kind": {
@@ -76888,252 +77905,193 @@
"Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ProjectList",
+ "Kind": "NodeList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ProjectSpec": {
- "description": "ProjectSpec holds the project creation configuration.",
+ "io.openshift.config.v1.NodeSpec": {
"type": "object",
"properties": {
- "projectRequestMessage": {
- "description": "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint",
- "type": "string",
- "default": ""
+ "cgroupMode": {
+ "description": "CgroupMode determines the cgroups version on the node",
+ "type": "string"
},
- "projectRequestTemplate": {
- "description": "projectRequestTemplate is the template to use for creating projects in response to projectrequest. This must point to a template in 'openshift-config' namespace. It is optional. If it is not specified, a default template is used.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.TemplateReference"
+ "workerLatencyProfile": {
+ "description": "WorkerLatencyProfile determins the how fast the kubelet is updating the status and corresponding reaction of the cluster",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ProjectSpec",
+ "Kind": "NodeSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ProjectStatus": {
+ "io.openshift.config.v1.NodeStatus": {
"type": "object",
+ "properties": {
+ "conditions": {
+ "description": "conditions contain the details and the current state of the nodes.config object",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
+ }
+ },
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ProjectStatus",
+ "Kind": "NodeStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.PromQLClusterCondition": {
- "description": "PromQLClusterCondition represents a cluster condition based on PromQL.",
+ "io.openshift.config.v1.NutanixFailureDomain": {
+ "description": "NutanixFailureDomain configures failure domain information for the Nutanix platform.",
"type": "object",
"required": [
- "promql"
+ "name",
+ "cluster",
+ "subnets"
],
"properties": {
- "promql": {
- "description": "PromQL is a PromQL query classifying clusters. This query query should return a 1 in the match case and a 0 in the does-not-match case. Queries which return no time series, or which return values besides 0 or 1, are evaluation failures.",
+ "cluster": {
+ "description": "cluster is to identify the cluster (the Prism Element under management of the Prism Central), in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.NutanixResourceIdentifier"
+ },
+ "name": {
+ "description": "name defines the unique name of a failure domain. Name is required and must be at most 64 characters in length. It must consist of only lower case alphanumeric characters and hyphens (-). It must start and end with an alphanumeric character. This value is arbitrary and is used to identify the failure domain within the platform.",
"type": "string",
"default": ""
+ },
+ "subnets": {
+ "description": "subnets holds a list of identifiers (one or more) of the cluster's network subnets for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.NutanixResourceIdentifier"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "PromQLClusterCondition",
+ "Kind": "NutanixFailureDomain",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.Proxy": {
- "description": "Proxy holds cluster-wide information on how to configure default proxies for the cluster. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.NutanixPlatformLoadBalancer": {
+ "description": "NutanixPlatformLoadBalancer defines the load balancer used by the cluster on Nutanix platform.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "Spec holds user-settable values for the proxy configuration",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ProxySpec"
- },
- "status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ProxyStatus"
+ "type": {
+ "description": "type defines the type of load balancer used by the cluster on Nutanix platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.",
+ "type": "string",
+ "default": "OpenShiftManagedDefault"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "Proxy",
- "Scope": "Clustered"
- }
+ "Kind": "NutanixPlatformLoadBalancer",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {}
+ }
+ ]
},
- "io.openshift.config.v1.ProxyList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.NutanixPlatformSpec": {
+ "description": "NutanixPlatformSpec holds the desired state of the Nutanix infrastructure provider. This only includes fields that can be modified in the cluster.",
"type": "object",
"required": [
- "metadata",
- "items"
+ "prismCentral",
+ "prismElements"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
+ "failureDomains": {
+ "description": "failureDomains configures failure domains information for the Nutanix platform. When set, the failure domains defined here may be used to spread Machines across prism element clusters to improve fault tolerance of the cluster.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Proxy"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "$ref": "#/definitions/io.openshift.config.v1.NutanixFailureDomain"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "prismCentral": {
+ "description": "prismCentral holds the endpoint address and port to access the Nutanix Prism Central. When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
- }
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "ProxyList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.ProxySpec": {
- "description": "ProxySpec contains cluster proxy creation configuration.",
- "type": "object",
- "properties": {
- "httpProxy": {
- "description": "httpProxy is the URL of the proxy for HTTP requests. Empty means unset and will not result in an env var.",
- "type": "string"
- },
- "httpsProxy": {
- "description": "httpsProxy is the URL of the proxy for HTTPS requests. Empty means unset and will not result in an env var.",
- "type": "string"
- },
- "noProxy": {
- "description": "noProxy is a comma-separated list of hostnames and/or CIDRs and/or IPs for which the proxy should not be used. Empty means unset and will not result in an env var.",
- "type": "string"
+ "$ref": "#/definitions/io.openshift.config.v1.NutanixPrismEndpoint"
},
- "readinessEndpoints": {
- "description": "readinessEndpoints is a list of endpoints used to verify readiness of the proxy.",
+ "prismElements": {
+ "description": "prismElements holds one or more endpoint address and port data to access the Nutanix Prism Elements (clusters) of the Nutanix Prism Central. Currently we only support one Prism Element (cluster) for an OpenShift cluster, where all the Nutanix resources (VMs, subnets, volumes, etc.) used in the OpenShift cluster are located. In the future, we may support Nutanix resources (VMs, etc.) spread over multiple Prism Elements (clusters) of the Prism Central.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
- }
- },
- "trustedCA": {
- "description": "trustedCA is a reference to a ConfigMap containing a CA certificate bundle. The trustedCA field should only be consumed by a proxy validator. The validator is responsible for reading the certificate bundle from the required key \"ca-bundle.crt\", merging it with the system default trust bundle, and writing the merged trust bundle to a ConfigMap named \"trusted-ca-bundle\" in the \"openshift-config-managed\" namespace. Clients that expect to make proxy connections must use the trusted-ca-bundle for all HTTPS requests to the proxy, and may use the trusted-ca-bundle for non-proxy HTTPS requests as well.\n\nThe namespace for the ConfigMap referenced by trustedCA is \"openshift-config\". Here is an example ConfigMap (in yaml):\n\napiVersion: v1 kind: ConfigMap metadata:\n name: user-ca-bundle\n namespace: openshift-config\n data:\n ca-bundle.crt: |\n -----BEGIN CERTIFICATE-----\n Custom CA certificate bundle.\n -----END CERTIFICATE-----",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "ProxySpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.ProxyStatus": {
- "description": "ProxyStatus shows current known state of the cluster proxy.",
- "type": "object",
- "properties": {
- "httpProxy": {
- "description": "httpProxy is the URL of the proxy for HTTP requests.",
- "type": "string"
- },
- "httpsProxy": {
- "description": "httpsProxy is the URL of the proxy for HTTPS requests.",
- "type": "string"
- },
- "noProxy": {
- "description": "noProxy is a comma-separated list of hostnames and/or CIDRs for which the proxy should not be used.",
- "type": "string"
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.NutanixPrismElementEndpoint"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ProxyStatus",
+ "Kind": "NutanixPlatformSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.RegistryLocation": {
- "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.",
+ "io.openshift.config.v1.NutanixPlatformStatus": {
+ "description": "NutanixPlatformStatus holds the current status of the Nutanix infrastructure provider.",
"type": "object",
"required": [
- "domainName"
+ "apiServerInternalIPs",
+ "ingressIPs"
],
"properties": {
- "domainName": {
- "description": "domainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.",
- "type": "string",
- "default": ""
+ "apiServerInternalIP": {
+ "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.",
+ "type": "string"
},
- "insecure": {
- "description": "insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.",
- "type": "boolean"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "RegistryLocation",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.RegistrySources": {
- "description": "RegistrySources holds cluster-wide information about how to handle the registries config.",
- "type": "object",
- "properties": {
- "allowedRegistries": {
- "description": "allowedRegistries are the only registries permitted for image pull and push actions. All other registries are denied.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.",
+ "apiServerInternalIPs": {
+ "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.",
"type": "array",
"items": {
"type": "string",
"default": ""
},
- "x-kubernetes-list-type": "atomic"
+ "x-kubernetes-list-type": "set"
},
- "blockedRegistries": {
- "description": "blockedRegistries cannot be used for image pull and push actions. All other registries are permitted.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "ingressIP": {
+ "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.",
+ "type": "string"
},
- "containerRuntimeSearchRegistries": {
- "description": "containerRuntimeSearchRegistries are registries that will be searched when pulling images that do not have fully qualified domains in their pull specs. Registries will be searched in the order provided in the list. Note: this search list only works with the container runtime, i.e CRI-O. Will NOT work with builds or imagestream imports.",
+ "ingressIPs": {
+ "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.",
"type": "array",
"items": {
"type": "string",
@@ -77141,52 +78099,37 @@
},
"x-kubernetes-list-type": "set"
},
- "insecureRegistries": {
- "description": "insecureRegistries are registries which do not have a valid TLS certificates or only support HTTP connections.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
+ "loadBalancer": {
+ "description": "loadBalancer defines how the load balancer used by the cluster is configured.",
+ "default": {
+ "type": "OpenShiftManagedDefault"
},
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/io.openshift.config.v1.NutanixPlatformLoadBalancer"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "RegistrySources",
+ "Kind": "NutanixPlatformStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.Release": {
- "description": "Release represents an OpenShift release image and associated metadata.",
+ "io.openshift.config.v1.NutanixPrismElementEndpoint": {
+ "description": "NutanixPrismElementEndpoint holds the name and endpoint data for a Prism Element (cluster)",
"type": "object",
"required": [
- "version",
- "image"
+ "name",
+ "endpoint"
],
"properties": {
- "channels": {
- "description": "channels is the set of Cincinnati channels to which the release currently belongs.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "set"
- },
- "image": {
- "description": "image is a container image location that contains the update. When this field is part of spec, image is optional if version is specified and the availableUpdates field contains a matching version.",
- "type": "string",
- "default": ""
- },
- "url": {
- "description": "url contains information about this release. This URL is set by the 'url' metadata property on a release or the metadata returned by the update API and should be displayed as a link in user interfaces. The URL field may not be set for test or nightly releases.",
- "type": "string"
+ "endpoint": {
+ "description": "endpoint holds the endpoint address and port data of the Prism Element (cluster). When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.NutanixPrismEndpoint"
},
- "version": {
- "description": "version is a semantic version identifying the update version. When this field is part of spec, version is optional if image is specified.",
+ "name": {
+ "description": "name is the name of the Prism Element (cluster). This value will correspond with the cluster field configured on other resources (eg Machines, PVCs, etc).",
"type": "string",
"default": ""
}
@@ -77195,205 +78138,81 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "Release",
+ "Kind": "NutanixPrismElementEndpoint",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.RemoteConnectionInfo": {
- "description": "RemoteConnectionInfo holds information necessary for establishing a remote connection",
+ "io.openshift.config.v1.NutanixPrismEndpoint": {
+ "description": "NutanixPrismEndpoint holds the endpoint address and port to access the Nutanix Prism Central or Element (cluster)",
"type": "object",
"required": [
- "url",
- "ca",
- "certFile",
- "keyFile"
+ "address",
+ "port"
],
"properties": {
- "ca": {
- "description": "CA is the CA for verifying TLS connections",
- "type": "string",
- "default": ""
- },
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
- "type": "string",
- "default": ""
- },
- "keyFile": {
- "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
- "type": "string",
- "default": ""
- },
- "url": {
- "description": "URL is the remote URL to connect to",
+ "address": {
+ "description": "address is the endpoint address (DNS name or IP address) of the Nutanix Prism Central or Element (cluster)",
"type": "string",
"default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "RemoteConnectionInfo",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.RepositoryDigestMirrors": {
- "description": "RepositoryDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.",
- "type": "object",
- "required": [
- "source"
- ],
- "properties": {
- "allowMirrorByTags": {
- "description": "allowMirrorByTags if true, the mirrors can be used to pull the images that are referenced by their tags. Default is false, the mirrors only work when pulling the images that are referenced by their digests. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Forcing digest-pulls for mirrors avoids that issue.",
- "type": "boolean"
- },
- "mirrors": {
- "description": "mirrors is zero or more repositories that may also contain the same images. If the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec. No mirror will be configured. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. Other cluster configuration, including (but not limited to) other repositoryDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "set"
},
- "source": {
- "description": "source is the repository that users refer to, e.g. in image pull specifications.",
- "type": "string",
- "default": ""
+ "port": {
+ "description": "port is the port number to access the Nutanix Prism Central or Element (cluster)",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "RepositoryDigestMirrors",
+ "Kind": "NutanixPrismEndpoint",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.RequestHeaderIdentityProvider": {
- "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials",
+ "io.openshift.config.v1.NutanixResourceIdentifier": {
+ "description": "NutanixResourceIdentifier holds the identity of a Nutanix PC resource (cluster, image, subnet, etc.)",
"type": "object",
"required": [
- "loginURL",
- "challengeURL",
- "ca",
- "headers",
- "preferredUsernameHeaders",
- "nameHeaders",
- "emailHeaders"
+ "type"
],
"properties": {
- "ca": {
- "description": "ca is a required reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. Specifically, it allows verification of incoming requests to prevent header spoofing. The key \"ca.crt\" is used to locate the data. If the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. The namespace for this config map is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
- },
- "challengeURL": {
- "description": "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here. ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when challenge is set to true.",
- "type": "string",
- "default": ""
- },
- "clientCommonNames": {
- "description": "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "emailHeaders": {
- "description": "emailHeaders is the set of headers to check for the email address",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "headers": {
- "description": "headers is the set of headers to check for identity information",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "name": {
+ "description": "name is the resource name in the PC. It cannot be empty if the type is Name.",
+ "type": "string"
},
- "loginURL": {
- "description": "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when login is set to true.",
+ "type": {
+ "description": "type is the identifier type to use for this resource.",
"type": "string",
"default": ""
},
- "nameHeaders": {
- "description": "nameHeaders is the set of headers to check for the display name",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "preferredUsernameHeaders": {
- "description": "preferredUsernameHeaders is the set of headers to check for the preferred username",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "uuid": {
+ "description": "uuid is the UUID of the resource in the PC. It cannot be empty if the type is UUID.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "RequestHeaderIdentityProvider",
+ "Kind": "NutanixResourceIdentifier",
"Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.RequiredHSTSPolicy": {
- "type": "object",
- "required": [
- "domainPatterns",
- "maxAge"
- ],
- "properties": {
- "domainPatterns": {
- "description": "domainPatterns is a list of domains for which the desired HSTS annotations are required. If domainPatterns is specified and a route is created with a spec.host matching one of the domains, the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy.\n\nThe use of wildcards is allowed like this: *.foo.com matches everything under foo.com. foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "name": "Name",
+ "uuid": "UUID"
}
- },
- "includeSubDomainsPolicy": {
- "description": "includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com",
- "type": "string"
- },
- "maxAge": {
- "description": "maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. If set to 0, it negates the effect, and hosts are removed as HSTS hosts. If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS policy will eventually expire on that client.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.MaxAgePolicy"
- },
- "namespaceSelector": {
- "description": "namespaceSelector specifies a label selector such that the policy applies only to those routes that are in namespaces with labels that match the selector, and are in one of the DomainPatterns. Defaults to the empty LabelSelector, which matches everything.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
- },
- "preloadPolicy": {
- "description": "preloadPolicy directs the client to include hosts in its host preload list so that it never needs to do an initial load to get the HSTS header (note that this is not defined in RFC 6797 and is therefore client implementation-dependent).",
- "type": "string"
}
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "RequiredHSTSPolicy",
- "Scope": "Namespaced"
- }
+ ]
},
- "io.openshift.config.v1.Scheduler": {
- "description": "Scheduler holds cluster-wide config information to run the Kubernetes Scheduler and influence its placement decisions. The canonical name for this config is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.OAuth": {
+ "description": "OAuth holds cluster-wide information about OAuth. The canonical name is `cluster`. It is used to configure the integrated OAuth server. This configuration is only honored when the top level Authentication config has type set to IntegratedOAuth.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"spec"
],
"properties": {
@@ -77413,23 +78232,23 @@
"spec": {
"description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SchedulerSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.OAuthSpec"
},
"status": {
"description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SchedulerStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.OAuthStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "Scheduler",
+ "Kind": "OAuth",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1.SchedulerList": {
+ "io.openshift.config.v1.OAuthList": {
"description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
@@ -77445,7 +78264,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.Scheduler"
+ "$ref": "#/definitions/io.openshift.config.v1.OAuth"
}
},
"kind": {
@@ -77462,153 +78281,188 @@
"Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "SchedulerList",
+ "Kind": "OAuthList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.SchedulerSpec": {
+ "io.openshift.config.v1.OAuthRemoteConnectionInfo": {
+ "description": "OAuthRemoteConnectionInfo holds information necessary for establishing a remote connection",
"type": "object",
+ "required": [
+ "url"
+ ],
"properties": {
- "defaultNodeSelector": {
- "description": "defaultNodeSelector helps set the cluster-wide default node selector to restrict pod placement to specific nodes. This is applied to the pods created in all namespaces and creates an intersection with any existing nodeSelectors already set on a pod, additionally constraining that pod's selector. For example, defaultNodeSelector: \"type=user-node,region=east\" would set nodeSelector field in pod spec to \"type=user-node,region=east\" to all pods created in all namespaces. Namespaces having project-wide node selectors won't be impacted even if this field is set. This adds an annotation section to the namespace. For example, if a new namespace is created with node-selector='type=user-node,region=east', the annotation openshift.io/node-selector: type=user-node,region=east gets added to the project. When the openshift.io/node-selector annotation is set on the project the value is used in preference to the value we are setting for defaultNodeSelector field. For instance, openshift.io/node-selector: \"type=user-node,region=west\" means that the default of \"type=user-node,region=east\" set in defaultNodeSelector would not be applied.",
- "type": "string"
+ "ca": {
+ "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
},
- "mastersSchedulable": {
- "description": "MastersSchedulable allows masters nodes to be schedulable. When this flag is turned on, all the master nodes in the cluster will be made schedulable, so that workload pods can run on them. The default value for this field is false, meaning none of the master nodes are schedulable. Important Note: Once the workload pods start running on the master nodes, extreme care must be taken to ensure that cluster-critical control plane components are not impacted. Please turn on this field after doing due diligence.",
- "type": "boolean",
- "default": false
+ "tlsClientCert": {
+ "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
},
- "policy": {
- "description": "DEPRECATED: the scheduler Policy API has been deprecated and will be removed in a future release. policy is a reference to a ConfigMap containing scheduler policy which has user specified predicates and priorities. If this ConfigMap is not available scheduler will default to use DefaultAlgorithmProvider. The namespace for this configmap is openshift-config.",
+ "tlsClientKey": {
+ "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
},
- "profile": {
- "description": "profile sets which scheduling profile should be set in order to configure scheduling decisions for new pods.\n\nValid values are \"LowNodeUtilization\", \"HighNodeUtilization\", \"NoScoring\" Defaults to \"LowNodeUtilization\"",
- "type": "string"
+ "url": {
+ "description": "url is the remote URL to connect to",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "OAuthRemoteConnectionInfo",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.OAuthSpec": {
+ "description": "OAuthSpec contains desired cluster auth configuration",
+ "type": "object",
+ "required": [
+ "tokenConfig"
+ ],
+ "properties": {
+ "identityProviders": {
+ "description": "identityProviders is an ordered list of ways for a user to identify themselves. When this list is empty, no identities are provisioned for users.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.IdentityProvider"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "profileCustomizations": {
- "description": "profileCustomizations contains configuration for modifying the default behavior of existing scheduler profiles.",
+ "templates": {
+ "description": "templates allow you to customize pages like the login page.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ProfileCustomizations"
+ "$ref": "#/definitions/io.openshift.config.v1.OAuthTemplates"
+ },
+ "tokenConfig": {
+ "description": "tokenConfig contains options for authorization and access tokens",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.TokenConfig"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "SchedulerSpec",
+ "Kind": "OAuthSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.SchedulerStatus": {
+ "io.openshift.config.v1.OAuthStatus": {
+ "description": "OAuthStatus shows current known state of OAuth server in the cluster",
"type": "object",
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "SchedulerStatus",
+ "Kind": "OAuthStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.SecretNameReference": {
- "description": "SecretNameReference references a secret in a specific namespace. The namespace must be specified at the point of use.",
+ "io.openshift.config.v1.OAuthTemplates": {
+ "description": "OAuthTemplates allow for customization of pages like the login page",
"type": "object",
- "required": [
- "name"
- ],
"properties": {
- "name": {
- "description": "name is the metadata.name of the referenced secret",
- "type": "string",
- "default": ""
+ "error": {
+ "description": "error is the name of a secret that specifies a go template to use to render error pages during the authentication or grant flow. The key \"errors.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default error page is used. If the specified template is not valid, the default error page is used. If unspecified, the default error page is used. The namespace for this secret is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ },
+ "login": {
+ "description": "login is the name of a secret that specifies a go template to use to render the login page. The key \"login.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default login page is used. If the specified template is not valid, the default login page is used. If unspecified, the default login page is used. The namespace for this secret is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ },
+ "providerSelection": {
+ "description": "providerSelection is the name of a secret that specifies a go template to use to render the provider selection page. The key \"providers.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default provider selection page is used. If the specified template is not valid, the default provider selection page is used. If unspecified, the default provider selection page is used. The namespace for this secret is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "SecretNameReference",
+ "Kind": "OAuthTemplates",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.ServingInfo": {
- "description": "ServingInfo holds information about serving web pages",
+ "io.openshift.config.v1.OIDCClientConfig": {
"type": "object",
"required": [
- "bindAddress",
- "bindNetwork",
- "certFile",
- "keyFile"
+ "componentName",
+ "componentNamespace",
+ "clientID",
+ "clientSecret",
+ "extraScopes"
],
"properties": {
- "bindAddress": {
- "description": "BindAddress is the ip:port to serve on",
+ "clientID": {
+ "description": "ClientID is the identifier of the OIDC client from the OIDC provider",
"type": "string",
"default": ""
},
- "bindNetwork": {
- "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"",
+ "clientSecret": {
+ "description": "ClientSecret refers to a secret in the `openshift-config` namespace that contains the client secret in the `clientSecret` key of the `.data` field",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ },
+ "componentName": {
+ "description": "ComponentName is the name of the component that is supposed to consume this client configuration",
"type": "string",
"default": ""
},
- "certFile": {
- "description": "CertFile is a file containing a PEM-encoded certificate",
+ "componentNamespace": {
+ "description": "ComponentNamespace is the namespace of the component that is supposed to consume this client configuration",
"type": "string",
"default": ""
},
- "cipherSuites": {
- "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants",
+ "extraScopes": {
+ "description": "ExtraScopes is an optional set of scopes to request tokens with.",
"type": "array",
"items": {
"type": "string",
"default": ""
- }
- },
- "clientCA": {
- "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates",
- "type": "string"
- },
- "keyFile": {
- "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
- "type": "string",
- "default": ""
- },
- "minTLSVersion": {
- "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants",
- "type": "string"
- },
- "namedCertificates": {
- "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.NamedCertificate"
- }
+ },
+ "x-kubernetes-list-type": "set"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ServingInfo",
+ "Kind": "OIDCClientConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.SignatureStore": {
- "description": "SignatureStore represents the URL of custom Signature Store",
+ "io.openshift.config.v1.OIDCClientReference": {
"type": "object",
"required": [
- "url"
+ "oidcProviderName",
+ "issuerURL",
+ "clientID"
],
"properties": {
- "ca": {
- "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the signature store is not honored. If the specified ca data is not valid, the signature store is not honored. If empty, we fall back to the CA configured via Proxy, which is appended to the default system roots. The namespace for this config map is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ "clientID": {
+ "description": "ClientID is the identifier of the OIDC client from the OIDC provider",
+ "type": "string",
+ "default": ""
},
- "url": {
- "description": "url contains the upstream custom signature store URL. url should be a valid absolute http/https URI of an upstream signature store as per rfc1738. This must be provided and cannot be empty.",
+ "issuerURL": {
+ "description": "URL is the serving URL of the token issuer. Must use the https:// scheme.",
+ "type": "string",
+ "default": ""
+ },
+ "oidcProviderName": {
+ "description": "OIDCName refers to the `name` of the provider from `oidcProviders`",
"type": "string",
"default": ""
}
@@ -77617,76 +78471,152 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "SignatureStore",
+ "Kind": "OIDCClientReference",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.StringSource": {
- "description": "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.",
+ "io.openshift.config.v1.OIDCClientStatus": {
"type": "object",
"required": [
- "value",
- "env",
- "file",
- "keyFile"
+ "componentName",
+ "componentNamespace",
+ "currentOIDCClients",
+ "consumingUsers"
],
"properties": {
- "env": {
- "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.",
+ "componentName": {
+ "description": "ComponentName is the name of the component that will consume a client configuration.",
"type": "string",
"default": ""
},
- "file": {
- "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.",
+ "componentNamespace": {
+ "description": "ComponentNamespace is the namespace of the component that will consume a client configuration.",
"type": "string",
"default": ""
},
- "keyFile": {
- "description": "KeyFile references a file containing the key to use to decrypt the value.",
- "type": "string",
- "default": ""
+ "conditions": {
+ "description": "Conditions are used to communicate the state of the `oidcClients` entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf Available is true, the component is successfully using the configured client. If Degraded is true, that means something has gone wrong trying to handle the client configuration. If Progressing is true, that means the component is taking some action related to the `oidcClients` entry.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "value": {
- "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.",
- "type": "string",
- "default": ""
+ "consumingUsers": {
+ "description": "ConsumingUsers is a slice of ServiceAccounts that need to have read permission on the `clientSecret` secret.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "set"
+ },
+ "currentOIDCClients": {
+ "description": "CurrentOIDCClients is a list of clients that the component is currently using.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.OIDCClientReference"
+ },
+ "x-kubernetes-list-map-keys": [
+ "issuerURL",
+ "clientID"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "StringSource",
+ "Kind": "OIDCClientStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.StringSourceSpec": {
- "description": "StringSourceSpec specifies a string value, or external location",
+ "io.openshift.config.v1.OIDCProvider": {
"type": "object",
"required": [
- "value",
- "env",
- "file",
- "keyFile"
+ "name",
+ "issuer",
+ "oidcClients",
+ "claimMappings"
],
"properties": {
- "env": {
- "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.",
+ "claimMappings": {
+ "description": "ClaimMappings describes rules on how to transform information from an ID token into a cluster identity",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.TokenClaimMappings"
+ },
+ "claimValidationRules": {
+ "description": "ClaimValidationRules are rules that are applied to validate token claims to authenticate users.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.TokenClaimValidationRule"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "issuer": {
+ "description": "Issuer describes atributes of the OIDC token issuer",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.TokenIssuer"
+ },
+ "name": {
+ "description": "Name of the OIDC provider",
"type": "string",
"default": ""
},
- "file": {
- "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.",
+ "oidcClients": {
+ "description": "OIDCClients contains configuration for the platform's clients that need to request tokens from the issuer",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.OIDCClientConfig"
+ },
+ "x-kubernetes-list-map-keys": [
+ "componentNamespace",
+ "componentName"
+ ],
+ "x-kubernetes-list-type": "map"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "OIDCProvider",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.ObjectReference": {
+ "description": "ObjectReference contains enough information to let you inspect or modify the referred object.",
+ "type": "object",
+ "required": [
+ "group",
+ "resource",
+ "name"
+ ],
+ "properties": {
+ "group": {
+ "description": "group of the referent.",
"type": "string",
"default": ""
},
- "keyFile": {
- "description": "KeyFile references a file containing the key to use to decrypt the value.",
+ "name": {
+ "description": "name of the referent.",
"type": "string",
"default": ""
},
- "value": {
- "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.",
+ "namespace": {
+ "description": "namespace of the referent.",
+ "type": "string"
+ },
+ "resource": {
+ "description": "resource of the referent.",
"type": "string",
"default": ""
}
@@ -77695,20 +78625,27 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "StringSourceSpec",
+ "Kind": "ObjectReference",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.TLSProfileSpec": {
- "description": "TLSProfileSpec is the desired behavior of a TLSSecurityProfile.",
+ "io.openshift.config.v1.OldTLSProfile": {
+ "description": "OldTLSProfile is a TLS security profile based on: https://wiki.mozilla.org/Security/Server_Side_TLS#Old_backward_compatibility",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "OldTLSProfile",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.OpenIDClaims": {
+ "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider",
"type": "object",
- "required": [
- "ciphers",
- "minTLSVersion"
- ],
"properties": {
- "ciphers": {
- "description": "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries their operands do not support. For example, to use DES-CBC3-SHA (yaml):\n\n ciphers:\n - DES-CBC3-SHA",
+ "email": {
+ "description": "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity",
"type": "array",
"items": {
"type": "string",
@@ -77716,42 +78653,90 @@
},
"x-kubernetes-list-type": "atomic"
},
- "minTLSVersion": {
- "description": "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11\n\nNOTE: currently the highest minTLSVersion allowed is VersionTLS12",
- "type": "string",
- "default": ""
+ "groups": {
+ "description": "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user. If multiple claims are specified, the first one with a non-empty value is used.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "name": {
+ "description": "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "preferredUsername": {
+ "description": "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the sub claim",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "TLSProfileSpec",
+ "Kind": "OpenIDClaims",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.TLSSecurityProfile": {
- "description": "TLSSecurityProfile defines the schema for a TLS security profile. This object is used by operators to apply TLS security settings to operands.",
+ "io.openshift.config.v1.OpenIDIdentityProvider": {
+ "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials",
"type": "object",
+ "required": [
+ "clientID",
+ "clientSecret",
+ "issuer",
+ "claims"
+ ],
"properties": {
- "custom": {
- "description": "custom is a user-defined TLS security profile. Be extremely careful using a custom profile as invalid configurations can be catastrophic. An example custom profile looks like this:\n\n ciphers:\n\n - ECDHE-ECDSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-AES128-GCM-SHA256\n\n - ECDHE-ECDSA-AES128-GCM-SHA256\n\n minTLSVersion: VersionTLS11",
- "$ref": "#/definitions/io.openshift.config.v1.CustomTLSProfile"
+ "ca": {
+ "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
},
- "intermediate": {
- "description": "intermediate is a TLS security profile based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28recommended.29\n\nand looks like this (yaml):\n\n ciphers:\n\n - TLS_AES_128_GCM_SHA256\n\n - TLS_AES_256_GCM_SHA384\n\n - TLS_CHACHA20_POLY1305_SHA256\n\n - ECDHE-ECDSA-AES128-GCM-SHA256\n\n - ECDHE-RSA-AES128-GCM-SHA256\n\n - ECDHE-ECDSA-AES256-GCM-SHA384\n\n - ECDHE-RSA-AES256-GCM-SHA384\n\n - ECDHE-ECDSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-CHACHA20-POLY1305\n\n - DHE-RSA-AES128-GCM-SHA256\n\n - DHE-RSA-AES256-GCM-SHA384\n\n minTLSVersion: VersionTLS12",
- "$ref": "#/definitions/io.openshift.config.v1.IntermediateTLSProfile"
+ "claims": {
+ "description": "claims mappings",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.OpenIDClaims"
},
- "modern": {
- "description": "modern is a TLS security profile based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility\n\nand looks like this (yaml):\n\n ciphers:\n\n - TLS_AES_128_GCM_SHA256\n\n - TLS_AES_256_GCM_SHA384\n\n - TLS_CHACHA20_POLY1305_SHA256\n\n minTLSVersion: VersionTLS13",
- "$ref": "#/definitions/io.openshift.config.v1.ModernTLSProfile"
+ "clientID": {
+ "description": "clientID is the oauth client ID",
+ "type": "string",
+ "default": ""
},
- "old": {
- "description": "old is a TLS security profile based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Old_backward_compatibility\n\nand looks like this (yaml):\n\n ciphers:\n\n - TLS_AES_128_GCM_SHA256\n\n - TLS_AES_256_GCM_SHA384\n\n - TLS_CHACHA20_POLY1305_SHA256\n\n - ECDHE-ECDSA-AES128-GCM-SHA256\n\n - ECDHE-RSA-AES128-GCM-SHA256\n\n - ECDHE-ECDSA-AES256-GCM-SHA384\n\n - ECDHE-RSA-AES256-GCM-SHA384\n\n - ECDHE-ECDSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-CHACHA20-POLY1305\n\n - DHE-RSA-AES128-GCM-SHA256\n\n - DHE-RSA-AES256-GCM-SHA384\n\n - DHE-RSA-CHACHA20-POLY1305\n\n - ECDHE-ECDSA-AES128-SHA256\n\n - ECDHE-RSA-AES128-SHA256\n\n - ECDHE-ECDSA-AES128-SHA\n\n - ECDHE-RSA-AES128-SHA\n\n - ECDHE-ECDSA-AES256-SHA384\n\n - ECDHE-RSA-AES256-SHA384\n\n - ECDHE-ECDSA-AES256-SHA\n\n - ECDHE-RSA-AES256-SHA\n\n - DHE-RSA-AES128-SHA256\n\n - DHE-RSA-AES256-SHA256\n\n - AES128-GCM-SHA256\n\n - AES256-GCM-SHA384\n\n - AES128-SHA256\n\n - AES256-SHA256\n\n - AES128-SHA\n\n - AES256-SHA\n\n - DES-CBC3-SHA\n\n minTLSVersion: VersionTLS10",
- "$ref": "#/definitions/io.openshift.config.v1.OldTLSProfile"
+ "clientSecret": {
+ "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
},
- "type": {
- "description": "type is one of Old, Intermediate, Modern or Custom. Custom provides the ability to specify individual TLS security profile parameters. Old, Intermediate and Modern are TLS security profiles based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Recommended_configurations\n\nThe profiles are intent based, so they may change over time as new ciphers are developed and existing ciphers are found to be insecure. Depending on precisely which ciphers are available to a process, the list may be reduced.\n\nNote that the Modern profile is currently not supported because it is not yet well adopted by common software libraries.",
+ "extraAuthorizeParameters": {
+ "description": "extraAuthorizeParameters are any custom parameters to add to the authorize request.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "extraScopes": {
+ "description": "extraScopes are any scopes to request in addition to the standard \"openid\" scope.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "issuer": {
+ "description": "issuer is the URL that the OpenID Provider asserts as its Issuer Identifier. It must use the https scheme with no query or fragment component.",
"type": "string",
"default": ""
}
@@ -77760,50 +78745,155 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "TLSSecurityProfile",
+ "Kind": "OpenIDIdentityProvider",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.OpenStackPlatformLoadBalancer": {
+ "description": "OpenStackPlatformLoadBalancer defines the load balancer used by the cluster on OpenStack platform.",
+ "type": "object",
+ "properties": {
+ "type": {
+ "description": "type defines the type of load balancer used by the cluster on OpenStack platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.",
+ "type": "string",
+ "default": "OpenShiftManagedDefault"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "OpenStackPlatformLoadBalancer",
"Scope": "Namespaced"
},
"x-kubernetes-unions": [
{
"discriminator": "type",
- "fields-to-discriminateBy": {
- "custom": "Custom",
- "intermediate": "Intermediate",
- "modern": "Modern",
- "old": "Old"
- }
+ "fields-to-discriminateBy": {}
}
]
},
- "io.openshift.config.v1.TemplateReference": {
- "description": "TemplateReference references a template in a specific namespace. The namespace must be specified at the point of use.",
+ "io.openshift.config.v1.OpenStackPlatformSpec": {
+ "description": "OpenStackPlatformSpec holds the desired state of the OpenStack infrastructure provider. This only includes fields that can be modified in the cluster.",
+ "type": "object",
+ "properties": {
+ "apiServerInternalIPs": {
+ "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "ingressIPs": {
+ "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "machineNetworks": {
+ "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "OpenStackPlatformSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.OpenStackPlatformStatus": {
+ "description": "OpenStackPlatformStatus holds the current status of the OpenStack infrastructure provider.",
"type": "object",
"required": [
- "name"
+ "apiServerInternalIPs",
+ "ingressIPs"
],
"properties": {
- "name": {
- "description": "name is the metadata.name of the referenced project request template",
- "type": "string",
- "default": ""
+ "apiServerInternalIP": {
+ "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.",
+ "type": "string"
+ },
+ "apiServerInternalIPs": {
+ "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "cloudName": {
+ "description": "cloudName is the name of the desired OpenStack cloud in the client configuration file (`clouds.yaml`).",
+ "type": "string"
+ },
+ "ingressIP": {
+ "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.",
+ "type": "string"
+ },
+ "ingressIPs": {
+ "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "loadBalancer": {
+ "description": "loadBalancer defines how the load balancer used by the cluster is configured.",
+ "default": {
+ "type": "OpenShiftManagedDefault"
+ },
+ "$ref": "#/definitions/io.openshift.config.v1.OpenStackPlatformLoadBalancer"
+ },
+ "machineNetworks": {
+ "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "nodeDNSIP": {
+ "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for OpenStack deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "TemplateReference",
+ "Kind": "OpenStackPlatformStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.TestDetails": {
+ "io.openshift.config.v1.OperandVersion": {
"type": "object",
"required": [
- "testName"
+ "name",
+ "version"
],
"properties": {
- "testName": {
- "description": "TestName is the name of the test as it appears in junit XMLs. It does not include the suite name since the same test can be executed in many suites.",
+ "name": {
+ "description": "name is the name of the particular operand this version is for. It usually matches container images, not operators.",
+ "type": "string",
+ "default": ""
+ },
+ "version": {
+ "description": "version indicates which version of a particular operand is currently being managed. It must always match the Available operand. If 1.0.0 is Available, then this must indicate 1.0.0 even if the operator is trying to rollout 1.1.0",
"type": "string",
"default": ""
}
@@ -77812,15 +78902,17 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "TestDetails",
+ "Kind": "OperandVersion",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.TestReporting": {
- "description": "TestReporting is used for origin (and potentially others) to report the test names for a given FeatureGate into the payload for later analysis on a per-payload basis. This doesn't need any CRD because it's never stored in the cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.v1.OperatorHub": {
+ "description": "OperatorHub is the Schema for the operatorhubs API. It can be used to change the state of the default hub sources for OperatorHub on the cluster from enabled to disabled and vice versa.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "spec"
+ "metadata",
+ "spec",
+ "status"
],
"properties": {
"apiVersion": {
@@ -77838,159 +78930,153 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.TestReportingSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.OperatorHubSpec"
},
"status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.TestReportingStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.OperatorHubStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "TestReporting",
- "Scope": "Namespaced"
+ "Kind": "OperatorHub",
+ "Scope": "Clustered"
}
},
- "io.openshift.config.v1.TestReportingSpec": {
+ "io.openshift.config.v1.OperatorHubList": {
+ "description": "OperatorHubList contains a list of OperatorHub\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "testsForFeatureGates"
+ "metadata",
+ "items"
],
"properties": {
- "testsForFeatureGates": {
- "description": "TestsForFeatureGates is a list, indexed by FeatureGate and includes information about testing.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.FeatureGateTests"
+ "$ref": "#/definitions/io.openshift.config.v1.OperatorHub"
}
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "TestReportingSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.TestReportingStatus": {
- "type": "object",
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "TestReportingStatus",
+ "Kind": "OperatorHubList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.TokenClaimMapping": {
+ "io.openshift.config.v1.OperatorHubSpec": {
+ "description": "OperatorHubSpec defines the desired state of OperatorHub",
"type": "object",
- "required": [
- "claim"
- ],
"properties": {
- "claim": {
- "description": "Claim is a JWT token claim to be used in the mapping",
- "type": "string",
- "default": ""
+ "disableAllDefaultSources": {
+ "description": "disableAllDefaultSources allows you to disable all the default hub sources. If this is true, a specific entry in sources can be used to enable a default source. If this is false, a specific entry in sources can be used to disable or enable a default source.",
+ "type": "boolean"
+ },
+ "sources": {
+ "description": "sources is the list of default hub sources and their configuration. If the list is empty, it implies that the default hub sources are enabled on the cluster unless disableAllDefaultSources is true. If disableAllDefaultSources is true and sources is not empty, the configuration present in sources will take precedence. The list of default hub sources and their current state will always be reflected in the status block.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.HubSource"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "TokenClaimMapping",
+ "Kind": "OperatorHubSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.TokenClaimMappings": {
+ "io.openshift.config.v1.OperatorHubStatus": {
+ "description": "OperatorHubStatus defines the observed state of OperatorHub. The current state of the default hub sources will always be reflected here.",
"type": "object",
"properties": {
- "groups": {
- "description": "Groups is a name of the claim that should be used to construct groups for the cluster identity. The referenced claim must use array of strings values.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.PrefixedClaimMapping"
- },
- "username": {
- "description": "Username is a name of the claim that should be used to construct usernames for the cluster identity.\n\nDefault value: \"sub\"",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.UsernameClaimMapping"
+ "sources": {
+ "description": "sources encapsulates the result of applying the configuration for each hub source",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.HubSourceStatus"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "TokenClaimMappings",
+ "Kind": "OperatorHubStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.TokenClaimValidationRule": {
+ "io.openshift.config.v1.OvirtPlatformLoadBalancer": {
+ "description": "OvirtPlatformLoadBalancer defines the load balancer used by the cluster on Ovirt platform.",
"type": "object",
- "required": [
- "type",
- "requiredClaim"
- ],
"properties": {
- "requiredClaim": {
- "description": "RequiredClaim allows configuring a required claim name and its expected value",
- "$ref": "#/definitions/io.openshift.config.v1.TokenRequiredClaim"
- },
"type": {
- "description": "Type sets the type of the validation rule",
+ "description": "type defines the type of load balancer used by the cluster on Ovirt platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.",
"type": "string",
- "default": ""
+ "default": "OpenShiftManagedDefault"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "TokenClaimValidationRule",
+ "Kind": "OvirtPlatformLoadBalancer",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {}
+ }
+ ]
},
- "io.openshift.config.v1.TokenConfig": {
- "description": "TokenConfig holds the necessary configuration options for authorization and access tokens",
+ "io.openshift.config.v1.OvirtPlatformSpec": {
+ "description": "OvirtPlatformSpec holds the desired state of the oVirt infrastructure provider. This only includes fields that can be modified in the cluster.",
"type": "object",
- "properties": {
- "accessTokenInactivityTimeout": {
- "description": "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.\n\nWARNING: existing tokens' timeout will not be affected (lowered) by changing this value",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "accessTokenInactivityTimeoutSeconds": {
- "description": "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.",
- "type": "integer",
- "format": "int32"
- },
- "accessTokenMaxAgeSeconds": {
- "description": "accessTokenMaxAgeSeconds defines the maximum age of access tokens",
- "type": "integer",
- "format": "int32"
- }
- },
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "TokenConfig",
+ "Kind": "OvirtPlatformSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.TokenIssuer": {
+ "io.openshift.config.v1.OvirtPlatformStatus": {
+ "description": "OvirtPlatformStatus holds the current status of the oVirt infrastructure provider.",
"type": "object",
"required": [
- "issuerURL",
- "audiences",
- "issuerCertificateAuthority"
+ "apiServerInternalIPs",
+ "ingressIPs"
],
"properties": {
- "audiences": {
- "description": "Audiences is an array of audiences that the token was issued for. Valid tokens must include at least one of these values in their \"aud\" claim. Must be set to exactly one value.",
+ "apiServerInternalIP": {
+ "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.",
+ "type": "string"
+ },
+ "apiServerInternalIPs": {
+ "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.",
"type": "array",
"items": {
"type": "string",
@@ -77998,154 +79084,258 @@
},
"x-kubernetes-list-type": "set"
},
- "issuerCertificateAuthority": {
- "description": "CertificateAuthority is a reference to a config map in the configuration namespace. The .data of the configMap must contain the \"ca-bundle.crt\" key. If unset, system trust is used instead.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ "ingressIP": {
+ "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.",
+ "type": "string"
},
- "issuerURL": {
- "description": "URL is the serving URL of the token issuer. Must use the https:// scheme.",
- "type": "string",
- "default": ""
+ "ingressIPs": {
+ "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "set"
+ },
+ "loadBalancer": {
+ "description": "loadBalancer defines how the load balancer used by the cluster is configured.",
+ "default": {
+ "type": "OpenShiftManagedDefault"
+ },
+ "$ref": "#/definitions/io.openshift.config.v1.OvirtPlatformLoadBalancer"
+ },
+ "nodeDNSIP": {
+ "description": "deprecated: as of 4.6, this field is no longer set or honored. It will be removed in a future release.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "TokenIssuer",
+ "Kind": "OvirtPlatformStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.TokenRequiredClaim": {
+ "io.openshift.config.v1.PlatformSpec": {
+ "description": "PlatformSpec holds the desired state specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.",
"type": "object",
"required": [
- "claim",
- "requiredValue"
+ "type"
],
"properties": {
- "claim": {
- "description": "Claim is a name of a required claim. Only claims with string values are supported.",
- "type": "string",
- "default": ""
+ "alibabaCloud": {
+ "description": "AlibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.AlibabaCloudPlatformSpec"
},
- "requiredValue": {
- "description": "RequiredValue is the required value for the claim.",
+ "aws": {
+ "description": "AWS contains settings specific to the Amazon Web Services infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.AWSPlatformSpec"
+ },
+ "azure": {
+ "description": "Azure contains settings specific to the Azure infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.AzurePlatformSpec"
+ },
+ "baremetal": {
+ "description": "BareMetal contains settings specific to the BareMetal platform.",
+ "$ref": "#/definitions/io.openshift.config.v1.BareMetalPlatformSpec"
+ },
+ "equinixMetal": {
+ "description": "EquinixMetal contains settings specific to the Equinix Metal infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.EquinixMetalPlatformSpec"
+ },
+ "external": {
+ "description": "ExternalPlatformType represents generic infrastructure provider. Platform-specific components should be supplemented separately.",
+ "$ref": "#/definitions/io.openshift.config.v1.ExternalPlatformSpec"
+ },
+ "gcp": {
+ "description": "GCP contains settings specific to the Google Cloud Platform infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.GCPPlatformSpec"
+ },
+ "ibmcloud": {
+ "description": "IBMCloud contains settings specific to the IBMCloud infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.IBMCloudPlatformSpec"
+ },
+ "kubevirt": {
+ "description": "Kubevirt contains settings specific to the kubevirt infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.KubevirtPlatformSpec"
+ },
+ "nutanix": {
+ "description": "Nutanix contains settings specific to the Nutanix infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.NutanixPlatformSpec"
+ },
+ "openstack": {
+ "description": "OpenStack contains settings specific to the OpenStack infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.OpenStackPlatformSpec"
+ },
+ "ovirt": {
+ "description": "Ovirt contains settings specific to the oVirt infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.OvirtPlatformSpec"
+ },
+ "powervs": {
+ "description": "PowerVS contains settings specific to the IBM Power Systems Virtual Servers infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.PowerVSPlatformSpec"
+ },
+ "type": {
+ "description": "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.",
"type": "string",
"default": ""
+ },
+ "vsphere": {
+ "description": "VSphere contains settings specific to the VSphere infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "TokenRequiredClaim",
+ "Kind": "PlatformSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.Update": {
- "description": "Update represents an administrator update request.",
+ "io.openshift.config.v1.PlatformStatus": {
+ "description": "PlatformStatus holds the current status specific to the underlying infrastructure provider of the current cluster. Since these are used at status-level for the underlying cluster, it is supposed that only one of the status structs is set.",
"type": "object",
+ "required": [
+ "type"
+ ],
"properties": {
- "architecture": {
- "description": "architecture is an optional field that indicates the desired value of the cluster architecture. In this context cluster architecture means either a single architecture or a multi architecture. architecture can only be set to Multi thereby only allowing updates from single to multi architecture. If architecture is set, image cannot be set and version must be set. Valid values are 'Multi' and empty.",
- "type": "string",
- "default": ""
+ "alibabaCloud": {
+ "description": "AlibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.AlibabaCloudPlatformStatus"
},
- "force": {
- "description": "force allows an administrator to update to an image that has failed verification or upgradeable checks. This option should only be used when the authenticity of the provided image has been verified out of band because the provided image will run with full administrative access to the cluster. Do not use this flag with images that comes from unknown or potentially malicious sources.",
- "type": "boolean",
- "default": false
+ "aws": {
+ "description": "AWS contains settings specific to the Amazon Web Services infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.AWSPlatformStatus"
},
- "image": {
- "description": "image is a container image location that contains the update. image should be used when the desired version does not exist in availableUpdates or history. When image is set, version is ignored. When image is set, version should be empty. When image is set, architecture cannot be specified.",
- "type": "string",
- "default": ""
+ "azure": {
+ "description": "Azure contains settings specific to the Azure infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.AzurePlatformStatus"
},
- "version": {
- "description": "version is a semantic version identifying the update version. version is ignored if image is specified and required if architecture is specified.",
+ "baremetal": {
+ "description": "BareMetal contains settings specific to the BareMetal platform.",
+ "$ref": "#/definitions/io.openshift.config.v1.BareMetalPlatformStatus"
+ },
+ "equinixMetal": {
+ "description": "EquinixMetal contains settings specific to the Equinix Metal infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.EquinixMetalPlatformStatus"
+ },
+ "external": {
+ "description": "External contains settings specific to the generic External infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.ExternalPlatformStatus"
+ },
+ "gcp": {
+ "description": "GCP contains settings specific to the Google Cloud Platform infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.GCPPlatformStatus"
+ },
+ "ibmcloud": {
+ "description": "IBMCloud contains settings specific to the IBMCloud infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.IBMCloudPlatformStatus"
+ },
+ "kubevirt": {
+ "description": "Kubevirt contains settings specific to the kubevirt infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.KubevirtPlatformStatus"
+ },
+ "nutanix": {
+ "description": "Nutanix contains settings specific to the Nutanix infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.NutanixPlatformStatus"
+ },
+ "openstack": {
+ "description": "OpenStack contains settings specific to the OpenStack infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.OpenStackPlatformStatus"
+ },
+ "ovirt": {
+ "description": "Ovirt contains settings specific to the oVirt infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.OvirtPlatformStatus"
+ },
+ "powervs": {
+ "description": "PowerVS contains settings specific to the Power Systems Virtual Servers infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.PowerVSPlatformStatus"
+ },
+ "type": {
+ "description": "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.\n\nThis value will be synced with to the `status.platform` and `status.platformStatus.type`. Currently this value cannot be changed once set.",
"type": "string",
"default": ""
+ },
+ "vsphere": {
+ "description": "VSphere contains settings specific to the VSphere infrastructure provider.",
+ "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformStatus"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "Update",
+ "Kind": "PlatformStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.UpdateHistory": {
- "description": "UpdateHistory is a single attempted update to the cluster.",
+ "io.openshift.config.v1.PowerVSPlatformSpec": {
+ "description": "PowerVSPlatformSpec holds the desired state of the IBM Power Systems Virtual Servers infrastructure provider. This only includes fields that can be modified in the cluster.",
"type": "object",
- "required": [
- "state",
- "startedTime",
- "completionTime",
- "image",
- "verified"
- ],
"properties": {
- "acceptedRisks": {
- "description": "acceptedRisks records risks which were accepted to initiate the update. For example, it may menition an Upgradeable=False or missing signature that was overriden via desiredUpdate.force, or an update that was initiated despite not being in the availableUpdates set of recommended update targets.",
- "type": "string"
- },
- "completionTime": {
- "description": "completionTime, if set, is when the update was fully applied. The update that is currently being applied will have a null completion time. Completion time will always be set for entries that are not the current update (usually to the started time of the next update).",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "image": {
- "description": "image is a container image location that contains the update. This value is always populated.",
- "type": "string",
- "default": ""
- },
- "startedTime": {
- "description": "startedTime is the time at which the update was started.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "state": {
- "description": "state reflects whether the update was fully applied. The Partial state indicates the update is not fully applied, while the Completed state indicates the update was successfully rolled out at least once (all parts of the update successfully applied).",
- "type": "string",
- "default": ""
- },
- "verified": {
- "description": "verified indicates whether the provided update was properly verified before it was installed. If this is false the cluster may not be trusted. Verified does not cover upgradeable checks that depend on the cluster state at the time when the update target was accepted.",
- "type": "boolean",
- "default": false
- },
- "version": {
- "description": "version is a semantic version identifying the update version. If the requested image does not define a version, or if a failure occurs retrieving the image, this value may be empty.",
- "type": "string",
- "default": ""
+ "serviceEndpoints": {
+ "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.PowerVSServiceEndpoint"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "UpdateHistory",
+ "Kind": "PowerVSPlatformSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.UsernameClaimMapping": {
+ "io.openshift.config.v1.PowerVSPlatformStatus": {
+ "description": "PowerVSPlatformStatus holds the current status of the IBM Power Systems Virtual Servers infrastrucutre provider.",
"type": "object",
"required": [
- "claim",
- "prefixPolicy",
- "prefix"
+ "region",
+ "zone"
],
"properties": {
- "claim": {
- "description": "Claim is a JWT token claim to be used in the mapping",
+ "cisInstanceCRN": {
+ "description": "CISInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain",
+ "type": "string"
+ },
+ "dnsInstanceCRN": {
+ "description": "DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain",
+ "type": "string"
+ },
+ "region": {
+ "description": "region holds the default Power VS region for new Power VS resources created by the cluster.",
"type": "string",
"default": ""
},
- "prefix": {
- "$ref": "#/definitions/io.openshift.config.v1.UsernamePrefix"
+ "resourceGroup": {
+ "description": "resourceGroup is the resource group name for new IBMCloud resources created for a cluster. The resource group specified here will be used by cluster-image-registry-operator to set up a COS Instance in IBMCloud for the cluster registry. More about resource groups can be found here: https://cloud.ibm.com/docs/account?topic=account-rgs. When omitted, the image registry operator won't be able to configure storage, which results in the image registry cluster operator not being in an available state.",
+ "type": "string",
+ "default": ""
},
- "prefixPolicy": {
- "description": "PrefixPolicy specifies how a prefix should apply.\n\nBy default, claims other than `email` will be prefixed with the issuer URL to prevent naming clashes with other plugins.\n\nSet to \"NoPrefix\" to disable prefixing.\n\nExample:\n (1) `prefix` is set to \"myoidc:\" and `claim` is set to \"username\".\n If the JWT claim `username` contains value `userA`, the resulting\n mapped value will be \"myoidc:userA\".\n (2) `prefix` is set to \"myoidc:\" and `claim` is set to \"email\". If the\n JWT `email` claim contains value \"userA@myoidc.tld\", the resulting\n mapped value will be \"myoidc:userA@myoidc.tld\".\n (3) `prefix` is unset, `issuerURL` is set to `https://myoidc.tld`,\n the JWT claims include \"username\":\"userA\" and \"email\":\"userA@myoidc.tld\",\n and `claim` is set to:\n (a) \"username\": the mapped value will be \"https://myoidc.tld#userA\"\n (b) \"email\": the mapped value will be \"userA@myoidc.tld\"",
+ "serviceEndpoints": {
+ "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.PowerVSServiceEndpoint"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "zone": {
+ "description": "zone holds the default zone for the new Power VS resources created by the cluster. Note: Currently only single-zone OCP clusters are supported",
"type": "string",
"default": ""
}
@@ -78154,17 +79344,25 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "UsernameClaimMapping",
+ "Kind": "PowerVSPlatformStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.UsernamePrefix": {
+ "io.openshift.config.v1.PowerVSServiceEndpoint": {
+ "description": "PowervsServiceEndpoint stores the configuration of a custom url to override existing defaults of PowerVS Services.",
"type": "object",
"required": [
- "prefixString"
+ "name",
+ "url"
],
"properties": {
- "prefixString": {
+ "name": {
+ "description": "name is the name of the Power VS service. Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller Power Cloud - https://cloud.ibm.com/apidocs/power-cloud",
+ "type": "string",
+ "default": ""
+ },
+ "url": {
+ "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.",
"type": "string",
"default": ""
}
@@ -78173,43 +79371,24 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "UsernamePrefix",
+ "Kind": "PowerVSServiceEndpoint",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.VSpherePlatformFailureDomainSpec": {
- "description": "VSpherePlatformFailureDomainSpec holds the region and zone failure domain and the vCenter topology of that failure domain.",
+ "io.openshift.config.v1.PrefixedClaimMapping": {
"type": "object",
"required": [
- "name",
- "region",
- "zone",
- "server",
- "topology"
+ "claim",
+ "prefix"
],
"properties": {
- "name": {
- "description": "name defines the arbitrary but unique name of a failure domain.",
- "type": "string",
- "default": ""
- },
- "region": {
- "description": "region defines the name of a region tag that will be attached to a vCenter datacenter. The tag category in vCenter must be named openshift-region.",
- "type": "string",
- "default": ""
- },
- "server": {
- "description": "server is the fully-qualified domain name or the IP address of the vCenter server.",
+ "claim": {
+ "description": "Claim is a JWT token claim to be used in the mapping",
"type": "string",
"default": ""
},
- "topology": {
- "description": "Topology describes a given failure domain using vSphere constructs",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformTopology"
- },
- "zone": {
- "description": "zone defines the name of a zone tag that will be attached to a vCenter cluster. The tag category in vCenter must be named openshift-zone.",
+ "prefix": {
+ "description": "Prefix is a string to prefix the value from the token in the result of the claim mapping.\n\nBy default, no prefixing occurs.\n\nExample: if `prefix` is set to \"myoidc:\"\" and the `claim` in JWT contains an array of strings \"a\", \"b\" and \"c\", the mapping will result in an array of string \"myoidc:a\", \"myoidc:b\" and \"myoidc:c\".",
"type": "string",
"default": ""
}
@@ -78218,335 +79397,160 @@
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "VSpherePlatformFailureDomainSpec",
+ "Kind": "PrefixedClaimMapping",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.VSpherePlatformLoadBalancer": {
- "description": "VSpherePlatformLoadBalancer defines the load balancer used by the cluster on VSphere platform.",
+ "io.openshift.config.v1.ProfileCustomizations": {
+ "description": "ProfileCustomizations contains various parameters for modifying the default behavior of certain profiles",
"type": "object",
"properties": {
- "type": {
- "description": "type defines the type of load balancer used by the cluster on VSphere platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.",
+ "dynamicResourceAllocation": {
+ "description": "dynamicResourceAllocation allows to enable or disable dynamic resource allocation within the scheduler. Dynamic resource allocation is an API for requesting and sharing resources between pods and containers inside a pod. Third-party resource drivers are responsible for tracking and allocating resources. Different kinds of resources support arbitrary parameters for defining requirements and initialization. Valid values are Enabled, Disabled and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Disabled.",
"type": "string",
- "default": "OpenShiftManagedDefault"
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "VSpherePlatformLoadBalancer",
+ "Kind": "ProfileCustomizations",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {}
- }
- ]
+ }
},
- "io.openshift.config.v1.VSpherePlatformNodeNetworking": {
- "description": "VSpherePlatformNodeNetworking holds the external and internal node networking spec.",
+ "io.openshift.config.v1.Project": {
+ "description": "Project holds cluster-wide information about Project. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
- "external": {
- "description": "external represents the network configuration of the node that is externally routable.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformNodeNetworkingSpec"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "internal": {
- "description": "internal represents the network configuration of the node that is routable only within the cluster.",
+ "spec": {
+ "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformNodeNetworkingSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.ProjectSpec"
+ },
+ "status": {
+ "description": "status holds observed values from the cluster. They may not be overridden.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ProjectStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "VSpherePlatformNodeNetworking",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.VSpherePlatformNodeNetworkingSpec": {
- "description": "VSpherePlatformNodeNetworkingSpec holds the network CIDR(s) and port group name for including and excluding IP ranges in the cloud provider. This would be used for example when multiple network adapters are attached to a guest to help determine which IP address the cloud config manager should use for the external and internal node networking.",
- "type": "object",
- "properties": {
- "excludeNetworkSubnetCidr": {
- "description": "excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting the IP address from the VirtualMachine's VM for use in the status.addresses fields.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "network": {
- "description": "network VirtualMachine's VM Network names that will be used to when searching for status.addresses fields. Note that if internal.networkSubnetCIDR and external.networkSubnetCIDR are not set, then the vNIC associated to this network must only have a single IP address assigned to it. The available networks (port groups) can be listed using `govc ls 'network/*'`",
- "type": "string"
- },
- "networkSubnetCidr": {
- "description": "networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs that will be used in respective status.addresses fields.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "set"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1",
- "Kind": "VSpherePlatformNodeNetworkingSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1.VSpherePlatformSpec": {
- "description": "VSpherePlatformSpec holds the desired state of the vSphere infrastructure provider. In the future the cloud provider operator, storage operator and machine operator will use these fields for configuration.",
- "type": "object",
- "properties": {
- "apiServerInternalIPs": {
- "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "failureDomains": {
- "description": "failureDomains contains the definition of region, zone and the vCenter topology. If this is omitted failure domains (regions and zones) will not be used.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformFailureDomainSpec"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "ingressIPs": {
- "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "machineNetworks": {
- "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "nodeNetworking": {
- "description": "nodeNetworking contains the definition of internal and external network constraints for assigning the node's networking. If this field is omitted, networking defaults to the legacy address selection behavior which is to only support a single address and return the first one found.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformNodeNetworking"
- },
- "vcenters": {
- "description": "vcenters holds the connection details for services to communicate with vCenter. Currently, only a single vCenter is supported, but in tech preview 3 vCenters are supported. Once the cluster has been installed, you are unable to change the current number of defined vCenters except in the case where the cluster has been upgraded from a version of OpenShift where the vsphere platform spec was not present. You may make modifications to the existing vCenters that are defined in the vcenters list in order to match with any added or modified failure domains.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformVCenterSpec"
- },
- "x-kubernetes-list-type": "atomic"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "VSpherePlatformSpec",
- "Scope": "Namespaced"
+ "Kind": "Project",
+ "Scope": "Clustered"
}
},
- "io.openshift.config.v1.VSpherePlatformStatus": {
- "description": "VSpherePlatformStatus holds the current status of the vSphere infrastructure provider.",
+ "io.openshift.config.v1.ProjectList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "apiServerInternalIPs",
- "ingressIPs"
+ "metadata",
+ "items"
],
"properties": {
- "apiServerInternalIP": {
- "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "apiServerInternalIPs": {
- "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.",
+ "items": {
"type": "array",
"items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.Project"
+ }
},
- "ingressIP": {
- "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "ingressIPs": {
- "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "loadBalancer": {
- "description": "loadBalancer defines how the load balancer used by the cluster is configured.",
- "default": {
- "type": "OpenShiftManagedDefault"
- },
- "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformLoadBalancer"
- },
- "machineNetworks": {
- "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "nodeDNSIP": {
- "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for vSphere deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.",
- "type": "string"
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "VSpherePlatformStatus",
+ "Kind": "ProjectList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.VSpherePlatformTopology": {
- "description": "VSpherePlatformTopology holds the required and optional vCenter objects - datacenter, computeCluster, networks, datastore and resourcePool - to provision virtual machines.",
+ "io.openshift.config.v1.ProjectSpec": {
+ "description": "ProjectSpec holds the project creation configuration.",
"type": "object",
- "required": [
- "datacenter",
- "computeCluster",
- "networks",
- "datastore"
- ],
"properties": {
- "computeCluster": {
- "description": "computeCluster the absolute path of the vCenter cluster in which virtual machine will be located. The absolute path is of the form /\u003cdatacenter\u003e/host/\u003ccluster\u003e. The maximum length of the path is 2048 characters.",
- "type": "string",
- "default": ""
- },
- "datacenter": {
- "description": "datacenter is the name of vCenter datacenter in which virtual machines will be located. The maximum length of the datacenter name is 80 characters.",
- "type": "string",
- "default": ""
- },
- "datastore": {
- "description": "datastore is the absolute path of the datastore in which the virtual machine is located. The absolute path is of the form /\u003cdatacenter\u003e/datastore/\u003cdatastore\u003e The maximum length of the path is 2048 characters.",
+ "projectRequestMessage": {
+ "description": "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint",
"type": "string",
"default": ""
},
- "folder": {
- "description": "folder is the absolute path of the folder where virtual machines are located. The absolute path is of the form /\u003cdatacenter\u003e/vm/\u003cfolder\u003e. The maximum length of the path is 2048 characters.",
- "type": "string"
- },
- "networks": {
- "description": "networks is the list of port group network names within this failure domain. If feature gate VSphereMultiNetworks is enabled, up to 10 network adapters may be defined. 10 is the maximum number of virtual network devices which may be attached to a VM as defined by: https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere\u0026release=vSphere%208.0\u0026categories=1-0 The available networks (port groups) can be listed using `govc ls 'network/*'` Networks should be in the form of an absolute path: /\u003cdatacenter\u003e/network/\u003cportgroup\u003e.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "resourcePool": {
- "description": "resourcePool is the absolute path of the resource pool where virtual machines will be created. The absolute path is of the form /\u003cdatacenter\u003e/host/\u003ccluster\u003e/Resources/\u003cresourcepool\u003e. The maximum length of the path is 2048 characters.",
- "type": "string"
- },
- "template": {
- "description": "template is the full inventory path of the virtual machine or template that will be cloned when creating new machines in this failure domain. The maximum length of the path is 2048 characters.\n\nWhen omitted, the template will be calculated by the control plane machineset operator based on the region and zone defined in VSpherePlatformFailureDomainSpec. For example, for zone=zonea, region=region1, and infrastructure name=test, the template path would be calculated as /\u003cdatacenter\u003e/vm/test-rhcos-region1-zonea.",
- "type": "string"
+ "projectRequestTemplate": {
+ "description": "projectRequestTemplate is the template to use for creating projects in response to projectrequest. This must point to a template in 'openshift-config' namespace. It is optional. If it is not specified, a default template is used.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.TemplateReference"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "VSpherePlatformTopology",
+ "Kind": "ProjectSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.VSpherePlatformVCenterSpec": {
- "description": "VSpherePlatformVCenterSpec stores the vCenter connection fields. This is used by the vSphere CCM.",
+ "io.openshift.config.v1.ProjectStatus": {
"type": "object",
- "required": [
- "server",
- "datacenters"
- ],
- "properties": {
- "datacenters": {
- "description": "The vCenter Datacenters in which the RHCOS vm guests are located. This field will be used by the Cloud Controller Manager. Each datacenter listed here should be used within a topology.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "set"
- },
- "port": {
- "description": "port is the TCP port that will be used to communicate to the vCenter endpoint. When omitted, this means the user has no opinion and it is up to the platform to choose a sensible default, which is subject to change over time.",
- "type": "integer",
- "format": "int32"
- },
- "server": {
- "description": "server is the fully-qualified domain name or the IP address of the vCenter server.",
- "type": "string",
- "default": ""
- }
- },
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "VSpherePlatformVCenterSpec",
+ "Kind": "ProjectStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1.WebhookTokenAuthenticator": {
- "description": "webhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator",
+ "io.openshift.config.v1.PromQLClusterCondition": {
+ "description": "PromQLClusterCondition represents a cluster condition based on PromQL.",
"type": "object",
"required": [
- "kubeConfig"
+ "promql"
],
"properties": {
- "kubeConfig": {
- "description": "kubeConfig references a secret that contains kube config file data which describes how to access the remote webhook service. The namespace for the referenced secret is openshift-config.\n\nFor further details, see:\n\nhttps://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication\n\nThe key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ "promql": {
+ "description": "PromQL is a PromQL query classifying clusters. This query query should return a 1 in the match case and a 0 in the does-not-match case. Queries which return no time series, or which return values besides 0 or 1, are evaluation failures.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
"Version": "v1",
- "Kind": "WebhookTokenAuthenticator",
+ "Kind": "PromQLClusterCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.Backup": {
- "description": "Backup provides configuration for performing backups of the openshift cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.v1.Proxy": {
+ "description": "Proxy holds cluster-wide information on how to configure default proxies for the cluster. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"spec"
@@ -78566,26 +79570,26 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec holds user settable values for configuration",
+ "description": "Spec holds user-settable values for the proxy configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.BackupSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.ProxySpec"
},
"status": {
"description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.BackupStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.ProxyStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "Backup",
+ "Version": "v1",
+ "Kind": "Proxy",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1alpha1.BackupList": {
- "description": "BackupList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.v1.ProxyList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -78600,7 +79604,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.Backup"
+ "$ref": "#/definitions/io.openshift.config.v1.Proxy"
}
},
"kind": {
@@ -78616,193 +79620,215 @@
"x-fabric8-info": {
"Type": "list",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "BackupList",
+ "Version": "v1",
+ "Kind": "ProxyList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.BackupSpec": {
+ "io.openshift.config.v1.ProxySpec": {
+ "description": "ProxySpec contains cluster proxy creation configuration.",
"type": "object",
- "required": [
- "etcd"
- ],
"properties": {
- "etcd": {
- "description": "etcd specifies the configuration for periodic backups of the etcd cluster",
+ "httpProxy": {
+ "description": "httpProxy is the URL of the proxy for HTTP requests. Empty means unset and will not result in an env var.",
+ "type": "string"
+ },
+ "httpsProxy": {
+ "description": "httpsProxy is the URL of the proxy for HTTPS requests. Empty means unset and will not result in an env var.",
+ "type": "string"
+ },
+ "noProxy": {
+ "description": "noProxy is a comma-separated list of hostnames and/or CIDRs and/or IPs for which the proxy should not be used. Empty means unset and will not result in an env var.",
+ "type": "string"
+ },
+ "readinessEndpoints": {
+ "description": "readinessEndpoints is a list of endpoints used to verify readiness of the proxy.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "trustedCA": {
+ "description": "trustedCA is a reference to a ConfigMap containing a CA certificate bundle. The trustedCA field should only be consumed by a proxy validator. The validator is responsible for reading the certificate bundle from the required key \"ca-bundle.crt\", merging it with the system default trust bundle, and writing the merged trust bundle to a ConfigMap named \"trusted-ca-bundle\" in the \"openshift-config-managed\" namespace. Clients that expect to make proxy connections must use the trusted-ca-bundle for all HTTPS requests to the proxy, and may use the trusted-ca-bundle for non-proxy HTTPS requests as well.\n\nThe namespace for the ConfigMap referenced by trustedCA is \"openshift-config\". Here is an example ConfigMap (in yaml):\n\napiVersion: v1 kind: ConfigMap metadata:\n name: user-ca-bundle\n namespace: openshift-config\n data:\n ca-bundle.crt: |\n -----BEGIN CERTIFICATE-----\n Custom CA certificate bundle.\n -----END CERTIFICATE-----",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.EtcdBackupSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "BackupSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1alpha1.BackupStatus": {
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "BackupStatus",
+ "Version": "v1",
+ "Kind": "ProxySpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.ClusterImagePolicy": {
- "description": "ClusterImagePolicy holds cluster-wide configuration for image signature verification\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.v1.ProxyStatus": {
+ "description": "ProxyStatus shows current known state of the cluster proxy.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "httpProxy": {
+ "description": "httpProxy is the URL of the proxy for HTTP requests.",
"type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "httpsProxy": {
+ "description": "httpsProxy is the URL of the proxy for HTTPS requests.",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec contains the configuration for the cluster image policy.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.ClusterImagePolicySpec"
- },
- "status": {
- "description": "status contains the observed state of the resource.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.ClusterImagePolicyStatus"
+ "noProxy": {
+ "description": "noProxy is a comma-separated list of hostnames and/or CIDRs for which the proxy should not be used.",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ClusterImagePolicy",
- "Scope": "Clustered"
+ "Version": "v1",
+ "Kind": "ProxyStatus",
+ "Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.ClusterImagePolicyList": {
- "description": "ClusterImagePolicyList is a list of ClusterImagePolicy resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.v1.RegistryLocation": {
+ "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.",
"type": "object",
"required": [
- "metadata",
- "items"
+ "domainName"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.ClusterImagePolicy"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "domainName": {
+ "description": "domainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.",
+ "type": "string",
+ "default": ""
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "insecure": {
+ "description": "insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.",
+ "type": "boolean"
}
},
"x-fabric8-info": {
- "Type": "list",
+ "Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ClusterImagePolicyList",
+ "Version": "v1",
+ "Kind": "RegistryLocation",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.ClusterImagePolicySpec": {
- "description": "CLusterImagePolicySpec is the specification of the ClusterImagePolicy custom resource.",
+ "io.openshift.config.v1.RegistrySources": {
+ "description": "RegistrySources holds cluster-wide information about how to handle the registries config.",
"type": "object",
- "required": [
- "scopes",
- "policy"
- ],
"properties": {
- "policy": {
- "description": "policy contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.Policy"
+ "allowedRegistries": {
+ "description": "allowedRegistries are the only registries permitted for image pull and push actions. All other registries are denied.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "scopes": {
- "description": "scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker",
+ "blockedRegistries": {
+ "description": "blockedRegistries cannot be used for image pull and push actions. All other registries are permitted.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "containerRuntimeSearchRegistries": {
+ "description": "containerRuntimeSearchRegistries are registries that will be searched when pulling images that do not have fully qualified domains in their pull specs. Registries will be searched in the order provided in the list. Note: this search list only works with the container runtime, i.e CRI-O. Will NOT work with builds or imagestream imports.",
"type": "array",
"items": {
"type": "string",
"default": ""
},
"x-kubernetes-list-type": "set"
+ },
+ "insecureRegistries": {
+ "description": "insecureRegistries are registries which do not have a valid TLS certificates or only support HTTP connections.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ClusterImagePolicySpec",
+ "Version": "v1",
+ "Kind": "RegistrySources",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.ClusterImagePolicyStatus": {
+ "io.openshift.config.v1.Release": {
+ "description": "Release represents an OpenShift release image and associated metadata.",
"type": "object",
+ "required": [
+ "version",
+ "image"
+ ],
"properties": {
- "conditions": {
- "description": "conditions provide details on the status of this API Resource.",
+ "channels": {
+ "description": "channels is the set of Cincinnati channels to which the release currently belongs.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ "type": "string",
+ "default": ""
},
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
+ "x-kubernetes-list-type": "set"
+ },
+ "image": {
+ "description": "image is a container image location that contains the update. When this field is part of spec, image is optional if version is specified and the availableUpdates field contains a matching version.",
+ "type": "string",
+ "default": ""
+ },
+ "url": {
+ "description": "url contains information about this release. This URL is set by the 'url' metadata property on a release or the metadata returned by the update API and should be displayed as a link in user interfaces. The URL field may not be set for test or nightly releases.",
+ "type": "string"
+ },
+ "version": {
+ "description": "version is a semantic version identifying the update version. When this field is part of spec, version is optional if image is specified.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ClusterImagePolicyStatus",
+ "Version": "v1",
+ "Kind": "Release",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.EtcdBackupSpec": {
- "description": "EtcdBackupSpec provides configuration for automated etcd backups to the cluster-etcd-operator",
+ "io.openshift.config.v1.RemoteConnectionInfo": {
+ "description": "RemoteConnectionInfo holds information necessary for establishing a remote connection",
"type": "object",
+ "required": [
+ "url",
+ "ca",
+ "certFile",
+ "keyFile"
+ ],
"properties": {
- "pvcName": {
- "description": "PVCName specifies the name of the PersistentVolumeClaim (PVC) which binds a PersistentVolume where the etcd backup files would be saved The PVC itself must always be created in the \"openshift-etcd\" namespace If the PVC is left unspecified \"\" then the platform will choose a reasonable default location to save the backup. In the future this would be backups saved across the control-plane master nodes.",
+ "ca": {
+ "description": "CA is the CA for verifying TLS connections",
"type": "string",
"default": ""
},
- "retentionPolicy": {
- "description": "RetentionPolicy defines the retention policy for retaining and deleting existing backups.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.RetentionPolicy"
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
+ "type": "string",
+ "default": ""
},
- "schedule": {
- "description": "Schedule defines the recurring backup schedule in Cron format every 2 hours: 0 */2 * * * every day at 3am: 0 3 * * * Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. The current default is \"no backups\", but will change in the future.",
+ "keyFile": {
+ "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
"type": "string",
"default": ""
},
- "timeZone": {
- "description": "The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. See https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zones",
+ "url": {
+ "description": "URL is the remote URL to connect to",
"type": "string",
"default": ""
}
@@ -78810,201 +79836,165 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "EtcdBackupSpec",
+ "Version": "v1",
+ "Kind": "RemoteConnectionInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.FulcioCAWithRekor": {
- "description": "FulcioCAWithRekor defines the root of trust based on the Fulcio certificate and the Rekor public key.",
+ "io.openshift.config.v1.RepositoryDigestMirrors": {
+ "description": "RepositoryDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.",
"type": "object",
"required": [
- "fulcioCAData",
- "rekorKeyData"
+ "source"
],
"properties": {
- "fulcioCAData": {
- "description": "fulcioCAData contains inline base64-encoded data for the PEM format fulcio CA. fulcioCAData must be at most 8192 characters.",
- "type": "string",
- "format": "byte"
- },
- "fulcioSubject": {
- "description": "fulcioSubject specifies OIDC issuer and the email of the Fulcio authentication configuration.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyFulcioSubject"
- },
- "rekorKeyData": {
- "description": "rekorKeyData contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.",
- "type": "string",
- "format": "byte"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "FulcioCAWithRekor",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1alpha1.GatherConfig": {
- "description": "gatherConfig provides data gathering configuration options.",
- "type": "object",
- "properties": {
- "dataPolicy": {
- "description": "dataPolicy allows user to enable additional global obfuscation of the IP addresses and base domain in the Insights archive data. Valid values are \"None\" and \"ObfuscateNetworking\". When set to None the data is not obfuscated. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is None.",
- "type": "string"
+ "allowMirrorByTags": {
+ "description": "allowMirrorByTags if true, the mirrors can be used to pull the images that are referenced by their tags. Default is false, the mirrors only work when pulling the images that are referenced by their digests. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Forcing digest-pulls for mirrors avoids that issue.",
+ "type": "boolean"
},
- "disabledGatherers": {
- "description": "disabledGatherers is a list of gatherers to be excluded from the gathering. All the gatherers can be disabled by providing \"all\" value. If all the gatherers are disabled, the Insights operator does not gather any data. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\" An example of disabling gatherers looks like this: `disabledGatherers: [\"clusterconfig/machine_configs\", \"workloads/workload_info\"]`",
+ "mirrors": {
+ "description": "mirrors is zero or more repositories that may also contain the same images. If the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec. No mirror will be configured. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. Other cluster configuration, including (but not limited to) other repositoryDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering.",
"type": "array",
"items": {
"type": "string",
"default": ""
- }
+ },
+ "x-kubernetes-list-type": "set"
+ },
+ "source": {
+ "description": "source is the repository that users refer to, e.g. in image pull specifications.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "GatherConfig",
+ "Version": "v1",
+ "Kind": "RepositoryDigestMirrors",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.ImagePolicy": {
- "description": "ImagePolicy holds namespace-wide configuration for image signature verification\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.v1.RequestHeaderIdentityProvider": {
+ "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials",
"type": "object",
"required": [
- "spec"
+ "loginURL",
+ "challengeURL",
+ "ca",
+ "headers",
+ "preferredUsernameHeaders",
+ "nameHeaders",
+ "emailHeaders"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "ca": {
+ "description": "ca is a required reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. Specifically, it allows verification of incoming requests to prevent header spoofing. The key \"ca.crt\" is used to locate the data. If the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. The namespace for this config map is openshift-config.",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
},
- "spec": {
- "description": "spec holds user settable values for configuration",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.ImagePolicySpec"
+ "challengeURL": {
+ "description": "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here. ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when challenge is set to true.",
+ "type": "string",
+ "default": ""
},
- "status": {
- "description": "status contains the observed state of the resource.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.ImagePolicyStatus"
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ImagePolicy",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1alpha1.ImagePolicyList": {
- "description": "ImagePolicyList is a list of ImagePolicy resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
- "type": "object",
- "required": [
- "metadata",
- "items"
- ],
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "clientCommonNames": {
+ "description": "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "items": {
+ "emailHeaders": {
+ "description": "emailHeaders is the set of headers to check for the email address",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.ImagePolicy"
+ "type": "string",
+ "default": ""
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "headers": {
+ "description": "headers is the set of headers to check for identity information",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
- }
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ImagePolicyList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1alpha1.ImagePolicySpec": {
- "description": "ImagePolicySpec is the specification of the ImagePolicy CRD.",
- "type": "object",
- "required": [
- "scopes",
- "policy"
- ],
- "properties": {
- "policy": {
- "description": "policy contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.Policy"
+ "loginURL": {
+ "description": "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when login is set to true.",
+ "type": "string",
+ "default": ""
},
- "scopes": {
- "description": "scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker",
+ "nameHeaders": {
+ "description": "nameHeaders is the set of headers to check for the display name",
"type": "array",
"items": {
"type": "string",
"default": ""
- },
- "x-kubernetes-list-type": "set"
+ }
+ },
+ "preferredUsernameHeaders": {
+ "description": "preferredUsernameHeaders is the set of headers to check for the preferred username",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ImagePolicySpec",
+ "Version": "v1",
+ "Kind": "RequestHeaderIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.ImagePolicyStatus": {
+ "io.openshift.config.v1.RequiredHSTSPolicy": {
"type": "object",
+ "required": [
+ "domainPatterns",
+ "maxAge"
+ ],
"properties": {
- "conditions": {
- "description": "conditions provide details on the status of this API Resource.",
+ "domainPatterns": {
+ "description": "domainPatterns is a list of domains for which the desired HSTS annotations are required. If domainPatterns is specified and a route is created with a spec.host matching one of the domains, the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy.\n\nThe use of wildcards is allowed like this: *.foo.com matches everything under foo.com. foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
+ "type": "string",
+ "default": ""
+ }
+ },
+ "includeSubDomainsPolicy": {
+ "description": "includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com",
+ "type": "string"
+ },
+ "maxAge": {
+ "description": "maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. If set to 0, it negates the effect, and hosts are removed as HSTS hosts. If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS policy will eventually expire on that client.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.MaxAgePolicy"
+ },
+ "namespaceSelector": {
+ "description": "namespaceSelector specifies a label selector such that the policy applies only to those routes that are in namespaces with labels that match the selector, and are in one of the DomainPatterns. Defaults to the empty LabelSelector, which matches everything.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ },
+ "preloadPolicy": {
+ "description": "preloadPolicy directs the client to include hosts in its host preload list so that it never needs to do an initial load to get the HSTS header (note that this is not defined in RFC 6797 and is therefore client implementation-dependent).",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ImagePolicyStatus",
+ "Version": "v1",
+ "Kind": "RequiredHSTSPolicy",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.InsightsDataGather": {
- "description": "InsightsDataGather provides data gather configuration options for the the Insights Operator.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.v1.Scheduler": {
+ "description": "Scheduler holds cluster-wide config information to run the Kubernetes Scheduler and influence its placement decisions. The canonical name for this config is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"spec"
@@ -79026,24 +80016,24 @@
"spec": {
"description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.InsightsDataGatherSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.SchedulerSpec"
},
"status": {
"description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.InsightsDataGatherStatus"
+ "$ref": "#/definitions/io.openshift.config.v1.SchedulerStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "InsightsDataGather",
+ "Version": "v1",
+ "Kind": "Scheduler",
"Scope": "Clustered"
}
},
- "io.openshift.config.v1alpha1.InsightsDataGatherList": {
- "description": "InsightsDataGatherList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.config.v1.SchedulerList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -79058,7 +80048,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.InsightsDataGather"
+ "$ref": "#/definitions/io.openshift.config.v1.Scheduler"
}
},
"kind": {
@@ -79074,137 +80064,193 @@
"x-fabric8-info": {
"Type": "list",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "InsightsDataGatherList",
+ "Version": "v1",
+ "Kind": "SchedulerList",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.InsightsDataGatherSpec": {
+ "io.openshift.config.v1.SchedulerSpec": {
"type": "object",
"properties": {
- "gatherConfig": {
- "description": "gatherConfig spec attribute includes all the configuration options related to gathering of the Insights data and its uploading to the ingress.",
+ "defaultNodeSelector": {
+ "description": "defaultNodeSelector helps set the cluster-wide default node selector to restrict pod placement to specific nodes. This is applied to the pods created in all namespaces and creates an intersection with any existing nodeSelectors already set on a pod, additionally constraining that pod's selector. For example, defaultNodeSelector: \"type=user-node,region=east\" would set nodeSelector field in pod spec to \"type=user-node,region=east\" to all pods created in all namespaces. Namespaces having project-wide node selectors won't be impacted even if this field is set. This adds an annotation section to the namespace. For example, if a new namespace is created with node-selector='type=user-node,region=east', the annotation openshift.io/node-selector: type=user-node,region=east gets added to the project. When the openshift.io/node-selector annotation is set on the project the value is used in preference to the value we are setting for defaultNodeSelector field. For instance, openshift.io/node-selector: \"type=user-node,region=west\" means that the default of \"type=user-node,region=east\" set in defaultNodeSelector would not be applied.",
+ "type": "string"
+ },
+ "mastersSchedulable": {
+ "description": "MastersSchedulable allows masters nodes to be schedulable. When this flag is turned on, all the master nodes in the cluster will be made schedulable, so that workload pods can run on them. The default value for this field is false, meaning none of the master nodes are schedulable. Important Note: Once the workload pods start running on the master nodes, extreme care must be taken to ensure that cluster-critical control plane components are not impacted. Please turn on this field after doing due diligence.",
+ "type": "boolean",
+ "default": false
+ },
+ "policy": {
+ "description": "DEPRECATED: the scheduler Policy API has been deprecated and will be removed in a future release. policy is a reference to a ConfigMap containing scheduler policy which has user specified predicates and priorities. If this ConfigMap is not available scheduler will default to use DefaultAlgorithmProvider. The namespace for this configmap is openshift-config.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.GatherConfig"
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ },
+ "profile": {
+ "description": "profile sets which scheduling profile should be set in order to configure scheduling decisions for new pods.\n\nValid values are \"LowNodeUtilization\", \"HighNodeUtilization\", \"NoScoring\" Defaults to \"LowNodeUtilization\"",
+ "type": "string"
+ },
+ "profileCustomizations": {
+ "description": "profileCustomizations contains configuration for modifying the default behavior of existing scheduler profiles.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ProfileCustomizations"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "InsightsDataGatherSpec",
+ "Version": "v1",
+ "Kind": "SchedulerSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.InsightsDataGatherStatus": {
+ "io.openshift.config.v1.SchedulerStatus": {
"type": "object",
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "InsightsDataGatherStatus",
+ "Version": "v1",
+ "Kind": "SchedulerStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.Policy": {
- "description": "Policy defines the verification policy for the items in the scopes list.",
+ "io.openshift.config.v1.SecretNameReference": {
+ "description": "SecretNameReference references a secret in a specific namespace. The namespace must be specified at the point of use.",
"type": "object",
"required": [
- "rootOfTrust"
+ "name"
],
"properties": {
- "rootOfTrust": {
- "description": "rootOfTrust specifies the root of trust for the policy.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyRootOfTrust"
- },
- "signedIdentity": {
- "description": "signedIdentity specifies what image identity the signature claims about the image. The required matchPolicy field specifies the approach used in the verification process to verify the identity in the signature and the actual image identity, the default matchPolicy is \"MatchRepoDigestOrExact\".",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyIdentity"
+ "name": {
+ "description": "name is the metadata.name of the referenced secret",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "Policy",
+ "Version": "v1",
+ "Kind": "SecretNameReference",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.PolicyFulcioSubject": {
- "description": "PolicyFulcioSubject defines the OIDC issuer and the email of the Fulcio authentication configuration.",
+ "io.openshift.config.v1.ServingInfo": {
+ "description": "ServingInfo holds information about serving web pages",
"type": "object",
"required": [
- "oidcIssuer",
- "signedEmail"
+ "bindAddress",
+ "bindNetwork",
+ "certFile",
+ "keyFile"
],
"properties": {
- "oidcIssuer": {
- "description": "oidcIssuer contains the expected OIDC issuer. It will be verified that the Fulcio-issued certificate contains a (Fulcio-defined) certificate extension pointing at this OIDC issuer URL. When Fulcio issues certificates, it includes a value based on an URL inside the client-provided ID token. Example: \"https://expected.OIDC.issuer/\"",
+ "bindAddress": {
+ "description": "BindAddress is the ip:port to serve on",
"type": "string",
"default": ""
},
- "signedEmail": {
- "description": "signedEmail holds the email address the the Fulcio certificate is issued for. Example: \"expected-signing-user@example.com\"",
+ "bindNetwork": {
+ "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"",
+ "type": "string",
+ "default": ""
+ },
+ "certFile": {
+ "description": "CertFile is a file containing a PEM-encoded certificate",
"type": "string",
"default": ""
+ },
+ "cipherSuites": {
+ "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "clientCA": {
+ "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates",
+ "type": "string"
+ },
+ "keyFile": {
+ "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile",
+ "type": "string",
+ "default": ""
+ },
+ "minTLSVersion": {
+ "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants",
+ "type": "string"
+ },
+ "namedCertificates": {
+ "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.NamedCertificate"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PolicyFulcioSubject",
+ "Version": "v1",
+ "Kind": "ServingInfo",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.PolicyIdentity": {
- "description": "PolicyIdentity defines image identity the signature claims about the image. When omitted, the default matchPolicy is \"MatchRepoDigestOrExact\".",
+ "io.openshift.config.v1.SignatureStore": {
+ "description": "SignatureStore represents the URL of custom Signature Store",
"type": "object",
"required": [
- "matchPolicy"
+ "url"
],
"properties": {
- "exactRepository": {
- "description": "exactRepository is required if matchPolicy is set to \"ExactRepository\".",
- "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyMatchExactRepository"
+ "ca": {
+ "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the signature store is not honored. If the specified ca data is not valid, the signature store is not honored. If empty, we fall back to the CA configured via Proxy, which is appended to the default system roots. The namespace for this config map is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
},
- "matchPolicy": {
- "description": "matchPolicy sets the type of matching to be used. Valid values are \"MatchRepoDigestOrExact\", \"MatchRepository\", \"ExactRepository\", \"RemapIdentity\". When omitted, the default value is \"MatchRepoDigestOrExact\". If set matchPolicy to ExactRepository, then the exactRepository must be specified. If set matchPolicy to RemapIdentity, then the remapIdentity must be specified. \"MatchRepoDigestOrExact\" means that the identity in the signature must be in the same repository as the image identity if the image identity is referenced by a digest. Otherwise, the identity in the signature must be the same as the image identity. \"MatchRepository\" means that the identity in the signature must be in the same repository as the image identity. \"ExactRepository\" means that the identity in the signature must be in the same repository as a specific identity specified by \"repository\". \"RemapIdentity\" means that the signature must be in the same as the remapped image identity. Remapped image identity is obtained by replacing the \"prefix\" with the specified “signedPrefix” if the the image identity matches the specified remapPrefix.",
+ "url": {
+ "description": "url contains the upstream custom signature store URL. url should be a valid absolute http/https URI of an upstream signature store as per rfc1738. This must be provided and cannot be empty.",
"type": "string",
"default": ""
- },
- "remapIdentity": {
- "description": "remapIdentity is required if matchPolicy is set to \"RemapIdentity\".",
- "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyMatchRemapIdentity"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PolicyIdentity",
+ "Version": "v1",
+ "Kind": "SignatureStore",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "matchPolicy",
- "fields-to-discriminateBy": {
- "exactRepository": "PolicyMatchExactRepository",
- "remapIdentity": "PolicyMatchRemapIdentity"
- }
- }
- ]
+ }
},
- "io.openshift.config.v1alpha1.PolicyMatchExactRepository": {
+ "io.openshift.config.v1.StringSource": {
+ "description": "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.",
"type": "object",
"required": [
- "repository"
+ "value",
+ "env",
+ "file",
+ "keyFile"
],
"properties": {
- "repository": {
- "description": "repository is the reference of the image identity to be matched. The value should be a repository name (by omitting the tag or digest) in a registry implementing the \"Docker Registry HTTP API V2\". For example, docker.io/library/busybox",
+ "env": {
+ "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.",
+ "type": "string",
+ "default": ""
+ },
+ "file": {
+ "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.",
+ "type": "string",
+ "default": ""
+ },
+ "keyFile": {
+ "description": "KeyFile references a file containing the key to use to decrypt the value.",
+ "type": "string",
+ "default": ""
+ },
+ "value": {
+ "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.",
"type": "string",
"default": ""
}
@@ -79212,25 +80258,38 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PolicyMatchExactRepository",
+ "Version": "v1",
+ "Kind": "StringSource",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.PolicyMatchRemapIdentity": {
+ "io.openshift.config.v1.StringSourceSpec": {
+ "description": "StringSourceSpec specifies a string value, or external location",
"type": "object",
"required": [
- "prefix",
- "signedPrefix"
+ "value",
+ "env",
+ "file",
+ "keyFile"
],
"properties": {
- "prefix": {
- "description": "prefix is the prefix of the image identity to be matched. If the image identity matches the specified prefix, that prefix is replaced by the specified “signedPrefix” (otherwise it is used as unchanged and no remapping takes place). This useful when verifying signatures for a mirror of some other repository namespace that preserves the vendor’s repository structure. The prefix and signedPrefix values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.",
+ "env": {
+ "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.",
"type": "string",
"default": ""
},
- "signedPrefix": {
- "description": "signedPrefix is the prefix of the image identity to be matched in the signature. The format is the same as \"prefix\". The values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.",
+ "file": {
+ "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.",
+ "type": "string",
+ "default": ""
+ },
+ "keyFile": {
+ "description": "KeyFile references a file containing the key to use to decrypt the value.",
+ "type": "string",
+ "default": ""
+ },
+ "value": {
+ "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.",
"type": "string",
"default": ""
}
@@ -79238,211 +80297,130 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PolicyMatchRemapIdentity",
+ "Version": "v1",
+ "Kind": "StringSourceSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.PolicyRootOfTrust": {
- "description": "PolicyRootOfTrust defines the root of trust based on the selected policyType.",
+ "io.openshift.config.v1.TLSProfileSpec": {
+ "description": "TLSProfileSpec is the desired behavior of a TLSSecurityProfile.",
"type": "object",
"required": [
- "policyType"
+ "ciphers",
+ "minTLSVersion"
],
"properties": {
- "fulcioCAWithRekor": {
- "description": "fulcioCAWithRekor defines the root of trust based on the Fulcio certificate and the Rekor public key. For more information about Fulcio and Rekor, please refer to the document at: https://github.com/sigstore/fulcio and https://github.com/sigstore/rekor",
- "$ref": "#/definitions/io.openshift.config.v1alpha1.FulcioCAWithRekor"
+ "ciphers": {
+ "description": "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries their operands do not support. For example, to use DES-CBC3-SHA (yaml):\n\n ciphers:\n - DES-CBC3-SHA",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "policyType": {
- "description": "policyType serves as the union's discriminator. Users are required to assign a value to this field, choosing one of the policy types that define the root of trust. \"PublicKey\" indicates that the policy relies on a sigstore publicKey and may optionally use a Rekor verification. \"FulcioCAWithRekor\" indicates that the policy is based on the Fulcio certification and incorporates a Rekor verification.",
+ "minTLSVersion": {
+ "description": "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11\n\nNOTE: currently the highest minTLSVersion allowed is VersionTLS12",
"type": "string",
"default": ""
- },
- "publicKey": {
- "description": "publicKey defines the root of trust based on a sigstore public key.",
- "$ref": "#/definitions/io.openshift.config.v1alpha1.PublicKey"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PolicyRootOfTrust",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "policyType",
- "fields-to-discriminateBy": {
- "fulcioCAWithRekor": "FulcioCAWithRekor",
- "publicKey": "PublicKey"
- }
- }
- ]
- },
- "io.openshift.config.v1alpha1.PublicKey": {
- "description": "PublicKey defines the root of trust based on a sigstore public key.",
- "type": "object",
- "required": [
- "keyData"
- ],
- "properties": {
- "keyData": {
- "description": "keyData contains inline base64-encoded data for the PEM format public key. KeyData must be at most 8192 characters.",
- "type": "string",
- "format": "byte"
- },
- "rekorKeyData": {
- "description": "rekorKeyData contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.",
- "type": "string",
- "format": "byte"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PublicKey",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.config.v1alpha1.RetentionNumberConfig": {
- "description": "RetentionNumberConfig specifies the configuration of the retention policy on the number of backups",
- "type": "object",
- "required": [
- "maxNumberOfBackups"
- ],
- "properties": {
- "maxNumberOfBackups": {
- "description": "MaxNumberOfBackups defines the maximum number of backups to retain. If the existing number of backups saved is equal to MaxNumberOfBackups then the oldest backup will be removed before a new backup is initiated.",
- "type": "integer",
- "format": "int32"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "RetentionNumberConfig",
+ "Version": "v1",
+ "Kind": "TLSProfileSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.config.v1alpha1.RetentionPolicy": {
- "description": "RetentionPolicy defines the retention policy for retaining and deleting existing backups. This struct is a discriminated union that allows users to select the type of retention policy from the supported types.",
+ "io.openshift.config.v1.TLSSecurityProfile": {
+ "description": "TLSSecurityProfile defines the schema for a TLS security profile. This object is used by operators to apply TLS security settings to operands.",
"type": "object",
- "required": [
- "retentionType"
- ],
"properties": {
- "retentionNumber": {
- "description": "RetentionNumber configures the retention policy based on the number of backups",
- "$ref": "#/definitions/io.openshift.config.v1alpha1.RetentionNumberConfig"
+ "custom": {
+ "description": "custom is a user-defined TLS security profile. Be extremely careful using a custom profile as invalid configurations can be catastrophic. An example custom profile looks like this:\n\n ciphers:\n\n - ECDHE-ECDSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-AES128-GCM-SHA256\n\n - ECDHE-ECDSA-AES128-GCM-SHA256\n\n minTLSVersion: VersionTLS11",
+ "$ref": "#/definitions/io.openshift.config.v1.CustomTLSProfile"
},
- "retentionSize": {
- "description": "RetentionSize configures the retention policy based on the size of backups",
- "$ref": "#/definitions/io.openshift.config.v1alpha1.RetentionSizeConfig"
+ "intermediate": {
+ "description": "intermediate is a TLS security profile based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28recommended.29\n\nand looks like this (yaml):\n\n ciphers:\n\n - TLS_AES_128_GCM_SHA256\n\n - TLS_AES_256_GCM_SHA384\n\n - TLS_CHACHA20_POLY1305_SHA256\n\n - ECDHE-ECDSA-AES128-GCM-SHA256\n\n - ECDHE-RSA-AES128-GCM-SHA256\n\n - ECDHE-ECDSA-AES256-GCM-SHA384\n\n - ECDHE-RSA-AES256-GCM-SHA384\n\n - ECDHE-ECDSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-CHACHA20-POLY1305\n\n - DHE-RSA-AES128-GCM-SHA256\n\n - DHE-RSA-AES256-GCM-SHA384\n\n minTLSVersion: VersionTLS12",
+ "$ref": "#/definitions/io.openshift.config.v1.IntermediateTLSProfile"
},
- "retentionType": {
- "description": "RetentionType sets the type of retention policy. Currently, the only valid policies are retention by number of backups (RetentionNumber), by the size of backups (RetentionSize). More policies or types may be added in the future. Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. The current default is RetentionNumber with 15 backups kept.\n\nPossible enum values:\n - `\"RetentionNumber\"` sets the retention policy based on the number of backup files saved\n - `\"RetentionSize\"` sets the retention policy based on the total size of the backup files saved",
+ "modern": {
+ "description": "modern is a TLS security profile based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility\n\nand looks like this (yaml):\n\n ciphers:\n\n - TLS_AES_128_GCM_SHA256\n\n - TLS_AES_256_GCM_SHA384\n\n - TLS_CHACHA20_POLY1305_SHA256\n\n minTLSVersion: VersionTLS13",
+ "$ref": "#/definitions/io.openshift.config.v1.ModernTLSProfile"
+ },
+ "old": {
+ "description": "old is a TLS security profile based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Old_backward_compatibility\n\nand looks like this (yaml):\n\n ciphers:\n\n - TLS_AES_128_GCM_SHA256\n\n - TLS_AES_256_GCM_SHA384\n\n - TLS_CHACHA20_POLY1305_SHA256\n\n - ECDHE-ECDSA-AES128-GCM-SHA256\n\n - ECDHE-RSA-AES128-GCM-SHA256\n\n - ECDHE-ECDSA-AES256-GCM-SHA384\n\n - ECDHE-RSA-AES256-GCM-SHA384\n\n - ECDHE-ECDSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-CHACHA20-POLY1305\n\n - DHE-RSA-AES128-GCM-SHA256\n\n - DHE-RSA-AES256-GCM-SHA384\n\n - DHE-RSA-CHACHA20-POLY1305\n\n - ECDHE-ECDSA-AES128-SHA256\n\n - ECDHE-RSA-AES128-SHA256\n\n - ECDHE-ECDSA-AES128-SHA\n\n - ECDHE-RSA-AES128-SHA\n\n - ECDHE-ECDSA-AES256-SHA384\n\n - ECDHE-RSA-AES256-SHA384\n\n - ECDHE-ECDSA-AES256-SHA\n\n - ECDHE-RSA-AES256-SHA\n\n - DHE-RSA-AES128-SHA256\n\n - DHE-RSA-AES256-SHA256\n\n - AES128-GCM-SHA256\n\n - AES256-GCM-SHA384\n\n - AES128-SHA256\n\n - AES256-SHA256\n\n - AES128-SHA\n\n - AES256-SHA\n\n - DES-CBC3-SHA\n\n minTLSVersion: VersionTLS10",
+ "$ref": "#/definitions/io.openshift.config.v1.OldTLSProfile"
+ },
+ "type": {
+ "description": "type is one of Old, Intermediate, Modern or Custom. Custom provides the ability to specify individual TLS security profile parameters. Old, Intermediate and Modern are TLS security profiles based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Recommended_configurations\n\nThe profiles are intent based, so they may change over time as new ciphers are developed and existing ciphers are found to be insecure. Depending on precisely which ciphers are available to a process, the list may be reduced.\n\nNote that the Modern profile is currently not supported because it is not yet well adopted by common software libraries.",
"type": "string",
- "default": "",
- "enum": [
- "RetentionNumber",
- "RetentionSize"
- ]
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "RetentionPolicy",
+ "Version": "v1",
+ "Kind": "TLSSecurityProfile",
"Scope": "Namespaced"
},
"x-kubernetes-unions": [
{
- "discriminator": "retentionType",
+ "discriminator": "type",
"fields-to-discriminateBy": {
- "retentionNumber": "RetentionNumber",
- "retentionSize": "RetentionSize"
+ "custom": "Custom",
+ "intermediate": "Intermediate",
+ "modern": "Modern",
+ "old": "Old"
}
}
]
},
- "io.openshift.config.v1alpha1.RetentionSizeConfig": {
- "description": "RetentionSizeConfig specifies the configuration of the retention policy on the total size of backups",
- "type": "object",
- "required": [
- "maxSizeOfBackupsGb"
- ],
- "properties": {
- "maxSizeOfBackupsGb": {
- "description": "MaxSizeOfBackupsGb defines the total size in GB of backups to retain. If the current total size backups exceeds MaxSizeOfBackupsGb then the oldest backup will be removed before a new backup is initiated.",
- "type": "integer",
- "format": "int32"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "config.openshift.io",
- "Version": "v1alpha1",
- "Kind": "RetentionSizeConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.console.v1.ApplicationMenuSpec": {
- "description": "ApplicationMenuSpec is the specification of the desired section and icon used for the link in the application menu.",
+ "io.openshift.config.v1.TemplateReference": {
+ "description": "TemplateReference references a template in a specific namespace. The namespace must be specified at the point of use.",
"type": "object",
"required": [
- "section"
+ "name"
],
"properties": {
- "imageURL": {
- "description": "imageUrl is the URL for the icon used in front of the link in the application menu. The URL must be an HTTPS URL or a Data URI. The image should be square and will be shown at 24x24 pixels.",
- "type": "string"
- },
- "section": {
- "description": "section is the section of the application menu in which the link should appear. This can be any text that will appear as a subheading in the application menu dropdown. A new section will be created if the text does not match text of an existing section.",
+ "name": {
+ "description": "name is the metadata.name of the referenced project request template",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ApplicationMenuSpec",
+ "Kind": "TemplateReference",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.CLIDownloadLink": {
+ "io.openshift.config.v1.TestDetails": {
"type": "object",
"required": [
- "href"
+ "testName"
],
"properties": {
- "href": {
- "description": "href is the absolute secure URL for the link (must use https)",
- "type": "string",
- "default": ""
- },
- "text": {
- "description": "text is the display text for the link",
+ "testName": {
+ "description": "TestName is the name of the test as it appears in junit XMLs. It does not include the suite name since the same test can be executed in many suites.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "CLIDownloadLink",
+ "Kind": "TestDetails",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleCLIDownload": {
- "description": "ConsoleCLIDownload is an extension for configuring openshift web console command line interface (CLI) downloads.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.TestReporting": {
+ "description": "TestReporting is used for origin (and potentially others) to report the test names for a given FeatureGate into the payload for later analysis on a per-payload basis. This doesn't need any CRD because it's never stored in the cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
"spec"
@@ -79463,717 +80441,715 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleCLIDownloadSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.TestReportingSpec"
+ },
+ "status": {
+ "description": "status holds observed values from the cluster. They may not be overridden.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.TestReportingStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleCLIDownload",
- "Scope": "Clustered"
+ "Kind": "TestReporting",
+ "Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleCLIDownloadList": {
- "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.TestReportingSpec": {
"type": "object",
"required": [
- "metadata",
- "items"
+ "testsForFeatureGates"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
+ "testsForFeatureGates": {
+ "description": "TestsForFeatureGates is a list, indexed by FeatureGate and includes information about testing.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleCLIDownload"
+ "$ref": "#/definitions/io.openshift.config.v1.FeatureGateTests"
}
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "console.openshift.io",
+ "Type": "nested",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleCLIDownloadList",
+ "Kind": "TestReportingSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleCLIDownloadSpec": {
- "description": "ConsoleCLIDownloadSpec is the desired cli download configuration.",
+ "io.openshift.config.v1.TestReportingStatus": {
"type": "object",
- "required": [
- "displayName",
- "description",
- "links"
- ],
- "properties": {
- "description": {
- "description": "description is the description of the CLI download (can include markdown).",
- "type": "string",
- "default": ""
- },
- "displayName": {
- "description": "displayName is the display name of the CLI download.",
- "type": "string",
- "default": ""
- },
- "links": {
- "description": "links is a list of objects that provide CLI download link details.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.console.v1.CLIDownloadLink"
- }
- }
- },
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleCLIDownloadSpec",
+ "Kind": "TestReportingStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleExternalLogLink": {
- "description": "ConsoleExternalLogLink is an extension for customizing OpenShift web console log links.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.TokenClaimMapping": {
"type": "object",
"required": [
- "spec"
+ "claim"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleExternalLogLinkSpec"
+ "claim": {
+ "description": "Claim is a JWT token claim to be used in the mapping",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "console.openshift.io",
+ "Type": "nested",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleExternalLogLink",
- "Scope": "Clustered"
+ "Kind": "TokenClaimMapping",
+ "Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleExternalLogLinkList": {
- "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.TokenClaimMappings": {
"type": "object",
- "required": [
- "metadata",
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleExternalLogLink"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "groups": {
+ "description": "Groups is a name of the claim that should be used to construct groups for the cluster identity. The referenced claim must use array of strings values.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.PrefixedClaimMapping"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "username": {
+ "description": "Username is a name of the claim that should be used to construct usernames for the cluster identity.\n\nDefault value: \"sub\"",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "$ref": "#/definitions/io.openshift.config.v1.UsernameClaimMapping"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "console.openshift.io",
+ "Type": "nested",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleExternalLogLinkList",
+ "Kind": "TokenClaimMappings",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleExternalLogLinkSpec": {
- "description": "ConsoleExternalLogLinkSpec is the desired log link configuration. The log link will appear on the logs tab of the pod details page.",
+ "io.openshift.config.v1.TokenClaimValidationRule": {
"type": "object",
"required": [
- "text",
- "hrefTemplate"
+ "type",
+ "requiredClaim"
],
"properties": {
- "hrefTemplate": {
- "description": "hrefTemplate is an absolute secure URL (must use https) for the log link including variables to be replaced. Variables are specified in the URL with the format ${variableName}, for instance, ${containerName} and will be replaced with the corresponding values from the resource. Resource is a pod. Supported variables are: - ${resourceName} - name of the resource which containes the logs - ${resourceUID} - UID of the resource which contains the logs\n - e.g. `11111111-2222-3333-4444-555555555555`\n- ${containerName} - name of the resource's container that contains the logs - ${resourceNamespace} - namespace of the resource that contains the logs - ${resourceNamespaceUID} - namespace UID of the resource that contains the logs - ${podLabels} - JSON representation of labels matching the pod with the logs\n - e.g. `{\"key1\":\"value1\",\"key2\":\"value2\"}`\n\ne.g., https://example.com/logs?resourceName=${resourceName}\u0026containerName=${containerName}\u0026resourceNamespace=${resourceNamespace}\u0026podLabels=${podLabels}",
- "type": "string",
- "default": ""
- },
- "namespaceFilter": {
- "description": "namespaceFilter is a regular expression used to restrict a log link to a matching set of namespaces (e.g., `^openshift-`). The string is converted into a regular expression using the JavaScript RegExp constructor. If not specified, links will be displayed for all the namespaces.",
- "type": "string"
+ "requiredClaim": {
+ "description": "RequiredClaim allows configuring a required claim name and its expected value",
+ "$ref": "#/definitions/io.openshift.config.v1.TokenRequiredClaim"
},
- "text": {
- "description": "text is the display text for the link",
+ "type": {
+ "description": "Type sets the type of the validation rule",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleExternalLogLinkSpec",
+ "Kind": "TokenClaimValidationRule",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleLink": {
- "description": "ConsoleLink is an extension for customizing OpenShift web console links.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.TokenConfig": {
+ "description": "TokenConfig holds the necessary configuration options for authorization and access tokens",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "accessTokenInactivityTimeout": {
+ "description": "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.\n\nWARNING: existing tokens' timeout will not be affected (lowered) by changing this value",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "accessTokenInactivityTimeoutSeconds": {
+ "description": "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.",
+ "type": "integer",
+ "format": "int32"
},
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleLinkSpec"
+ "accessTokenMaxAgeSeconds": {
+ "description": "accessTokenMaxAgeSeconds defines the maximum age of access tokens",
+ "type": "integer",
+ "format": "int32"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "console.openshift.io",
+ "Type": "nested",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleLink",
- "Scope": "Clustered"
+ "Kind": "TokenConfig",
+ "Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleLinkList": {
- "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.TokenIssuer": {
"type": "object",
"required": [
- "metadata",
- "items"
+ "issuerURL",
+ "audiences",
+ "issuerCertificateAuthority"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
+ "audiences": {
+ "description": "Audiences is an array of audiences that the token was issued for. Valid tokens must include at least one of these values in their \"aud\" claim. Must be set to exactly one value.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleLink"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "set"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "issuerCertificateAuthority": {
+ "description": "CertificateAuthority is a reference to a config map in the configuration namespace. The .data of the configMap must contain the \"ca-bundle.crt\" key. If unset, system trust is used instead.",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ },
+ "issuerURL": {
+ "description": "URL is the serving URL of the token issuer. Must use the https:// scheme.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "console.openshift.io",
+ "Type": "nested",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleLinkList",
+ "Kind": "TokenIssuer",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleLinkSpec": {
- "description": "ConsoleLinkSpec is the desired console link configuration.",
+ "io.openshift.config.v1.TokenRequiredClaim": {
"type": "object",
"required": [
- "text",
- "href",
- "location"
+ "claim",
+ "requiredValue"
],
"properties": {
- "applicationMenu": {
- "description": "applicationMenu holds information about section and icon used for the link in the application menu, and it is applicable only when location is set to ApplicationMenu.",
- "$ref": "#/definitions/io.openshift.console.v1.ApplicationMenuSpec"
- },
- "href": {
- "description": "href is the absolute secure URL for the link (must use https)",
- "type": "string",
- "default": ""
- },
- "location": {
- "description": "location determines which location in the console the link will be appended to (ApplicationMenu, HelpMenu, UserMenu, NamespaceDashboard).",
+ "claim": {
+ "description": "Claim is a name of a required claim. Only claims with string values are supported.",
"type": "string",
"default": ""
},
- "namespaceDashboard": {
- "description": "namespaceDashboard holds information about namespaces in which the dashboard link should appear, and it is applicable only when location is set to NamespaceDashboard. If not specified, the link will appear in all namespaces.",
- "$ref": "#/definitions/io.openshift.console.v1.NamespaceDashboardSpec"
- },
- "text": {
- "description": "text is the display text for the link",
+ "requiredValue": {
+ "description": "RequiredValue is the required value for the claim.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleLinkSpec",
+ "Kind": "TokenRequiredClaim",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleNotification": {
- "description": "ConsoleNotification is the extension for configuring openshift web console notifications.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.Update": {
+ "description": "Update represents an administrator update request.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "architecture": {
+ "description": "architecture is an optional field that indicates the desired value of the cluster architecture. In this context cluster architecture means either a single architecture or a multi architecture. architecture can only be set to Multi thereby only allowing updates from single to multi architecture. If architecture is set, image cannot be set and version must be set. Valid values are 'Multi' and empty.",
+ "type": "string",
+ "default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "force": {
+ "description": "force allows an administrator to update to an image that has failed verification or upgradeable checks. This option should only be used when the authenticity of the provided image has been verified out of band because the provided image will run with full administrative access to the cluster. Do not use this flag with images that comes from unknown or potentially malicious sources.",
+ "type": "boolean",
+ "default": false
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "image": {
+ "description": "image is a container image location that contains the update. image should be used when the desired version does not exist in availableUpdates or history. When image is set, version is ignored. When image is set, version should be empty. When image is set, architecture cannot be specified.",
+ "type": "string",
+ "default": ""
},
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleNotificationSpec"
+ "version": {
+ "description": "version is a semantic version identifying the update version. version is ignored if image is specified and required if architecture is specified.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "console.openshift.io",
+ "Type": "nested",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleNotification",
- "Scope": "Clustered"
+ "Kind": "Update",
+ "Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleNotificationList": {
- "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.UpdateHistory": {
+ "description": "UpdateHistory is a single attempted update to the cluster.",
"type": "object",
"required": [
- "metadata",
- "items"
+ "state",
+ "startedTime",
+ "completionTime",
+ "image",
+ "verified"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "acceptedRisks": {
+ "description": "acceptedRisks records risks which were accepted to initiate the update. For example, it may menition an Upgradeable=False or missing signature that was overriden via desiredUpdate.force, or an update that was initiated despite not being in the availableUpdates set of recommended update targets.",
"type": "string"
},
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleNotification"
- }
+ "completionTime": {
+ "description": "completionTime, if set, is when the update was fully applied. The update that is currently being applied will have a null completion time. Completion time will always be set for entries that are not the current update (usually to the started time of the next update).",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "image": {
+ "description": "image is a container image location that contains the update. This value is always populated.",
+ "type": "string",
+ "default": ""
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "startedTime": {
+ "description": "startedTime is the time at which the update was started.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "state": {
+ "description": "state reflects whether the update was fully applied. The Partial state indicates the update is not fully applied, while the Completed state indicates the update was successfully rolled out at least once (all parts of the update successfully applied).",
+ "type": "string",
+ "default": ""
+ },
+ "verified": {
+ "description": "verified indicates whether the provided update was properly verified before it was installed. If this is false the cluster may not be trusted. Verified does not cover upgradeable checks that depend on the cluster state at the time when the update target was accepted.",
+ "type": "boolean",
+ "default": false
+ },
+ "version": {
+ "description": "version is a semantic version identifying the update version. If the requested image does not define a version, or if a failure occurs retrieving the image, this value may be empty.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "console.openshift.io",
+ "Type": "nested",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleNotificationList",
+ "Kind": "UpdateHistory",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleNotificationSpec": {
- "description": "ConsoleNotificationSpec is the desired console notification configuration.",
+ "io.openshift.config.v1.UsernameClaimMapping": {
"type": "object",
"required": [
- "text"
+ "claim",
+ "prefixPolicy",
+ "prefix"
],
"properties": {
- "backgroundColor": {
- "description": "backgroundColor is the color of the background for the notification as CSS data type color.",
- "type": "string"
- },
- "color": {
- "description": "color is the color of the text for the notification as CSS data type color.",
- "type": "string"
- },
- "link": {
- "description": "link is an object that holds notification link details.",
- "$ref": "#/definitions/io.openshift.console.v1.Link"
+ "claim": {
+ "description": "Claim is a JWT token claim to be used in the mapping",
+ "type": "string",
+ "default": ""
},
- "location": {
- "description": "location is the location of the notification in the console. Valid values are: \"BannerTop\", \"BannerBottom\", \"BannerTopBottom\".",
- "type": "string"
+ "prefix": {
+ "$ref": "#/definitions/io.openshift.config.v1.UsernamePrefix"
},
- "text": {
- "description": "text is the visible text of the notification.",
+ "prefixPolicy": {
+ "description": "PrefixPolicy specifies how a prefix should apply.\n\nBy default, claims other than `email` will be prefixed with the issuer URL to prevent naming clashes with other plugins.\n\nSet to \"NoPrefix\" to disable prefixing.\n\nExample:\n (1) `prefix` is set to \"myoidc:\" and `claim` is set to \"username\".\n If the JWT claim `username` contains value `userA`, the resulting\n mapped value will be \"myoidc:userA\".\n (2) `prefix` is set to \"myoidc:\" and `claim` is set to \"email\". If the\n JWT `email` claim contains value \"userA@myoidc.tld\", the resulting\n mapped value will be \"myoidc:userA@myoidc.tld\".\n (3) `prefix` is unset, `issuerURL` is set to `https://myoidc.tld`,\n the JWT claims include \"username\":\"userA\" and \"email\":\"userA@myoidc.tld\",\n and `claim` is set to:\n (a) \"username\": the mapped value will be \"https://myoidc.tld#userA\"\n (b) \"email\": the mapped value will be \"userA@myoidc.tld\"",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsoleNotificationSpec",
+ "Kind": "UsernameClaimMapping",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsolePlugin": {
- "description": "ConsolePlugin is an extension for customizing OpenShift web console by dynamically loading code from another service running on the cluster.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.UsernamePrefix": {
"type": "object",
"required": [
- "metadata",
- "spec"
+ "prefixString"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "prefixString": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1",
+ "Kind": "UsernamePrefix",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1.VSpherePlatformFailureDomainSpec": {
+ "description": "VSpherePlatformFailureDomainSpec holds the region and zone failure domain and the vCenter topology of that failure domain.",
+ "type": "object",
+ "required": [
+ "name",
+ "region",
+ "zone",
+ "server",
+ "topology"
+ ],
+ "properties": {
+ "name": {
+ "description": "name defines the arbitrary but unique name of a failure domain.",
+ "type": "string",
+ "default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "region": {
+ "description": "region defines the name of a region tag that will be attached to a vCenter datacenter. The tag category in vCenter must be named openshift-region.",
+ "type": "string",
+ "default": ""
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "server": {
+ "description": "server is the fully-qualified domain name or the IP address of the vCenter server.",
+ "type": "string",
+ "default": ""
},
- "spec": {
+ "topology": {
+ "description": "Topology describes a given failure domain using vSphere constructs",
"default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformTopology"
+ },
+ "zone": {
+ "description": "zone defines the name of a zone tag that will be attached to a vCenter cluster. The tag category in vCenter must be named openshift-zone.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "console.openshift.io",
+ "Type": "nested",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsolePlugin",
- "Scope": "Clustered"
+ "Kind": "VSpherePlatformFailureDomainSpec",
+ "Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsolePluginBackend": {
- "description": "ConsolePluginBackend holds information about the endpoint which serves the console's plugin",
+ "io.openshift.config.v1.VSpherePlatformLoadBalancer": {
+ "description": "VSpherePlatformLoadBalancer defines the load balancer used by the cluster on VSphere platform.",
"type": "object",
- "required": [
- "type"
- ],
"properties": {
- "service": {
- "description": "service is a Kubernetes Service that exposes the plugin using a deployment with an HTTP server. The Service must use HTTPS and Service serving certificate. The console backend will proxy the plugins assets from the Service using the service CA bundle.",
- "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginService"
- },
"type": {
- "description": "type is the backend type which servers the console's plugin. Currently only \"Service\" is supported.",
+ "description": "type defines the type of load balancer used by the cluster on VSphere platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.",
"type": "string",
- "default": ""
+ "default": "OpenShiftManagedDefault"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsolePluginBackend",
+ "Kind": "VSpherePlatformLoadBalancer",
"Scope": "Namespaced"
},
"x-kubernetes-unions": [
{
"discriminator": "type",
- "fields-to-discriminateBy": {
- "service": "Service"
- }
+ "fields-to-discriminateBy": {}
}
]
},
- "io.openshift.console.v1.ConsolePluginI18n": {
- "description": "ConsolePluginI18n holds information on localization resources that are served by the dynamic plugin.",
+ "io.openshift.config.v1.VSpherePlatformNodeNetworking": {
+ "description": "VSpherePlatformNodeNetworking holds the external and internal node networking spec.",
"type": "object",
- "required": [
- "loadType"
- ],
"properties": {
- "loadType": {
- "description": "loadType indicates how the plugin's localization resource should be loaded. Valid values are Preload, Lazy and the empty string. When set to Preload, all localization resources are fetched when the plugin is loaded. When set to Lazy, localization resources are lazily loaded as and when they are required by the console. When omitted or set to the empty string, the behaviour is equivalent to Lazy type.",
- "type": "string",
- "default": ""
+ "external": {
+ "description": "external represents the network configuration of the node that is externally routable.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformNodeNetworkingSpec"
+ },
+ "internal": {
+ "description": "internal represents the network configuration of the node that is routable only within the cluster.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformNodeNetworkingSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsolePluginI18n",
+ "Kind": "VSpherePlatformNodeNetworking",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsolePluginList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1.VSpherePlatformNodeNetworkingSpec": {
+ "description": "VSpherePlatformNodeNetworkingSpec holds the network CIDR(s) and port group name for including and excluding IP ranges in the cloud provider. This would be used for example when multiple network adapters are attached to a guest to help determine which IP address the cloud config manager should use for the external and internal node networking.",
"type": "object",
- "required": [
- "metadata",
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
+ "excludeNetworkSubnetCidr": {
+ "description": "excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting the IP address from the VirtualMachine's VM for use in the status.addresses fields.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsolePlugin"
- }
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "network": {
+ "description": "network VirtualMachine's VM Network names that will be used to when searching for status.addresses fields. Note that if internal.networkSubnetCIDR and external.networkSubnetCIDR are not set, then the vNIC associated to this network must only have a single IP address assigned to it. The available networks (port groups) can be listed using `govc ls 'network/*'`",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "networkSubnetCidr": {
+ "description": "networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs that will be used in respective status.addresses fields.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "set"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "console.openshift.io",
+ "Type": "nested",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsolePluginList",
+ "Kind": "VSpherePlatformNodeNetworkingSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsolePluginProxy": {
- "description": "ConsolePluginProxy holds information on various service types to which console's backend will proxy the plugin's requests.",
+ "io.openshift.config.v1.VSpherePlatformSpec": {
+ "description": "VSpherePlatformSpec holds the desired state of the vSphere infrastructure provider. In the future the cloud provider operator, storage operator and machine operator will use these fields for configuration.",
"type": "object",
- "required": [
- "endpoint",
- "alias"
- ],
"properties": {
- "alias": {
- "description": "alias is a proxy name that identifies the plugin's proxy. An alias name should be unique per plugin. The console backend exposes following proxy endpoint:\n\n/api/proxy/plugin/\u003cplugin-name\u003e/\u003cproxy-alias\u003e/\u003crequest-path\u003e?\u003coptional-query-parameters\u003e\n\nRequest example path:\n\n/api/proxy/plugin/acm/search/pods?namespace=openshift-apiserver",
- "type": "string",
- "default": ""
+ "apiServerInternalIPs": {
+ "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "authorization": {
- "description": "authorization provides information about authorization type, which the proxied request should contain",
- "type": "string"
+ "failureDomains": {
+ "description": "failureDomains contains the definition of region, zone and the vCenter topology. If this is omitted failure domains (regions and zones) will not be used.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformFailureDomainSpec"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "caCertificate": {
- "description": "caCertificate provides the cert authority certificate contents, in case the proxied Service is using custom service CA. By default, the service CA bundle provided by the service-ca operator is used.",
- "type": "string"
+ "ingressIPs": {
+ "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "endpoint": {
- "description": "endpoint provides information about endpoint to which the request is proxied to.",
+ "machineNetworks": {
+ "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "nodeNetworking": {
+ "description": "nodeNetworking contains the definition of internal and external network constraints for assigning the node's networking. If this field is omitted, networking defaults to the legacy address selection behavior which is to only support a single address and return the first one found.",
"default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginProxyEndpoint"
+ "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformNodeNetworking"
+ },
+ "vcenters": {
+ "description": "vcenters holds the connection details for services to communicate with vCenter. Currently, only a single vCenter is supported, but in tech preview 3 vCenters are supported. Once the cluster has been installed, you are unable to change the current number of defined vCenters except in the case where the cluster has been upgraded from a version of OpenShift where the vsphere platform spec was not present. You may make modifications to the existing vCenters that are defined in the vcenters list in order to match with any added or modified failure domains.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformVCenterSpec"
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsolePluginProxy",
+ "Kind": "VSpherePlatformSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsolePluginProxyEndpoint": {
- "description": "ConsolePluginProxyEndpoint holds information about the endpoint to which request will be proxied to.",
+ "io.openshift.config.v1.VSpherePlatformStatus": {
+ "description": "VSpherePlatformStatus holds the current status of the vSphere infrastructure provider.",
"type": "object",
"required": [
- "type"
+ "apiServerInternalIPs",
+ "ingressIPs"
],
"properties": {
- "service": {
- "description": "service is an in-cluster Service that the plugin will connect to. The Service must use HTTPS. The console backend exposes an endpoint in order to proxy communication between the plugin and the Service. Note: service field is required for now, since currently only \"Service\" type is supported.",
- "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginProxyServiceConfig"
+ "apiServerInternalIP": {
+ "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.",
+ "type": "string"
},
- "type": {
- "description": "type is the type of the console plugin's proxy. Currently only \"Service\" is supported.",
- "type": "string",
- "default": ""
+ "apiServerInternalIPs": {
+ "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "ingressIP": {
+ "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.",
+ "type": "string"
+ },
+ "ingressIPs": {
+ "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "loadBalancer": {
+ "description": "loadBalancer defines how the load balancer used by the cluster is configured.",
+ "default": {
+ "type": "OpenShiftManagedDefault"
+ },
+ "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformLoadBalancer"
+ },
+ "machineNetworks": {
+ "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "nodeDNSIP": {
+ "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for vSphere deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsolePluginProxyEndpoint",
+ "Kind": "VSpherePlatformStatus",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "service": "Service"
- }
- }
- ]
+ }
},
- "io.openshift.console.v1.ConsolePluginProxyServiceConfig": {
- "description": "ProxyTypeServiceConfig holds information on Service to which console's backend will proxy the plugin's requests.",
+ "io.openshift.config.v1.VSpherePlatformTopology": {
+ "description": "VSpherePlatformTopology holds the required and optional vCenter objects - datacenter, computeCluster, networks, datastore and resourcePool - to provision virtual machines.",
"type": "object",
"required": [
- "name",
- "namespace",
- "port"
+ "datacenter",
+ "computeCluster",
+ "networks",
+ "datastore"
],
"properties": {
- "name": {
- "description": "name of Service that the plugin needs to connect to.",
+ "computeCluster": {
+ "description": "computeCluster the absolute path of the vCenter cluster in which virtual machine will be located. The absolute path is of the form /\u003cdatacenter\u003e/host/\u003ccluster\u003e. The maximum length of the path is 2048 characters.",
"type": "string",
"default": ""
},
- "namespace": {
- "description": "namespace of Service that the plugin needs to connect to",
+ "datacenter": {
+ "description": "datacenter is the name of vCenter datacenter in which virtual machines will be located. The maximum length of the datacenter name is 80 characters.",
"type": "string",
"default": ""
},
- "port": {
- "description": "port on which the Service that the plugin needs to connect to is listening on.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "datastore": {
+ "description": "datastore is the absolute path of the datastore in which the virtual machine is located. The absolute path is of the form /\u003cdatacenter\u003e/datastore/\u003cdatastore\u003e The maximum length of the path is 2048 characters.",
+ "type": "string",
+ "default": ""
+ },
+ "folder": {
+ "description": "folder is the absolute path of the folder where virtual machines are located. The absolute path is of the form /\u003cdatacenter\u003e/vm/\u003cfolder\u003e. The maximum length of the path is 2048 characters.",
+ "type": "string"
+ },
+ "networks": {
+ "description": "networks is the list of port group network names within this failure domain. If feature gate VSphereMultiNetworks is enabled, up to 10 network adapters may be defined. 10 is the maximum number of virtual network devices which may be attached to a VM as defined by: https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere\u0026release=vSphere%208.0\u0026categories=1-0 The available networks (port groups) can be listed using `govc ls 'network/*'` Networks should be in the form of an absolute path: /\u003cdatacenter\u003e/network/\u003cportgroup\u003e.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "resourcePool": {
+ "description": "resourcePool is the absolute path of the resource pool where virtual machines will be created. The absolute path is of the form /\u003cdatacenter\u003e/host/\u003ccluster\u003e/Resources/\u003cresourcepool\u003e. The maximum length of the path is 2048 characters.",
+ "type": "string"
+ },
+ "template": {
+ "description": "template is the full inventory path of the virtual machine or template that will be cloned when creating new machines in this failure domain. The maximum length of the path is 2048 characters.\n\nWhen omitted, the template will be calculated by the control plane machineset operator based on the region and zone defined in VSpherePlatformFailureDomainSpec. For example, for zone=zonea, region=region1, and infrastructure name=test, the template path would be calculated as /\u003cdatacenter\u003e/vm/test-rhcos-region1-zonea.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsolePluginProxyServiceConfig",
+ "Kind": "VSpherePlatformTopology",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsolePluginService": {
- "description": "ConsolePluginService holds information on Service that is serving console dynamic plugin assets.",
+ "io.openshift.config.v1.VSpherePlatformVCenterSpec": {
+ "description": "VSpherePlatformVCenterSpec stores the vCenter connection fields. This is used by the vSphere CCM.",
"type": "object",
"required": [
- "name",
- "namespace",
- "port"
+ "server",
+ "datacenters"
],
"properties": {
- "basePath": {
- "description": "basePath is the path to the plugin's assets. The primary asset it the manifest file called `plugin-manifest.json`, which is a JSON document that contains metadata about the plugin and the extensions.",
- "type": "string",
- "default": ""
+ "datacenters": {
+ "description": "The vCenter Datacenters in which the RHCOS vm guests are located. This field will be used by the Cloud Controller Manager. Each datacenter listed here should be used within a topology.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "set"
},
- "name": {
- "description": "name of Service that is serving the plugin assets.",
- "type": "string",
- "default": ""
+ "port": {
+ "description": "port is the TCP port that will be used to communicate to the vCenter endpoint. When omitted, this means the user has no opinion and it is up to the platform to choose a sensible default, which is subject to change over time.",
+ "type": "integer",
+ "format": "int32"
},
- "namespace": {
- "description": "namespace of Service that is serving the plugin assets.",
+ "server": {
+ "description": "server is the fully-qualified domain name or the IP address of the vCenter server.",
"type": "string",
"default": ""
- },
- "port": {
- "description": "port on which the Service that is serving the plugin is listening to.",
- "type": "integer",
- "format": "int32",
- "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsolePluginService",
+ "Kind": "VSpherePlatformVCenterSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsolePluginSpec": {
- "description": "ConsolePluginSpec is the desired plugin configuration.",
+ "io.openshift.config.v1.WebhookTokenAuthenticator": {
+ "description": "webhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator",
"type": "object",
"required": [
- "displayName",
- "backend"
+ "kubeConfig"
],
"properties": {
- "backend": {
- "description": "backend holds the configuration of backend which is serving console's plugin .",
- "default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginBackend"
- },
- "displayName": {
- "description": "displayName is the display name of the plugin. The dispalyName should be between 1 and 128 characters.",
- "type": "string",
- "default": ""
- },
- "i18n": {
- "description": "i18n is the configuration of plugin's localization resources.",
+ "kubeConfig": {
+ "description": "kubeConfig references a secret that contains kube config file data which describes how to access the remote webhook service. The namespace for the referenced secret is openshift-config.\n\nFor further details, see:\n\nhttps://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication\n\nThe key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored.",
"default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginI18n"
- },
- "proxy": {
- "description": "proxy is a list of proxies that describe various service type to which the plugin needs to connect to.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginProxy"
- }
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
+ "Group": "config.openshift.io",
"Version": "v1",
- "Kind": "ConsolePluginSpec",
+ "Kind": "WebhookTokenAuthenticator",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleQuickStart": {
- "description": "ConsoleQuickStart is an extension for guiding user through various workflows in the OpenShift web console.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1alpha1.Backup": {
+ "description": "Backup provides configuration for performing backups of the openshift cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
"spec"
@@ -80193,20 +81169,26 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
+ "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartSpec"
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.BackupSpec"
+ },
+ "status": {
+ "description": "status holds observed values from the cluster. They may not be overridden.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.BackupStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleQuickStart",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "Backup",
"Scope": "Clustered"
}
},
- "io.openshift.console.v1.ConsoleQuickStartList": {
- "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1alpha1.BackupList": {
+ "description": "BackupList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
"metadata",
@@ -80221,7 +81203,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStart"
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.Backup"
}
},
"kind": {
@@ -80236,346 +81218,304 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleQuickStartList",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "BackupList",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleQuickStartSpec": {
- "description": "ConsoleQuickStartSpec is the desired quick start configuration.",
+ "io.openshift.config.v1alpha1.BackupSpec": {
"type": "object",
"required": [
- "displayName",
- "durationMinutes",
- "description",
- "introduction",
- "tasks"
+ "etcd"
],
"properties": {
- "accessReviewResources": {
- "description": "accessReviewResources contains a list of resources that the user's access will be reviewed against in order for the user to complete the Quick Start. The Quick Start will be hidden if any of the access reviews fail.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes"
- }
- },
- "conclusion": {
- "description": "conclusion sums up the Quick Start and suggests the possible next steps. (includes markdown)",
- "type": "string"
- },
- "description": {
- "description": "description is the description of the Quick Start. (includes markdown)",
- "type": "string",
- "default": ""
- },
- "displayName": {
- "description": "displayName is the display name of the Quick Start.",
- "type": "string",
- "default": ""
- },
- "durationMinutes": {
- "description": "durationMinutes describes approximately how many minutes it will take to complete the Quick Start.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "icon": {
- "description": "icon is a base64 encoded image that will be displayed beside the Quick Start display name. The icon should be an vector image for easy scaling. The size of the icon should be 40x40.",
- "type": "string"
- },
- "introduction": {
- "description": "introduction describes the purpose of the Quick Start. (includes markdown)",
- "type": "string",
- "default": ""
- },
- "nextQuickStart": {
- "description": "nextQuickStart is a list of the following Quick Starts, suggested for the user to try.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "prerequisites": {
- "description": "prerequisites contains all prerequisites that need to be met before taking a Quick Start. (includes markdown)",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "tags": {
- "description": "tags is a list of strings that describe the Quick Start.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "tasks": {
- "description": "tasks is the list of steps the user has to perform to complete the Quick Start.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartTask"
- }
+ "etcd": {
+ "description": "etcd specifies the configuration for periodic backups of the etcd cluster",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.EtcdBackupSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleQuickStartSpec",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "BackupSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleQuickStartTask": {
- "description": "ConsoleQuickStartTask is a single step in a Quick Start.",
+ "io.openshift.config.v1alpha1.BackupStatus": {
"type": "object",
- "required": [
- "title",
- "description"
- ],
- "properties": {
- "description": {
- "description": "description describes the steps needed to complete the task. (includes markdown)",
- "type": "string",
- "default": ""
- },
- "review": {
- "description": "review contains instructions to validate the task is complete. The user will select 'Yes' or 'No'. using a radio button, which indicates whether the step was completed successfully.",
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartTaskReview"
- },
- "summary": {
- "description": "summary contains information about the passed step.",
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartTaskSummary"
- },
- "title": {
- "description": "title describes the task and is displayed as a step heading.",
- "type": "string",
- "default": ""
- }
- },
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleQuickStartTask",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "BackupStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleQuickStartTaskReview": {
- "description": "ConsoleQuickStartTaskReview contains instructions that validate a task was completed successfully.",
+ "io.openshift.config.v1alpha1.ClusterImagePolicy": {
+ "description": "ClusterImagePolicy holds cluster-wide configuration for image signature verification\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "instructions",
- "failedTaskHelp"
+ "spec"
],
"properties": {
- "failedTaskHelp": {
- "description": "failedTaskHelp contains suggestions for a failed task review and is shown at the end of task. (includes markdown)",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "instructions": {
- "description": "instructions contains steps that user needs to take in order to validate his work after going through a task. (includes markdown)",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleQuickStartTaskReview",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.console.v1.ConsoleQuickStartTaskSummary": {
- "description": "ConsoleQuickStartTaskSummary contains information about a passed step.",
- "type": "object",
- "required": [
- "success",
- "failed"
- ],
- "properties": {
- "failed": {
- "description": "failed briefly describes the unsuccessfully passed task. (includes markdown)",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "success": {
- "description": "success describes the succesfully passed task.",
- "type": "string",
- "default": ""
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec contains the configuration for the cluster image policy.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.ClusterImagePolicySpec"
+ },
+ "status": {
+ "description": "status contains the observed state of the resource.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.ClusterImagePolicyStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleQuickStartTaskSummary",
- "Scope": "Namespaced"
+ "Type": "object",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ClusterImagePolicy",
+ "Scope": "Clustered"
}
},
- "io.openshift.console.v1.ConsoleSample": {
- "description": "ConsoleSample is an extension to customizing OpenShift web console by adding samples.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1alpha1.ClusterImagePolicyList": {
+ "description": "ClusterImagePolicyList is a list of ClusterImagePolicy resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
"metadata",
- "spec"
+ "items"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.ClusterImagePolicy"
+ }
+ },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec contains configuration for a console sample.",
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleSpec"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleSample",
- "Scope": "Clustered"
+ "Type": "list",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ClusterImagePolicyList",
+ "Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleSampleContainerImportSource": {
- "description": "ConsoleSampleContainerImportSource let the user import a container image.",
+ "io.openshift.config.v1alpha1.ClusterImagePolicySpec": {
+ "description": "CLusterImagePolicySpec is the specification of the ClusterImagePolicy custom resource.",
"type": "object",
"required": [
- "image"
+ "scopes",
+ "policy"
],
"properties": {
- "image": {
- "description": "reference to a container image that provides a HTTP service. The service must be exposed on the default port (8080) unless otherwise configured with the port field.\n\nSupported formats:\n - \u003crepository-name\u003e/\u003cimage-name\u003e\n - docker.io/\u003crepository-name\u003e/\u003cimage-name\u003e\n - quay.io/\u003crepository-name\u003e/\u003cimage-name\u003e\n - quay.io/\u003crepository-name\u003e/\u003cimage-name\u003e@sha256:\u003cimage hash\u003e\n - quay.io/\u003crepository-name\u003e/\u003cimage-name\u003e:\u003ctag\u003e",
- "type": "string",
- "default": ""
- },
- "service": {
- "description": "service contains configuration for the Service resource created for this sample.",
+ "policy": {
+ "description": "policy contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.",
"default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleContainerImportSourceService"
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.Policy"
+ },
+ "scopes": {
+ "description": "scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "set"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleSampleContainerImportSource",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ClusterImagePolicySpec",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleSampleContainerImportSourceService": {
- "description": "ConsoleSampleContainerImportSourceService let the samples author define defaults for the Service created for this sample.",
+ "io.openshift.config.v1alpha1.ClusterImagePolicyStatus": {
"type": "object",
"properties": {
- "targetPort": {
- "description": "targetPort is the port that the service listens on for HTTP requests. This port will be used for Service and Route created for this sample. Port must be in the range 1 to 65535. Default port is 8080.",
- "type": "integer",
- "format": "int32"
+ "conditions": {
+ "description": "conditions provide details on the status of this API Resource.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleSampleContainerImportSourceService",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ClusterImagePolicyStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleSampleGitImportSource": {
- "description": "ConsoleSampleGitImportSource let the user import code from a public Git repository.",
+ "io.openshift.config.v1alpha1.EtcdBackupSpec": {
+ "description": "EtcdBackupSpec provides configuration for automated etcd backups to the cluster-etcd-operator",
"type": "object",
- "required": [
- "repository"
- ],
"properties": {
- "repository": {
- "description": "repository contains the reference to the actual Git repository.",
- "default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleGitImportSourceRepository"
+ "pvcName": {
+ "description": "PVCName specifies the name of the PersistentVolumeClaim (PVC) which binds a PersistentVolume where the etcd backup files would be saved The PVC itself must always be created in the \"openshift-etcd\" namespace If the PVC is left unspecified \"\" then the platform will choose a reasonable default location to save the backup. In the future this would be backups saved across the control-plane master nodes.",
+ "type": "string",
+ "default": ""
},
- "service": {
- "description": "service contains configuration for the Service resource created for this sample.",
+ "retentionPolicy": {
+ "description": "RetentionPolicy defines the retention policy for retaining and deleting existing backups.",
"default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleGitImportSourceService"
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.RetentionPolicy"
+ },
+ "schedule": {
+ "description": "Schedule defines the recurring backup schedule in Cron format every 2 hours: 0 */2 * * * every day at 3am: 0 3 * * * Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. The current default is \"no backups\", but will change in the future.",
+ "type": "string",
+ "default": ""
+ },
+ "timeZone": {
+ "description": "The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. See https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zones",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleSampleGitImportSource",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "EtcdBackupSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleSampleGitImportSourceRepository": {
- "description": "ConsoleSampleGitImportSourceRepository let the user import code from a public git repository.",
+ "io.openshift.config.v1alpha1.FulcioCAWithRekor": {
+ "description": "FulcioCAWithRekor defines the root of trust based on the Fulcio certificate and the Rekor public key.",
"type": "object",
"required": [
- "url"
+ "fulcioCAData",
+ "rekorKeyData"
],
"properties": {
- "contextDir": {
- "description": "contextDir is used to specify a directory within the repository to build the component. Must start with `/` and have a maximum length of 256 characters. When omitted, the default value is to build from the root of the repository.",
+ "fulcioCAData": {
+ "description": "fulcioCAData contains inline base64-encoded data for the PEM format fulcio CA. fulcioCAData must be at most 8192 characters.",
"type": "string",
- "default": ""
+ "format": "byte"
},
- "revision": {
- "description": "revision is the git revision at which to clone the git repository Can be used to clone a specific branch, tag or commit SHA. Must be at most 256 characters in length. When omitted the repository's default branch is used.",
- "type": "string",
- "default": ""
+ "fulcioSubject": {
+ "description": "fulcioSubject specifies OIDC issuer and the email of the Fulcio authentication configuration.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyFulcioSubject"
},
- "url": {
- "description": "url of the Git repository that contains a HTTP service. The HTTP service must be exposed on the default port (8080) unless otherwise configured with the port field.\n\nOnly public repositories on GitHub, GitLab and Bitbucket are currently supported:\n\n - https://github.com/\u003corg\u003e/\u003crepository\u003e\n - https://gitlab.com/\u003corg\u003e/\u003crepository\u003e\n - https://bitbucket.org/\u003corg\u003e/\u003crepository\u003e\n\nThe url must have a maximum length of 256 characters.",
+ "rekorKeyData": {
+ "description": "rekorKeyData contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.",
"type": "string",
- "default": ""
+ "format": "byte"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleSampleGitImportSourceRepository",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "FulcioCAWithRekor",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleSampleGitImportSourceService": {
- "description": "ConsoleSampleGitImportSourceService let the samples author define defaults for the Service created for this sample.",
+ "io.openshift.config.v1alpha1.GatherConfig": {
+ "description": "gatherConfig provides data gathering configuration options.",
"type": "object",
"properties": {
- "targetPort": {
- "description": "targetPort is the port that the service listens on for HTTP requests. This port will be used for Service created for this sample. Port must be in the range 1 to 65535. Default port is 8080.",
- "type": "integer",
- "format": "int32"
+ "dataPolicy": {
+ "description": "dataPolicy allows user to enable additional global obfuscation of the IP addresses and base domain in the Insights archive data. Valid values are \"None\" and \"ObfuscateNetworking\". When set to None the data is not obfuscated. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is None.",
+ "type": "string"
+ },
+ "disabledGatherers": {
+ "description": "disabledGatherers is a list of gatherers to be excluded from the gathering. All the gatherers can be disabled by providing \"all\" value. If all the gatherers are disabled, the Insights operator does not gather any data. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\" An example of disabling gatherers looks like this: `disabledGatherers: [\"clusterconfig/machine_configs\", \"workloads/workload_info\"]`",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleSampleGitImportSourceService",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "GatherConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleSampleList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1alpha1.ImagePolicy": {
+ "description": "ImagePolicy holds namespace-wide configuration for image signature verification\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec holds user settable values for configuration",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.ImagePolicySpec"
+ },
+ "status": {
+ "description": "status contains the observed state of the resource.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.ImagePolicyStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ImagePolicy",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1alpha1.ImagePolicyList": {
+ "description": "ImagePolicyList is a list of ImagePolicy resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
"metadata",
@@ -80590,7 +81530,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleSample"
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.ImagePolicy"
}
},
"kind": {
@@ -80605,118 +81545,71 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleSampleList",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ImagePolicyList",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleSampleSource": {
- "description": "ConsoleSampleSource is the actual sample definition and can hold different sample types. Unsupported sample types will be ignored in the web console.",
+ "io.openshift.config.v1alpha1.ImagePolicySpec": {
+ "description": "ImagePolicySpec is the specification of the ImagePolicy CRD.",
"type": "object",
"required": [
- "type"
+ "scopes",
+ "policy"
],
"properties": {
- "containerImport": {
- "description": "containerImport allows the user import a container image.",
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleContainerImportSource"
- },
- "gitImport": {
- "description": "gitImport allows the user to import code from a git repository.",
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleGitImportSource"
+ "policy": {
+ "description": "policy contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.Policy"
},
- "type": {
- "description": "type of the sample, currently supported: \"GitImport\";\"ContainerImport\"",
- "type": "string",
- "default": ""
+ "scopes": {
+ "description": "scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "set"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleSampleSource",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ImagePolicySpec",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "containerImport": "ContainerImport",
- "gitImport": "GitImport"
- }
- }
- ]
+ }
},
- "io.openshift.console.v1.ConsoleSampleSpec": {
- "description": "ConsoleSampleSpec is the desired sample for the web console. Samples will appear with their title, descriptions and a badge in a samples catalog.",
+ "io.openshift.config.v1alpha1.ImagePolicyStatus": {
"type": "object",
- "required": [
- "title",
- "abstract",
- "description",
- "source"
- ],
"properties": {
- "abstract": {
- "description": "abstract is a short introduction to the sample.\n\nIt is required and must be no more than 100 characters in length.\n\nThe abstract is shown on the sample card tile below the title and provider and is limited to three lines of content.",
- "type": "string",
- "default": ""
- },
- "description": {
- "description": "description is a long form explanation of the sample.\n\nIt is required and can have a maximum length of **4096** characters.\n\nIt is a README.md-like content for additional information, links, pre-conditions, and other instructions. It will be rendered as Markdown so that it can contain line breaks, links, and other simple formatting.",
- "type": "string",
- "default": ""
- },
- "icon": {
- "description": "icon is an optional base64 encoded image and shown beside the sample title.\n\nThe format must follow the data: URL format and can have a maximum size of **10 KB**.\n\n data:[\u003cmediatype\u003e][;base64],\u003cbase64 encoded image\u003e\n\nFor example:\n\n data:image;base64, plus the base64 encoded image.\n\nVector images can also be used. SVG icons must start with:\n\n data:image/svg+xml;base64, plus the base64 encoded SVG image.\n\nAll sample catalog icons will be shown on a white background (also when the dark theme is used). The web console ensures that different aspect ratios work correctly. Currently, the surface of the icon is at most 40x100px.\n\nFor more information on the data URL format, please visit https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URLs.",
- "type": "string",
- "default": ""
- },
- "provider": {
- "description": "provider is an optional label to honor who provides the sample.\n\nIt is optional and must be no more than 50 characters in length.\n\nA provider can be a company like \"Red Hat\" or an organization like \"CNCF\" or \"Knative\".\n\nCurrently, the provider is only shown on the sample card tile below the title with the prefix \"Provided by \"",
- "type": "string",
- "default": ""
- },
- "source": {
- "description": "source defines where to deploy the sample service from. The sample may be sourced from an external git repository or container image.",
- "default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleSource"
- },
- "tags": {
- "description": "tags are optional string values that can be used to find samples in the samples catalog.\n\nExamples of common tags may be \"Java\", \"Quarkus\", etc.\n\nThey will be displayed on the samples details page.",
+ "conditions": {
+ "description": "conditions provide details on the status of this API Resource.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
},
- "x-kubernetes-list-type": "set"
- },
- "title": {
- "description": "title is the display name of the sample.\n\nIt is required and must be no more than 50 characters in length.",
- "type": "string",
- "default": ""
- },
- "type": {
- "description": "type is an optional label to group multiple samples.\n\nIt is optional and must be no more than 20 characters in length.\n\nRecommendation is a singular term like \"Builder Image\", \"Devfile\" or \"Serverless Function\".\n\nCurrently, the type is shown a badge on the sample card tile in the top right corner.",
- "type": "string",
- "default": ""
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleSampleSpec",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ImagePolicyStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleYAMLSample": {
- "description": "ConsoleYAMLSample is an extension for customizing OpenShift web console YAML samples.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1alpha1.InsightsDataGather": {
+ "description": "InsightsDataGather provides data gather configuration options for the the Insights Operator.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "metadata",
"spec"
],
"properties": {
@@ -80734,20 +81627,26 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
+ "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleYAMLSampleSpec"
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.InsightsDataGatherSpec"
+ },
+ "status": {
+ "description": "status holds observed values from the cluster. They may not be overridden.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.InsightsDataGatherStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleYAMLSample",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "InsightsDataGather",
"Scope": "Clustered"
}
},
- "io.openshift.console.v1.ConsoleYAMLSampleList": {
- "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.config.v1alpha1.InsightsDataGatherList": {
+ "description": "InsightsDataGatherList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
"metadata",
@@ -80762,7 +81661,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.console.v1.ConsoleYAMLSample"
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.InsightsDataGather"
}
},
"kind": {
@@ -80777,161 +81676,380 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleYAMLSampleList",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "InsightsDataGatherList",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.ConsoleYAMLSampleSpec": {
- "description": "ConsoleYAMLSampleSpec is the desired YAML sample configuration. Samples will appear with their descriptions in a samples sidebar when creating a resources in the web console.",
+ "io.openshift.config.v1alpha1.InsightsDataGatherSpec": {
+ "type": "object",
+ "properties": {
+ "gatherConfig": {
+ "description": "gatherConfig spec attribute includes all the configuration options related to gathering of the Insights data and its uploading to the ingress.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.GatherConfig"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "InsightsDataGatherSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1alpha1.InsightsDataGatherStatus": {
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "InsightsDataGatherStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1alpha1.Policy": {
+ "description": "Policy defines the verification policy for the items in the scopes list.",
"type": "object",
"required": [
- "targetResource",
- "title",
- "description",
- "yaml"
+ "rootOfTrust"
],
"properties": {
- "description": {
- "description": "description of the YAML sample.",
+ "rootOfTrust": {
+ "description": "rootOfTrust specifies the root of trust for the policy.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyRootOfTrust"
+ },
+ "signedIdentity": {
+ "description": "signedIdentity specifies what image identity the signature claims about the image. The required matchPolicy field specifies the approach used in the verification process to verify the identity in the signature and the actual image identity, the default matchPolicy is \"MatchRepoDigestOrExact\".",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyIdentity"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "Policy",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1alpha1.PolicyFulcioSubject": {
+ "description": "PolicyFulcioSubject defines the OIDC issuer and the email of the Fulcio authentication configuration.",
+ "type": "object",
+ "required": [
+ "oidcIssuer",
+ "signedEmail"
+ ],
+ "properties": {
+ "oidcIssuer": {
+ "description": "oidcIssuer contains the expected OIDC issuer. It will be verified that the Fulcio-issued certificate contains a (Fulcio-defined) certificate extension pointing at this OIDC issuer URL. When Fulcio issues certificates, it includes a value based on an URL inside the client-provided ID token. Example: \"https://expected.OIDC.issuer/\"",
"type": "string",
"default": ""
},
- "snippet": {
- "description": "snippet indicates that the YAML sample is not the full YAML resource definition, but a fragment that can be inserted into the existing YAML document at the user's cursor.",
- "type": "boolean",
- "default": false
- },
- "targetResource": {
- "description": "targetResource contains apiVersion and kind of the resource YAML sample is representating.",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.TypeMeta"
+ "signedEmail": {
+ "description": "signedEmail holds the email address the the Fulcio certificate is issued for. Example: \"expected-signing-user@example.com\"",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PolicyFulcioSubject",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1alpha1.PolicyIdentity": {
+ "description": "PolicyIdentity defines image identity the signature claims about the image. When omitted, the default matchPolicy is \"MatchRepoDigestOrExact\".",
+ "type": "object",
+ "required": [
+ "matchPolicy"
+ ],
+ "properties": {
+ "exactRepository": {
+ "description": "exactRepository is required if matchPolicy is set to \"ExactRepository\".",
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyMatchExactRepository"
},
- "title": {
- "description": "title of the YAML sample.",
+ "matchPolicy": {
+ "description": "matchPolicy sets the type of matching to be used. Valid values are \"MatchRepoDigestOrExact\", \"MatchRepository\", \"ExactRepository\", \"RemapIdentity\". When omitted, the default value is \"MatchRepoDigestOrExact\". If set matchPolicy to ExactRepository, then the exactRepository must be specified. If set matchPolicy to RemapIdentity, then the remapIdentity must be specified. \"MatchRepoDigestOrExact\" means that the identity in the signature must be in the same repository as the image identity if the image identity is referenced by a digest. Otherwise, the identity in the signature must be the same as the image identity. \"MatchRepository\" means that the identity in the signature must be in the same repository as the image identity. \"ExactRepository\" means that the identity in the signature must be in the same repository as a specific identity specified by \"repository\". \"RemapIdentity\" means that the signature must be in the same as the remapped image identity. Remapped image identity is obtained by replacing the \"prefix\" with the specified “signedPrefix” if the the image identity matches the specified remapPrefix.",
"type": "string",
"default": ""
},
- "yaml": {
- "description": "yaml is the YAML sample to display.",
+ "remapIdentity": {
+ "description": "remapIdentity is required if matchPolicy is set to \"RemapIdentity\".",
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyMatchRemapIdentity"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PolicyIdentity",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "matchPolicy",
+ "fields-to-discriminateBy": {
+ "exactRepository": "PolicyMatchExactRepository",
+ "remapIdentity": "PolicyMatchRemapIdentity"
+ }
+ }
+ ]
+ },
+ "io.openshift.config.v1alpha1.PolicyMatchExactRepository": {
+ "type": "object",
+ "required": [
+ "repository"
+ ],
+ "properties": {
+ "repository": {
+ "description": "repository is the reference of the image identity to be matched. The value should be a repository name (by omitting the tag or digest) in a registry implementing the \"Docker Registry HTTP API V2\". For example, docker.io/library/busybox",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleYAMLSampleSpec",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PolicyMatchExactRepository",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.Link": {
- "description": "Represents a standard link that could be generated in HTML",
+ "io.openshift.config.v1alpha1.PolicyMatchRemapIdentity": {
"type": "object",
"required": [
- "text",
- "href"
+ "prefix",
+ "signedPrefix"
],
"properties": {
- "href": {
- "description": "href is the absolute secure URL for the link (must use https)",
+ "prefix": {
+ "description": "prefix is the prefix of the image identity to be matched. If the image identity matches the specified prefix, that prefix is replaced by the specified “signedPrefix” (otherwise it is used as unchanged and no remapping takes place). This useful when verifying signatures for a mirror of some other repository namespace that preserves the vendor’s repository structure. The prefix and signedPrefix values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.",
"type": "string",
"default": ""
},
- "text": {
- "description": "text is the display text for the link",
+ "signedPrefix": {
+ "description": "signedPrefix is the prefix of the image identity to be matched in the signature. The format is the same as \"prefix\". The values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "Link",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PolicyMatchRemapIdentity",
"Scope": "Namespaced"
}
},
- "io.openshift.console.v1.NamespaceDashboardSpec": {
- "description": "NamespaceDashboardSpec is a specification of namespaces in which the dashboard link should appear. If both namespaces and namespaceSelector are specified, the link will appear in namespaces that match either",
+ "io.openshift.config.v1alpha1.PolicyRootOfTrust": {
+ "description": "PolicyRootOfTrust defines the root of trust based on the selected policyType.",
"type": "object",
+ "required": [
+ "policyType"
+ ],
"properties": {
- "namespaceSelector": {
- "description": "namespaceSelector is used to select the Namespaces that should contain dashboard link by label. If the namespace labels match, dashboard link will be shown for the namespaces.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ "fulcioCAWithRekor": {
+ "description": "fulcioCAWithRekor defines the root of trust based on the Fulcio certificate and the Rekor public key. For more information about Fulcio and Rekor, please refer to the document at: https://github.com/sigstore/fulcio and https://github.com/sigstore/rekor",
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.FulcioCAWithRekor"
},
- "namespaces": {
- "description": "namespaces is an array of namespace names in which the dashboard link should appear.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
+ "policyType": {
+ "description": "policyType serves as the union's discriminator. Users are required to assign a value to this field, choosing one of the policy types that define the root of trust. \"PublicKey\" indicates that the policy relies on a sigstore publicKey and may optionally use a Rekor verification. \"FulcioCAWithRekor\" indicates that the policy is based on the Fulcio certification and incorporates a Rekor verification.",
+ "type": "string",
+ "default": ""
+ },
+ "publicKey": {
+ "description": "publicKey defines the root of trust based on a sigstore public key.",
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.PublicKey"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PolicyRootOfTrust",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "policyType",
+ "fields-to-discriminateBy": {
+ "fulcioCAWithRekor": "FulcioCAWithRekor",
+ "publicKey": "PublicKey"
}
}
+ ]
+ },
+ "io.openshift.config.v1alpha1.PublicKey": {
+ "description": "PublicKey defines the root of trust based on a sigstore public key.",
+ "type": "object",
+ "required": [
+ "keyData"
+ ],
+ "properties": {
+ "keyData": {
+ "description": "keyData contains inline base64-encoded data for the PEM format public key. KeyData must be at most 8192 characters.",
+ "type": "string",
+ "format": "byte"
+ },
+ "rekorKeyData": {
+ "description": "rekorKeyData contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.",
+ "type": "string",
+ "format": "byte"
+ }
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "console.openshift.io",
- "Version": "v1",
- "Kind": "NamespaceDashboardSpec",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PublicKey",
"Scope": "Namespaced"
}
},
- "io.openshift.example.v1.CELUnion": {
- "description": "CELUnion demonstrates how to use a discriminated union and how to validate it using CEL.",
+ "io.openshift.config.v1alpha1.RetentionNumberConfig": {
+ "description": "RetentionNumberConfig specifies the configuration of the retention policy on the number of backups",
"type": "object",
+ "required": [
+ "maxNumberOfBackups"
+ ],
"properties": {
- "optionalMember": {
- "description": "optionalMember is a union member that is optional.",
- "type": "string"
+ "maxNumberOfBackups": {
+ "description": "MaxNumberOfBackups defines the maximum number of backups to retain. If the existing number of backups saved is equal to MaxNumberOfBackups then the oldest backup will be removed before a new backup is initiated.",
+ "type": "integer",
+ "format": "int32"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "RetentionNumberConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.config.v1alpha1.RetentionPolicy": {
+ "description": "RetentionPolicy defines the retention policy for retaining and deleting existing backups. This struct is a discriminated union that allows users to select the type of retention policy from the supported types.",
+ "type": "object",
+ "required": [
+ "retentionType"
+ ],
+ "properties": {
+ "retentionNumber": {
+ "description": "RetentionNumber configures the retention policy based on the number of backups",
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.RetentionNumberConfig"
},
- "requiredMember": {
- "description": "requiredMember is a union member that is required.",
- "type": "string"
+ "retentionSize": {
+ "description": "RetentionSize configures the retention policy based on the size of backups",
+ "$ref": "#/definitions/io.openshift.config.v1alpha1.RetentionSizeConfig"
},
- "type": {
- "description": "type determines which of the union members should be populated.",
- "type": "string"
+ "retentionType": {
+ "description": "RetentionType sets the type of retention policy. Currently, the only valid policies are retention by number of backups (RetentionNumber), by the size of backups (RetentionSize). More policies or types may be added in the future. Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. The current default is RetentionNumber with 15 backups kept.\n\nPossible enum values:\n - `\"RetentionNumber\"` sets the retention policy based on the number of backup files saved\n - `\"RetentionSize\"` sets the retention policy based on the total size of the backup files saved",
+ "type": "string",
+ "default": "",
+ "enum": [
+ "RetentionNumber",
+ "RetentionSize"
+ ]
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "example.openshift.io",
- "Version": "v1",
- "Kind": "CELUnion",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "RetentionPolicy",
"Scope": "Namespaced"
},
"x-kubernetes-unions": [
{
- "discriminator": "type",
+ "discriminator": "retentionType",
"fields-to-discriminateBy": {
- "optionalMember": "OptionalMember",
- "requiredMember": "RequiredMember"
+ "retentionNumber": "RetentionNumber",
+ "retentionSize": "RetentionSize"
}
}
]
},
- "io.openshift.example.v1.EvolvingUnion": {
+ "io.openshift.config.v1alpha1.RetentionSizeConfig": {
+ "description": "RetentionSizeConfig specifies the configuration of the retention policy on the total size of backups",
"type": "object",
+ "required": [
+ "maxSizeOfBackupsGb"
+ ],
"properties": {
- "type": {
- "description": "type is the discriminator. It has different values for Default and for TechPreviewNoUpgrade",
+ "maxSizeOfBackupsGb": {
+ "description": "MaxSizeOfBackupsGb defines the total size in GB of backups to retain. If the current total size backups exceeds MaxSizeOfBackupsGb then the oldest backup will be removed before a new backup is initiated.",
+ "type": "integer",
+ "format": "int32"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "config.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "RetentionSizeConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.console.v1.ApplicationMenuSpec": {
+ "description": "ApplicationMenuSpec is the specification of the desired section and icon used for the link in the application menu.",
+ "type": "object",
+ "required": [
+ "section"
+ ],
+ "properties": {
+ "imageURL": {
+ "description": "imageUrl is the URL for the icon used in front of the link in the application menu. The URL must be an HTTPS URL or a Data URI. The image should be square and will be shown at 24x24 pixels.",
"type": "string"
+ },
+ "section": {
+ "description": "section is the section of the application menu in which the link should appear. This can be any text that will appear as a subheading in the application menu dropdown. A new section will be created if the text does not match text of an existing section.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "example.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "EvolvingUnion",
+ "Kind": "ApplicationMenuSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.example.v1.StableConfigType": {
- "description": "StableConfigType is a stable config type that may include TechPreviewNoUpgrade fields.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.console.v1.CLIDownloadLink": {
+ "type": "object",
+ "required": [
+ "href"
+ ],
+ "properties": {
+ "href": {
+ "description": "href is the absolute secure URL for the link (must use https)",
+ "type": "string",
+ "default": ""
+ },
+ "text": {
+ "description": "text is the display text for the link",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "CLIDownloadLink",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.console.v1.ConsoleCLIDownload": {
+ "description": "ConsoleCLIDownload is an extension for configuring openshift web console command line interface (CLI) downloads.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -80947,28 +82065,23 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec is the specification of the desired behavior of the StableConfigType.",
- "default": {},
- "$ref": "#/definitions/io.openshift.example.v1.StableConfigTypeSpec"
- },
- "status": {
- "description": "status is the most recently observed status of the StableConfigType.",
"default": {},
- "$ref": "#/definitions/io.openshift.example.v1.StableConfigTypeStatus"
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleCLIDownloadSpec"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "example.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "StableConfigType",
+ "Kind": "ConsoleCLIDownload",
"Scope": "Clustered"
}
},
- "io.openshift.example.v1.StableConfigTypeList": {
- "description": "StableConfigTypeList contains a list of StableConfigTypes.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.console.v1.ConsoleCLIDownloadList": {
+ "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -80980,7 +82093,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.example.v1.StableConfigType"
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleCLIDownload"
}
},
"kind": {
@@ -80995,115 +82108,54 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "example.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "StableConfigTypeList",
+ "Kind": "ConsoleCLIDownloadList",
"Scope": "Namespaced"
}
},
- "io.openshift.example.v1.StableConfigTypeSpec": {
- "description": "StableConfigTypeSpec is the desired state",
+ "io.openshift.console.v1.ConsoleCLIDownloadSpec": {
+ "description": "ConsoleCLIDownloadSpec is the desired cli download configuration.",
"type": "object",
"required": [
- "immutableField"
+ "displayName",
+ "description",
+ "links"
],
"properties": {
- "celUnion": {
- "description": "celUnion demonstrates how to validate a discrminated union using CEL",
- "default": {},
- "$ref": "#/definitions/io.openshift.example.v1.CELUnion"
- },
- "coolNewField": {
- "description": "coolNewField is a field that is for tech preview only. On normal clusters this shouldn't be present",
+ "description": {
+ "description": "description is the description of the CLI download (can include markdown).",
"type": "string",
"default": ""
},
- "evolvingCollection": {
- "description": "evolvingCollection demonstrates how to have a collection where the maximum number of items varies on cluster type. For default clusters, this will be \"1\" but on TechPreview clusters, this value will be \"3\".",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "evolvingUnion": {
- "description": "evolvingUnion demonstrates how to phase in new values into discriminated union",
- "default": {},
- "$ref": "#/definitions/io.openshift.example.v1.EvolvingUnion"
- },
- "immutableField": {
- "description": "immutableField is a field that is immutable once the object has been created. It is required at all times.",
+ "displayName": {
+ "description": "displayName is the display name of the CLI download.",
"type": "string",
"default": ""
},
- "nonZeroDefault": {
- "description": "nonZeroDefault is a demonstration of creating an integer field that has a non zero default. It required two default tags (one for CRD generation, one for client generation) and must have `omitempty` and be optional. A minimum value is added to demonstrate that a zero value would not be accepted.",
- "type": "integer",
- "format": "int32",
- "default": 8
- },
- "optionalImmutableField": {
- "description": "optionalImmutableField is a field that is immutable once set. It is optional but may not be changed once set.",
- "type": "string",
- "default": ""
- },
- "set": {
- "description": "set demonstrates how to define and validate set of strings",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "stableField": {
- "description": "stableField is a field that is present on default clusters and on tech preview clusters\n\nIf empty, the platform will choose a good default, which may change over time without notice.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "example.openshift.io",
- "Version": "v1",
- "Kind": "StableConfigTypeSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.example.v1.StableConfigTypeStatus": {
- "description": "StableConfigTypeStatus defines the observed status of the StableConfigType.",
- "type": "object",
- "properties": {
- "conditions": {
- "description": "Represents the observations of a foo's current state. Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"",
+ "links": {
+ "description": "links is a list of objects that provide CLI download link details.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "immutableField": {
- "description": "immutableField is a field that is immutable once the object has been created. It is required at all times.",
- "type": "string"
+ "$ref": "#/definitions/io.openshift.console.v1.CLIDownloadLink"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "example.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "StableConfigTypeStatus",
+ "Kind": "ConsoleCLIDownloadSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.example.v1alpha1.NotStableConfigType": {
- "description": "NotStableConfigType is a stable config type that is TechPreviewNoUpgrade only.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.console.v1.ConsoleExternalLogLink": {
+ "description": "ConsoleExternalLogLink is an extension for customizing OpenShift web console log links.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -81119,28 +82171,23 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec is the specification of the desired behavior of the NotStableConfigType.",
- "default": {},
- "$ref": "#/definitions/io.openshift.example.v1alpha1.NotStableConfigTypeSpec"
- },
- "status": {
- "description": "status is the most recently observed status of the NotStableConfigType.",
"default": {},
- "$ref": "#/definitions/io.openshift.example.v1alpha1.NotStableConfigTypeStatus"
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleExternalLogLinkSpec"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "example.openshift.io",
- "Version": "v1alpha1",
- "Kind": "NotStableConfigType",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleExternalLogLink",
"Scope": "Clustered"
}
},
- "io.openshift.example.v1alpha1.NotStableConfigTypeList": {
- "description": "NotStableConfigTypeList contains a list of NotStableConfigTypes.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.console.v1.ConsoleExternalLogLinkList": {
+ "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -81152,7 +82199,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.example.v1alpha1.NotStableConfigType"
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleExternalLogLink"
}
},
"kind": {
@@ -81167,127 +82214,156 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "example.openshift.io",
- "Version": "v1alpha1",
- "Kind": "NotStableConfigTypeList",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleExternalLogLinkList",
"Scope": "Namespaced"
}
},
- "io.openshift.example.v1alpha1.NotStableConfigTypeSpec": {
- "description": "NotStableConfigTypeSpec is the desired state",
+ "io.openshift.console.v1.ConsoleExternalLogLinkSpec": {
+ "description": "ConsoleExternalLogLinkSpec is the desired log link configuration. The log link will appear on the logs tab of the pod details page.",
"type": "object",
"required": [
- "newField"
+ "text",
+ "hrefTemplate"
],
"properties": {
- "newField": {
- "description": "newField is a field that is tech preview, but because the entire type is gated, there is no marker on the field.",
+ "hrefTemplate": {
+ "description": "hrefTemplate is an absolute secure URL (must use https) for the log link including variables to be replaced. Variables are specified in the URL with the format ${variableName}, for instance, ${containerName} and will be replaced with the corresponding values from the resource. Resource is a pod. Supported variables are: - ${resourceName} - name of the resource which containes the logs - ${resourceUID} - UID of the resource which contains the logs\n - e.g. `11111111-2222-3333-4444-555555555555`\n- ${containerName} - name of the resource's container that contains the logs - ${resourceNamespace} - namespace of the resource that contains the logs - ${resourceNamespaceUID} - namespace UID of the resource that contains the logs - ${podLabels} - JSON representation of labels matching the pod with the logs\n - e.g. `{\"key1\":\"value1\",\"key2\":\"value2\"}`\n\ne.g., https://example.com/logs?resourceName=${resourceName}\u0026containerName=${containerName}\u0026resourceNamespace=${resourceNamespace}\u0026podLabels=${podLabels}",
+ "type": "string",
+ "default": ""
+ },
+ "namespaceFilter": {
+ "description": "namespaceFilter is a regular expression used to restrict a log link to a matching set of namespaces (e.g., `^openshift-`). The string is converted into a regular expression using the JavaScript RegExp constructor. If not specified, links will be displayed for all the namespaces.",
+ "type": "string"
+ },
+ "text": {
+ "description": "text is the display text for the link",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "example.openshift.io",
- "Version": "v1alpha1",
- "Kind": "NotStableConfigTypeSpec",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleExternalLogLinkSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.example.v1alpha1.NotStableConfigTypeStatus": {
- "description": "NotStableConfigTypeStatus defines the observed status of the NotStableConfigType.",
+ "io.openshift.console.v1.ConsoleLink": {
+ "description": "ConsoleLink is an extension for customizing OpenShift web console links.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
- "conditions": {
- "description": "Represents the observations of a foo's current state. Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleLinkSpec"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "example.openshift.io",
- "Version": "v1alpha1",
- "Kind": "NotStableConfigTypeStatus",
- "Scope": "Namespaced"
+ "Type": "object",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleLink",
+ "Scope": "Clustered"
}
},
- "io.openshift.helm.v1beta1.ConnectionConfig": {
+ "io.openshift.console.v1.ConsoleLinkList": {
+ "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "url"
+ "metadata",
+ "items"
],
"properties": {
- "ca": {
- "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca-bundle.crt\" is used to locate the data. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "tlsClientConfig": {
- "description": "tlsClientConfig is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate and private key to present when connecting to the server. The key \"tls.crt\" is used to locate the client certificate. The key \"tls.key\" is used to locate the private key. The namespace for this secret is openshift-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleLink"
+ }
},
- "url": {
- "description": "Chart repository URL",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "helm.openshift.io",
- "Version": "v1beta1",
- "Kind": "ConnectionConfig",
+ "Type": "list",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleLinkList",
"Scope": "Namespaced"
}
},
- "io.openshift.helm.v1beta1.ConnectionConfigNamespaceScoped": {
+ "io.openshift.console.v1.ConsoleLinkSpec": {
+ "description": "ConsoleLinkSpec is the desired console link configuration.",
"type": "object",
"required": [
- "url"
+ "text",
+ "href",
+ "location"
],
"properties": {
- "basicAuthConfig": {
- "description": "basicAuthConfig is an optional reference to a secret by name that contains the basic authentication credentials to present when connecting to the server. The key \"username\" is used locate the username. The key \"password\" is used to locate the password. The namespace for this secret must be same as the namespace where the project helm chart repository is getting instantiated.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ "applicationMenu": {
+ "description": "applicationMenu holds information about section and icon used for the link in the application menu, and it is applicable only when location is set to ApplicationMenu.",
+ "$ref": "#/definitions/io.openshift.console.v1.ApplicationMenuSpec"
},
- "ca": {
- "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca-bundle.crt\" is used to locate the data. If empty, the default system roots are used. The namespace for this configmap must be same as the namespace where the project helm chart repository is getting instantiated.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ "href": {
+ "description": "href is the absolute secure URL for the link (must use https)",
+ "type": "string",
+ "default": ""
},
- "tlsClientConfig": {
- "description": "tlsClientConfig is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate and private key to present when connecting to the server. The key \"tls.crt\" is used to locate the client certificate. The key \"tls.key\" is used to locate the private key. The namespace for this secret must be same as the namespace where the project helm chart repository is getting instantiated.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ "location": {
+ "description": "location determines which location in the console the link will be appended to (ApplicationMenu, HelpMenu, UserMenu, NamespaceDashboard).",
+ "type": "string",
+ "default": ""
},
- "url": {
- "description": "Chart repository URL",
+ "namespaceDashboard": {
+ "description": "namespaceDashboard holds information about namespaces in which the dashboard link should appear, and it is applicable only when location is set to NamespaceDashboard. If not specified, the link will appear in all namespaces.",
+ "$ref": "#/definitions/io.openshift.console.v1.NamespaceDashboardSpec"
+ },
+ "text": {
+ "description": "text is the display text for the link",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "helm.openshift.io",
- "Version": "v1beta1",
- "Kind": "ConnectionConfigNamespaceScoped",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleLinkSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.helm.v1beta1.HelmChartRepository": {
- "description": "HelmChartRepository holds cluster-wide configuration for proxied Helm chart repository\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.console.v1.ConsoleNotification": {
+ "description": "ConsoleNotification is the extension for configuring openshift web console notifications.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"spec"
@@ -81307,25 +82383,19 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec holds user settable values for configuration",
- "default": {},
- "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepositorySpec"
- },
- "status": {
- "description": "Observed status of the repository within the cluster..",
"default": {},
- "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepositoryStatus"
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleNotificationSpec"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "helm.openshift.io",
- "Version": "v1beta1",
- "Kind": "HelmChartRepository",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleNotification",
"Scope": "Clustered"
}
},
- "io.openshift.helm.v1beta1.HelmChartRepositoryList": {
+ "io.openshift.console.v1.ConsoleNotificationList": {
"description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
@@ -81341,7 +82411,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepository"
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleNotification"
}
},
"kind": {
@@ -81356,69 +82426,54 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "helm.openshift.io",
- "Version": "v1beta1",
- "Kind": "HelmChartRepositoryList",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleNotificationList",
"Scope": "Namespaced"
}
},
- "io.openshift.helm.v1beta1.HelmChartRepositorySpec": {
- "description": "Helm chart repository exposed within the cluster",
+ "io.openshift.console.v1.ConsoleNotificationSpec": {
+ "description": "ConsoleNotificationSpec is the desired console notification configuration.",
"type": "object",
"required": [
- "connectionConfig"
+ "text"
],
"properties": {
- "connectionConfig": {
- "description": "Required configuration for connecting to the chart repo",
- "default": {},
- "$ref": "#/definitions/io.openshift.helm.v1beta1.ConnectionConfig"
+ "backgroundColor": {
+ "description": "backgroundColor is the color of the background for the notification as CSS data type color.",
+ "type": "string"
},
- "description": {
- "description": "Optional human readable repository description, it can be used by UI for displaying purposes",
+ "color": {
+ "description": "color is the color of the text for the notification as CSS data type color.",
"type": "string"
},
- "disabled": {
- "description": "If set to true, disable the repo usage in the cluster/namespace",
- "type": "boolean"
+ "link": {
+ "description": "link is an object that holds notification link details.",
+ "$ref": "#/definitions/io.openshift.console.v1.Link"
},
- "name": {
- "description": "Optional associated human readable repository name, it can be used by UI for displaying purposes",
+ "location": {
+ "description": "location is the location of the notification in the console. Valid values are: \"BannerTop\", \"BannerBottom\", \"BannerTopBottom\".",
"type": "string"
+ },
+ "text": {
+ "description": "text is the visible text of the notification.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "helm.openshift.io",
- "Version": "v1beta1",
- "Kind": "HelmChartRepositorySpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.helm.v1beta1.HelmChartRepositoryStatus": {
- "type": "object",
- "properties": {
- "conditions": {
- "description": "conditions is a list of conditions and their statuses",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- }
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "helm.openshift.io",
- "Version": "v1beta1",
- "Kind": "HelmChartRepositoryStatus",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleNotificationSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.helm.v1beta1.ProjectHelmChartRepository": {
- "description": "ProjectHelmChartRepository holds namespace-wide configuration for proxied Helm chart repository\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.console.v1.ConsolePlugin": {
+ "description": "ConsolePlugin is an extension for customizing OpenShift web console by dynamically loading code from another service running on the cluster.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"spec"
],
"properties": {
@@ -81436,26 +82491,74 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.helm.v1beta1.ProjectHelmChartRepositorySpec"
- },
- "status": {
- "description": "Observed status of the repository within the namespace..",
- "default": {},
- "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepositoryStatus"
+ "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginSpec"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "helm.openshift.io",
- "Version": "v1beta1",
- "Kind": "ProjectHelmChartRepository",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsolePlugin",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.console.v1.ConsolePluginBackend": {
+ "description": "ConsolePluginBackend holds information about the endpoint which serves the console's plugin",
+ "type": "object",
+ "required": [
+ "type"
+ ],
+ "properties": {
+ "service": {
+ "description": "service is a Kubernetes Service that exposes the plugin using a deployment with an HTTP server. The Service must use HTTPS and Service serving certificate. The console backend will proxy the plugins assets from the Service using the service CA bundle.",
+ "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginService"
+ },
+ "type": {
+ "description": "type is the backend type which servers the console's plugin. Currently only \"Service\" is supported.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsolePluginBackend",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "service": "Service"
+ }
+ }
+ ]
+ },
+ "io.openshift.console.v1.ConsolePluginI18n": {
+ "description": "ConsolePluginI18n holds information on localization resources that are served by the dynamic plugin.",
+ "type": "object",
+ "required": [
+ "loadType"
+ ],
+ "properties": {
+ "loadType": {
+ "description": "loadType indicates how the plugin's localization resource should be loaded. Valid values are Preload, Lazy and the empty string. When set to Preload, all localization resources are fetched when the plugin is loaded. When set to Lazy, localization resources are lazily loaded as and when they are required by the console. When omitted or set to the empty string, the behaviour is equivalent to Lazy type.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsolePluginI18n",
"Scope": "Namespaced"
}
},
- "io.openshift.helm.v1beta1.ProjectHelmChartRepositoryList": {
- "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.console.v1.ConsolePluginList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -81470,7 +82573,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.helm.v1beta1.ProjectHelmChartRepository"
+ "$ref": "#/definitions/io.openshift.console.v1.ConsolePlugin"
}
},
"kind": {
@@ -81485,528 +82588,740 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "helm.openshift.io",
- "Version": "v1beta1",
- "Kind": "ProjectHelmChartRepositoryList",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsolePluginList",
"Scope": "Namespaced"
}
},
- "io.openshift.helm.v1beta1.ProjectHelmChartRepositorySpec": {
- "description": "Project Helm chart repository exposed within a namespace",
+ "io.openshift.console.v1.ConsolePluginProxy": {
+ "description": "ConsolePluginProxy holds information on various service types to which console's backend will proxy the plugin's requests.",
"type": "object",
"required": [
- "connectionConfig"
+ "endpoint",
+ "alias"
],
"properties": {
- "connectionConfig": {
- "description": "Required configuration for connecting to the chart repo",
- "default": {},
- "$ref": "#/definitions/io.openshift.helm.v1beta1.ConnectionConfigNamespaceScoped"
+ "alias": {
+ "description": "alias is a proxy name that identifies the plugin's proxy. An alias name should be unique per plugin. The console backend exposes following proxy endpoint:\n\n/api/proxy/plugin/\u003cplugin-name\u003e/\u003cproxy-alias\u003e/\u003crequest-path\u003e?\u003coptional-query-parameters\u003e\n\nRequest example path:\n\n/api/proxy/plugin/acm/search/pods?namespace=openshift-apiserver",
+ "type": "string",
+ "default": ""
},
- "description": {
- "description": "Optional human readable repository description, it can be used by UI for displaying purposes",
+ "authorization": {
+ "description": "authorization provides information about authorization type, which the proxied request should contain",
"type": "string"
},
- "disabled": {
- "description": "If set to true, disable the repo usage in the namespace",
- "type": "boolean"
- },
- "name": {
- "description": "Optional associated human readable repository name, it can be used by UI for displaying purposes",
+ "caCertificate": {
+ "description": "caCertificate provides the cert authority certificate contents, in case the proxied Service is using custom service CA. By default, the service CA bundle provided by the service-ca operator is used.",
"type": "string"
+ },
+ "endpoint": {
+ "description": "endpoint provides information about endpoint to which the request is proxied to.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginProxyEndpoint"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "helm.openshift.io",
- "Version": "v1beta1",
- "Kind": "ProjectHelmChartRepositorySpec",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsolePluginProxy",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.AWSAssociatedVPC": {
- "description": "AWSAssociatedVPC defines a VPC that should be able to resolve the DNS addresses setup for Private Link.",
+ "io.openshift.console.v1.ConsolePluginProxyEndpoint": {
+ "description": "ConsolePluginProxyEndpoint holds information about the endpoint to which request will be proxied to.",
"type": "object",
"required": [
- "vpcID",
- "region"
+ "type"
],
"properties": {
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS for associating the VPC with the Private HostedZone created for PrivateLink. When not provided, the common credentials for the controller should be used.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "region": {
- "type": "string",
- "default": ""
+ "service": {
+ "description": "service is an in-cluster Service that the plugin will connect to. The Service must use HTTPS. The console backend exposes an endpoint in order to proxy communication between the plugin and the Service. Note: service field is required for now, since currently only \"Service\" type is supported.",
+ "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginProxyServiceConfig"
},
- "vpcID": {
+ "type": {
+ "description": "type is the type of the console plugin's proxy. Currently only \"Service\" is supported.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "AWSAssociatedVPC",
+ "Kind": "ConsolePluginProxyEndpoint",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "service": "Service"
+ }
+ }
+ ]
},
- "io.openshift.hive.v1.AWSClusterDeprovision": {
- "description": "AWSClusterDeprovision contains AWS-specific configuration for a ClusterDeprovision",
+ "io.openshift.console.v1.ConsolePluginProxyServiceConfig": {
+ "description": "ProxyTypeServiceConfig holds information on Service to which console's backend will proxy the plugin's requests.",
"type": "object",
"required": [
- "region"
+ "name",
+ "namespace",
+ "port"
],
"properties": {
- "credentialsAssumeRole": {
- "description": "CredentialsAssumeRole refers to the IAM role that must be assumed to obtain AWS account access for deprovisioning the cluster.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.AssumeRole"
+ "name": {
+ "description": "name of Service that the plugin needs to connect to.",
+ "type": "string",
+ "default": ""
},
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef is the AWS account credentials to use for deprovisioning the cluster",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "hostedZoneRole": {
- "description": "HostedZoneRole is the role to assume when performing operations on a hosted zone owned by another account.",
- "type": "string"
- },
- "region": {
- "description": "Region is the AWS region for this deprovisioning",
+ "namespace": {
+ "description": "namespace of Service that the plugin needs to connect to",
"type": "string",
"default": ""
+ },
+ "port": {
+ "description": "port on which the Service that the plugin needs to connect to is listening on.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "AWSClusterDeprovision",
+ "Kind": "ConsolePluginProxyServiceConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.AWSDNSZoneSpec": {
- "description": "AWSDNSZoneSpec contains AWS-specific DNSZone specifications",
+ "io.openshift.console.v1.ConsolePluginService": {
+ "description": "ConsolePluginService holds information on Service that is serving console dynamic plugin assets.",
"type": "object",
+ "required": [
+ "name",
+ "namespace",
+ "port"
+ ],
"properties": {
- "additionalTags": {
- "description": "AdditionalTags is a set of additional tags to set on the DNS hosted zone. In addition to these tags,the DNS Zone controller will set a hive.openhsift.io/hostedzone tag identifying the HostedZone record that it belongs to.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.AWSResourceTag"
- }
+ "basePath": {
+ "description": "basePath is the path to the plugin's assets. The primary asset it the manifest file called `plugin-manifest.json`, which is a JSON document that contains metadata about the plugin and the extensions.",
+ "type": "string",
+ "default": ""
},
- "credentialsAssumeRole": {
- "description": "CredentialsAssumeRole refers to the IAM role that must be assumed to obtain AWS account access for the DNS CRUD operations.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.AssumeRole"
+ "name": {
+ "description": "name of Service that is serving the plugin assets.",
+ "type": "string",
+ "default": ""
},
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef contains a reference to a secret that contains AWS credentials for CRUD operations",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "namespace": {
+ "description": "namespace of Service that is serving the plugin assets.",
+ "type": "string",
+ "default": ""
},
- "region": {
- "description": "Region is the AWS region to use for route53 operations. This defaults to us-east-1. For AWS China, use cn-northwest-1.",
- "type": "string"
+ "port": {
+ "description": "port on which the Service that is serving the plugin is listening to.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "AWSDNSZoneSpec",
+ "Kind": "ConsolePluginService",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.AWSDNSZoneStatus": {
- "description": "AWSDNSZoneStatus contains status information specific to AWS DNS zones",
+ "io.openshift.console.v1.ConsolePluginSpec": {
+ "description": "ConsolePluginSpec is the desired plugin configuration.",
"type": "object",
+ "required": [
+ "displayName",
+ "backend"
+ ],
"properties": {
- "zoneID": {
- "description": "ZoneID is the ID of the zone in AWS",
- "type": "string"
+ "backend": {
+ "description": "backend holds the configuration of backend which is serving console's plugin .",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginBackend"
+ },
+ "displayName": {
+ "description": "displayName is the display name of the plugin. The dispalyName should be between 1 and 128 characters.",
+ "type": "string",
+ "default": ""
+ },
+ "i18n": {
+ "description": "i18n is the configuration of plugin's localization resources.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginI18n"
+ },
+ "proxy": {
+ "description": "proxy is a list of proxies that describe various service type to which the plugin needs to connect to.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginProxy"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "AWSDNSZoneStatus",
+ "Kind": "ConsolePluginSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.AWSPrivateLinkConfig": {
- "description": "AWSPrivateLinkConfig defines the configuration for the aws-private-link controller.",
+ "io.openshift.console.v1.ConsoleQuickStart": {
+ "description": "ConsoleQuickStart is an extension for guiding user through various workflows in the OpenShift web console.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "credentialsSecretRef"
+ "spec"
],
"properties": {
- "associatedVPCs": {
- "description": "AssociatedVPCs is the list of VPCs that should be able to resolve the DNS addresses setup for Private Link. This allows clients in VPC to resolve the AWS PrivateLink address using AWS's default DNS resolver for Private Route53 Hosted Zones.\n\nThis list should at minimum include the VPC where the current Hive controller is running.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.AWSAssociatedVPC"
- }
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS for creating the resources for AWS PrivateLink.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "dnsRecordType": {
- "description": "DNSRecordType defines what type of DNS record should be created in Private Hosted Zone for the customer cluster's API endpoint (which is the VPC Endpoint's regional DNS name).",
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartSpec"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleQuickStart",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.console.v1.ConsoleQuickStartList": {
+ "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "endpointVPCInventory": {
- "description": "EndpointVPCInventory is a list of VPCs and the corresponding subnets in various AWS regions. The controller uses this list to choose a VPC for creating AWS VPC Endpoints. Since the VPC Endpoints must be in the same region as the ClusterDeployment, we must have VPCs in that region to be able to setup Private Link.",
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.AWSPrivateLinkInventory"
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStart"
}
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
+ "Type": "list",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "AWSPrivateLinkConfig",
+ "Kind": "ConsoleQuickStartList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.AWSPrivateLinkInventory": {
- "description": "AWSPrivateLinkInventory is a VPC and its corresponding subnets in an AWS region. This VPC will be used to create an AWS VPC Endpoint whenever there is a VPC Endpoint Service created for a ClusterDeployment.",
+ "io.openshift.console.v1.ConsoleQuickStartSpec": {
+ "description": "ConsoleQuickStartSpec is the desired quick start configuration.",
"type": "object",
"required": [
- "vpcID",
- "region",
- "subnets"
+ "displayName",
+ "durationMinutes",
+ "description",
+ "introduction",
+ "tasks"
],
"properties": {
- "region": {
- "type": "string",
- "default": ""
- },
- "subnets": {
+ "accessReviewResources": {
+ "description": "accessReviewResources contains a list of resources that the user's access will be reviewed against in order for the user to complete the Quick Start. The Quick Start will be hidden if any of the access reviews fail.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.AWSPrivateLinkSubnet"
+ "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes"
}
},
- "vpcID": {
+ "conclusion": {
+ "description": "conclusion sums up the Quick Start and suggests the possible next steps. (includes markdown)",
+ "type": "string"
+ },
+ "description": {
+ "description": "description is the description of the Quick Start. (includes markdown)",
+ "type": "string",
+ "default": ""
+ },
+ "displayName": {
+ "description": "displayName is the display name of the Quick Start.",
"type": "string",
"default": ""
+ },
+ "durationMinutes": {
+ "description": "durationMinutes describes approximately how many minutes it will take to complete the Quick Start.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "icon": {
+ "description": "icon is a base64 encoded image that will be displayed beside the Quick Start display name. The icon should be an vector image for easy scaling. The size of the icon should be 40x40.",
+ "type": "string"
+ },
+ "introduction": {
+ "description": "introduction describes the purpose of the Quick Start. (includes markdown)",
+ "type": "string",
+ "default": ""
+ },
+ "nextQuickStart": {
+ "description": "nextQuickStart is a list of the following Quick Starts, suggested for the user to try.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "prerequisites": {
+ "description": "prerequisites contains all prerequisites that need to be met before taking a Quick Start. (includes markdown)",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "tags": {
+ "description": "tags is a list of strings that describe the Quick Start.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "tasks": {
+ "description": "tasks is the list of steps the user has to perform to complete the Quick Start.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartTask"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "AWSPrivateLinkInventory",
+ "Kind": "ConsoleQuickStartSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.AWSPrivateLinkSubnet": {
- "description": "AWSPrivateLinkSubnet defines a subnet in the an AWS VPC.",
+ "io.openshift.console.v1.ConsoleQuickStartTask": {
+ "description": "ConsoleQuickStartTask is a single step in a Quick Start.",
"type": "object",
"required": [
- "subnetID",
- "availabilityZone"
+ "title",
+ "description"
],
"properties": {
- "availabilityZone": {
+ "description": {
+ "description": "description describes the steps needed to complete the task. (includes markdown)",
"type": "string",
"default": ""
},
- "subnetID": {
+ "review": {
+ "description": "review contains instructions to validate the task is complete. The user will select 'Yes' or 'No'. using a radio button, which indicates whether the step was completed successfully.",
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartTaskReview"
+ },
+ "summary": {
+ "description": "summary contains information about the passed step.",
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartTaskSummary"
+ },
+ "title": {
+ "description": "title describes the task and is displayed as a step heading.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "AWSPrivateLinkSubnet",
+ "Kind": "ConsoleQuickStartTask",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.AWSPrivateLinkVPC": {
- "description": "AWSPrivateLinkVPC defines an AWS VPC in a region.",
+ "io.openshift.console.v1.ConsoleQuickStartTaskReview": {
+ "description": "ConsoleQuickStartTaskReview contains instructions that validate a task was completed successfully.",
"type": "object",
"required": [
- "vpcID",
- "region"
+ "instructions",
+ "failedTaskHelp"
],
"properties": {
- "region": {
+ "failedTaskHelp": {
+ "description": "failedTaskHelp contains suggestions for a failed task review and is shown at the end of task. (includes markdown)",
"type": "string",
"default": ""
},
- "vpcID": {
+ "instructions": {
+ "description": "instructions contains steps that user needs to take in order to validate his work after going through a task. (includes markdown)",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "AWSPrivateLinkVPC",
+ "Kind": "ConsoleQuickStartTaskReview",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.AWSResourceTag": {
- "description": "AWSResourceTag represents a tag that is applied to an AWS cloud resource",
+ "io.openshift.console.v1.ConsoleQuickStartTaskSummary": {
+ "description": "ConsoleQuickStartTaskSummary contains information about a passed step.",
"type": "object",
"required": [
- "key",
- "value"
+ "success",
+ "failed"
],
"properties": {
- "key": {
- "description": "Key is the key for the tag",
+ "failed": {
+ "description": "failed briefly describes the unsuccessfully passed task. (includes markdown)",
"type": "string",
"default": ""
},
- "value": {
- "description": "Value is the value for the tag",
+ "success": {
+ "description": "success describes the succesfully passed task.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "AWSResourceTag",
+ "Kind": "ConsoleQuickStartTaskSummary",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.AWSServiceProviderCredentials": {
- "description": "AWSServiceProviderCredentials is used to configure credentials related to being a service provider on AWS.",
+ "io.openshift.console.v1.ConsoleSample": {
+ "description": "ConsoleSample is an extension to customizing OpenShift web console by adding samples.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "metadata",
+ "spec"
+ ],
"properties": {
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS to become the Service Provider. Being a Service Provider allows the controllers to assume the role in customer AWS accounts to manager clusters.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec contains configuration for a console sample.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleSpec"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
+ "Type": "object",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "AWSServiceProviderCredentials",
- "Scope": "Namespaced"
+ "Kind": "ConsoleSample",
+ "Scope": "Clustered"
}
},
- "io.openshift.hive.v1.ArgoCDConfig": {
- "description": "ArgoCDConfig contains settings for integration with ArgoCD.",
+ "io.openshift.console.v1.ConsoleSampleContainerImportSource": {
+ "description": "ConsoleSampleContainerImportSource let the user import a container image.",
"type": "object",
"required": [
- "enabled"
+ "image"
],
"properties": {
- "enabled": {
- "description": "Enabled dictates if ArgoCD gitops integration is enabled. If not specified, the default is disabled.",
- "type": "boolean",
- "default": false
+ "image": {
+ "description": "reference to a container image that provides a HTTP service. The service must be exposed on the default port (8080) unless otherwise configured with the port field.\n\nSupported formats:\n - \u003crepository-name\u003e/\u003cimage-name\u003e\n - docker.io/\u003crepository-name\u003e/\u003cimage-name\u003e\n - quay.io/\u003crepository-name\u003e/\u003cimage-name\u003e\n - quay.io/\u003crepository-name\u003e/\u003cimage-name\u003e@sha256:\u003cimage hash\u003e\n - quay.io/\u003crepository-name\u003e/\u003cimage-name\u003e:\u003ctag\u003e",
+ "type": "string",
+ "default": ""
},
- "namespace": {
- "description": "Namespace specifies the namespace where ArgoCD is installed. Used for the location of cluster secrets. Defaults to \"argocd\"",
- "type": "string"
+ "service": {
+ "description": "service contains configuration for the Service resource created for this sample.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleContainerImportSourceService"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "ArgoCDConfig",
+ "Kind": "ConsoleSampleContainerImportSource",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.AzureClusterDeprovision": {
- "description": "AzureClusterDeprovision contains Azure-specific configuration for a ClusterDeprovision",
+ "io.openshift.console.v1.ConsoleSampleContainerImportSourceService": {
+ "description": "ConsoleSampleContainerImportSourceService let the samples author define defaults for the Service created for this sample.",
"type": "object",
"properties": {
- "cloudName": {
- "description": "cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to \"AzurePublicCloud\".",
- "type": "string"
- },
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef is the Azure account credentials to use for deprovisioning the cluster",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "resourceGroupName": {
- "description": "ResourceGroupName is the name of the resource group where the cluster was installed. Required for new deprovisions (schema notwithstanding).",
- "type": "string"
+ "targetPort": {
+ "description": "targetPort is the port that the service listens on for HTTP requests. This port will be used for Service and Route created for this sample. Port must be in the range 1 to 65535. Default port is 8080.",
+ "type": "integer",
+ "format": "int32"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "AzureClusterDeprovision",
+ "Kind": "ConsoleSampleContainerImportSourceService",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.AzureDNSZoneSpec": {
- "description": "AzureDNSZoneSpec contains Azure-specific DNSZone specifications",
+ "io.openshift.console.v1.ConsoleSampleGitImportSource": {
+ "description": "ConsoleSampleGitImportSource let the user import code from a public Git repository.",
"type": "object",
"required": [
- "credentialsSecretRef",
- "resourceGroupName"
+ "repository"
],
"properties": {
- "cloudName": {
- "description": "CloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to \"AzurePublicCloud\".",
- "type": "string"
- },
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef references a secret that will be used to authenticate with Azure CloudDNS. It will need permission to create and manage CloudDNS Hosted Zones. Secret should have a key named 'osServicePrincipal.json'. The credentials must specify the project to use.",
+ "repository": {
+ "description": "repository contains the reference to the actual Git repository.",
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleGitImportSourceRepository"
},
- "resourceGroupName": {
- "description": "ResourceGroupName specifies the Azure resource group in which the Hosted Zone should be created.",
- "type": "string",
- "default": ""
+ "service": {
+ "description": "service contains configuration for the Service resource created for this sample.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleGitImportSourceService"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "AzureDNSZoneSpec",
+ "Kind": "ConsoleSampleGitImportSource",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.AzureDNSZoneStatus": {
- "description": "AzureDNSZoneStatus contains status information specific to Azure DNS zones",
+ "io.openshift.console.v1.ConsoleSampleGitImportSourceRepository": {
+ "description": "ConsoleSampleGitImportSourceRepository let the user import code from a public git repository.",
"type": "object",
+ "required": [
+ "url"
+ ],
+ "properties": {
+ "contextDir": {
+ "description": "contextDir is used to specify a directory within the repository to build the component. Must start with `/` and have a maximum length of 256 characters. When omitted, the default value is to build from the root of the repository.",
+ "type": "string",
+ "default": ""
+ },
+ "revision": {
+ "description": "revision is the git revision at which to clone the git repository Can be used to clone a specific branch, tag or commit SHA. Must be at most 256 characters in length. When omitted the repository's default branch is used.",
+ "type": "string",
+ "default": ""
+ },
+ "url": {
+ "description": "url of the Git repository that contains a HTTP service. The HTTP service must be exposed on the default port (8080) unless otherwise configured with the port field.\n\nOnly public repositories on GitHub, GitLab and Bitbucket are currently supported:\n\n - https://github.com/\u003corg\u003e/\u003crepository\u003e\n - https://gitlab.com/\u003corg\u003e/\u003crepository\u003e\n - https://bitbucket.org/\u003corg\u003e/\u003crepository\u003e\n\nThe url must have a maximum length of 256 characters.",
+ "type": "string",
+ "default": ""
+ }
+ },
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "AzureDNSZoneStatus",
+ "Kind": "ConsoleSampleGitImportSourceRepository",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.BackupConfig": {
- "description": "BackupConfig contains settings for the Velero backup integration.",
+ "io.openshift.console.v1.ConsoleSampleGitImportSourceService": {
+ "description": "ConsoleSampleGitImportSourceService let the samples author define defaults for the Service created for this sample.",
"type": "object",
"properties": {
- "minBackupPeriodSeconds": {
- "description": "MinBackupPeriodSeconds specifies that a minimum of MinBackupPeriodSeconds will occur in between each backup. This is used to rate limit backups. This potentially batches together multiple changes into 1 backup. No backups will be lost as changes that happen during this interval are queued up and will result in a backup happening once the interval has been completed.",
+ "targetPort": {
+ "description": "targetPort is the port that the service listens on for HTTP requests. This port will be used for Service created for this sample. Port must be in the range 1 to 65535. Default port is 8080.",
"type": "integer",
"format": "int32"
- },
- "velero": {
- "description": "Velero specifies configuration for the Velero backup integration.",
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.VeleroBackupConfig"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "BackupConfig",
+ "Kind": "ConsoleSampleGitImportSourceService",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.BackupReference": {
- "description": "BackupReference is a reference to a backup resource",
+ "io.openshift.console.v1.ConsoleSampleList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "name",
- "namespace"
+ "metadata",
+ "items"
],
"properties": {
- "name": {
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "namespace": {
- "type": "string",
- "default": ""
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleSample"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
+ "Type": "list",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "BackupReference",
+ "Kind": "ConsoleSampleList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.CertificateBundleSpec": {
- "description": "CertificateBundleSpec specifies a certificate bundle associated with a cluster deployment",
+ "io.openshift.console.v1.ConsoleSampleSource": {
+ "description": "ConsoleSampleSource is the actual sample definition and can hold different sample types. Unsupported sample types will be ignored in the web console.",
"type": "object",
"required": [
- "name",
- "certificateSecretRef"
+ "type"
],
"properties": {
- "certificateSecretRef": {
- "description": "CertificateSecretRef is the reference to the secret that contains the certificate bundle. If the certificate bundle is to be generated, it will be generated with the name in this reference. Otherwise, it is expected that the secret should exist in the same namespace as the ClusterDeployment",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "containerImport": {
+ "description": "containerImport allows the user import a container image.",
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleContainerImportSource"
},
- "generate": {
- "description": "Generate indicates whether this bundle should have real certificates generated for it.",
- "type": "boolean"
+ "gitImport": {
+ "description": "gitImport allows the user to import code from a git repository.",
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleGitImportSource"
},
- "name": {
- "description": "Name is an identifier that must be unique within the bundle and must be referenced by an ingress or by the control plane serving certs",
+ "type": {
+ "description": "type of the sample, currently supported: \"GitImport\";\"ContainerImport\"",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "CertificateBundleSpec",
+ "Kind": "ConsoleSampleSource",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "containerImport": "ContainerImport",
+ "gitImport": "GitImport"
+ }
+ }
+ ]
},
- "io.openshift.hive.v1.CertificateBundleStatus": {
- "description": "CertificateBundleStatus specifies whether a certificate bundle was generated for this cluster deployment.",
+ "io.openshift.console.v1.ConsoleSampleSpec": {
+ "description": "ConsoleSampleSpec is the desired sample for the web console. Samples will appear with their title, descriptions and a badge in a samples catalog.",
"type": "object",
"required": [
- "name",
- "generated"
+ "title",
+ "abstract",
+ "description",
+ "source"
],
"properties": {
- "generated": {
- "description": "Generated indicates whether the certificate bundle was generated",
- "type": "boolean",
- "default": false
+ "abstract": {
+ "description": "abstract is a short introduction to the sample.\n\nIt is required and must be no more than 100 characters in length.\n\nThe abstract is shown on the sample card tile below the title and provider and is limited to three lines of content.",
+ "type": "string",
+ "default": ""
},
- "name": {
- "description": "Name of the certificate bundle",
+ "description": {
+ "description": "description is a long form explanation of the sample.\n\nIt is required and can have a maximum length of **4096** characters.\n\nIt is a README.md-like content for additional information, links, pre-conditions, and other instructions. It will be rendered as Markdown so that it can contain line breaks, links, and other simple formatting.",
+ "type": "string",
+ "default": ""
+ },
+ "icon": {
+ "description": "icon is an optional base64 encoded image and shown beside the sample title.\n\nThe format must follow the data: URL format and can have a maximum size of **10 KB**.\n\n data:[\u003cmediatype\u003e][;base64],\u003cbase64 encoded image\u003e\n\nFor example:\n\n data:image;base64, plus the base64 encoded image.\n\nVector images can also be used. SVG icons must start with:\n\n data:image/svg+xml;base64, plus the base64 encoded SVG image.\n\nAll sample catalog icons will be shown on a white background (also when the dark theme is used). The web console ensures that different aspect ratios work correctly. Currently, the surface of the icon is at most 40x100px.\n\nFor more information on the data URL format, please visit https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URLs.",
+ "type": "string",
+ "default": ""
+ },
+ "provider": {
+ "description": "provider is an optional label to honor who provides the sample.\n\nIt is optional and must be no more than 50 characters in length.\n\nA provider can be a company like \"Red Hat\" or an organization like \"CNCF\" or \"Knative\".\n\nCurrently, the provider is only shown on the sample card tile below the title with the prefix \"Provided by \"",
+ "type": "string",
+ "default": ""
+ },
+ "source": {
+ "description": "source defines where to deploy the sample service from. The sample may be sourced from an external git repository or container image.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleSource"
+ },
+ "tags": {
+ "description": "tags are optional string values that can be used to find samples in the samples catalog.\n\nExamples of common tags may be \"Java\", \"Quarkus\", etc.\n\nThey will be displayed on the samples details page.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "set"
+ },
+ "title": {
+ "description": "title is the display name of the sample.\n\nIt is required and must be no more than 50 characters in length.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "type is an optional label to group multiple samples.\n\nIt is optional and must be no more than 20 characters in length.\n\nRecommendation is a singular term like \"Builder Image\", \"Devfile\" or \"Serverless Function\".\n\nCurrently, the type is shown a badge on the sample card tile in the top right corner.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "CertificateBundleStatus",
+ "Kind": "ConsoleSampleSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.Checkpoint": {
- "description": "Checkpoint is the Schema for the backup of Hive objects.",
+ "io.openshift.console.v1.ConsoleYAMLSample": {
+ "description": "ConsoleYAMLSample is an extension for customizing OpenShift web console YAML samples.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "metadata",
+ "spec"
+ ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -82017,30 +83332,28 @@
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.CheckpointSpec"
- },
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.CheckpointStatus"
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleYAMLSampleSpec"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "Checkpoint",
- "Scope": "Namespaced"
+ "Kind": "ConsoleYAMLSample",
+ "Scope": "Clustered"
}
},
- "io.openshift.hive.v1.CheckpointList": {
- "description": "CheckpointList contains a list of Checkpoint",
+ "io.openshift.console.v1.ConsoleYAMLSampleList": {
+ "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -82052,7 +83365,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.Checkpoint"
+ "$ref": "#/definitions/io.openshift.console.v1.ConsoleYAMLSample"
}
},
"kind": {
@@ -82060,142 +83373,203 @@
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "CheckpointList",
+ "Kind": "ConsoleYAMLSampleList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.CheckpointSpec": {
- "description": "CheckpointSpec defines the metadata around the Hive objects state in the namespace at the time of the last backup.",
+ "io.openshift.console.v1.ConsoleYAMLSampleSpec": {
+ "description": "ConsoleYAMLSampleSpec is the desired YAML sample configuration. Samples will appear with their descriptions in a samples sidebar when creating a resources in the web console.",
"type": "object",
"required": [
- "lastBackupChecksum",
- "lastBackupTime",
- "lastBackupRef"
+ "targetResource",
+ "title",
+ "description",
+ "yaml"
],
"properties": {
- "lastBackupChecksum": {
- "description": "LastBackupChecksum is the checksum of all Hive objects in the namespace at the time of the last backup.",
+ "description": {
+ "description": "description of the YAML sample.",
"type": "string",
"default": ""
},
- "lastBackupRef": {
- "description": "LastBackupRef is a reference to last backup object created",
+ "snippet": {
+ "description": "snippet indicates that the YAML sample is not the full YAML resource definition, but a fragment that can be inserted into the existing YAML document at the user's cursor.",
+ "type": "boolean",
+ "default": false
+ },
+ "targetResource": {
+ "description": "targetResource contains apiVersion and kind of the resource YAML sample is representating.",
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.BackupReference"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.TypeMeta"
},
- "lastBackupTime": {
- "description": "LastBackupTime is the last time we performed a backup of the namespace",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "title": {
+ "description": "title of the YAML sample.",
+ "type": "string",
+ "default": ""
+ },
+ "yaml": {
+ "description": "yaml is the YAML sample to display.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "CheckpointSpec",
+ "Kind": "ConsoleYAMLSampleSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.CheckpointStatus": {
- "description": "CheckpointStatus defines the observed state of Checkpoint",
+ "io.openshift.console.v1.Link": {
+ "description": "Represents a standard link that could be generated in HTML",
+ "type": "object",
+ "required": [
+ "text",
+ "href"
+ ],
+ "properties": {
+ "href": {
+ "description": "href is the absolute secure URL for the link (must use https)",
+ "type": "string",
+ "default": ""
+ },
+ "text": {
+ "description": "text is the display text for the link",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "console.openshift.io",
+ "Version": "v1",
+ "Kind": "Link",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.console.v1.NamespaceDashboardSpec": {
+ "description": "NamespaceDashboardSpec is a specification of namespaces in which the dashboard link should appear. If both namespaces and namespaceSelector are specified, the link will appear in namespaces that match either",
"type": "object",
+ "properties": {
+ "namespaceSelector": {
+ "description": "namespaceSelector is used to select the Namespaces that should contain dashboard link by label. If the namespace labels match, dashboard link will be shown for the namespaces.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ },
+ "namespaces": {
+ "description": "namespaces is an array of namespace names in which the dashboard link should appear.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "console.openshift.io",
"Version": "v1",
- "Kind": "CheckpointStatus",
+ "Kind": "NamespaceDashboardSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterClaim": {
- "description": "ClusterClaim represents a claim to a cluster from a cluster pool.",
+ "io.openshift.example.v1.CELUnion": {
+ "description": "CELUnion demonstrates how to use a discriminated union and how to validate it using CEL.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "optionalMember": {
+ "description": "optionalMember is a union member that is optional.",
"type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "requiredMember": {
+ "description": "requiredMember is a union member that is required.",
"type": "string"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterClaimSpec"
- },
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterClaimStatus"
+ "type": {
+ "description": "type determines which of the union members should be populated.",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "hive.openshift.io",
+ "Type": "nested",
+ "Group": "example.openshift.io",
"Version": "v1",
- "Kind": "ClusterClaim",
+ "Kind": "CELUnion",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "optionalMember": "OptionalMember",
+ "requiredMember": "RequiredMember"
+ }
+ }
+ ]
+ },
+ "io.openshift.example.v1.EvolvingUnion": {
+ "type": "object",
+ "properties": {
+ "type": {
+ "description": "type is the discriminator. It has different values for Default and for TechPreviewNoUpgrade",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "example.openshift.io",
+ "Version": "v1",
+ "Kind": "EvolvingUnion",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterClaimCondition": {
- "description": "ClusterClaimCondition contains details for the current condition of a cluster claim.",
+ "io.openshift.example.v1.StableConfigType": {
+ "description": "StableConfigType is a stable config type that may include TechPreviewNoUpgrade fields.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "type",
- "status"
- ],
"properties": {
- "lastProbeTime": {
- "description": "LastProbeTime is the last time we probed the condition.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "lastTransitionTime": {
- "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "Message is a human-readable message indicating details about last transition.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "reason": {
- "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "status": {
- "description": "Status is the status of the condition.",
- "type": "string",
- "default": ""
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "type": {
- "description": "Type is the type of the condition.",
- "type": "string",
- "default": ""
+ "spec": {
+ "description": "spec is the specification of the desired behavior of the StableConfigType.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.example.v1.StableConfigTypeSpec"
+ },
+ "status": {
+ "description": "status is the most recently observed status of the StableConfigType.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.example.v1.StableConfigTypeStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
+ "Type": "object",
+ "Group": "example.openshift.io",
"Version": "v1",
- "Kind": "ClusterClaimCondition",
- "Scope": "Namespaced"
+ "Kind": "StableConfigType",
+ "Scope": "Clustered"
}
},
- "io.openshift.hive.v1.ClusterClaimList": {
- "description": "ClusterClaimList contains a list of ClusterClaims.",
+ "io.openshift.example.v1.StableConfigTypeList": {
+ "description": "StableConfigTypeList contains a list of StableConfigTypes.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"items"
@@ -82209,7 +83583,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterClaim"
+ "$ref": "#/definitions/io.openshift.example.v1.StableConfigType"
}
},
"kind": {
@@ -82217,82 +83591,121 @@
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "hive.openshift.io",
+ "Group": "example.openshift.io",
"Version": "v1",
- "Kind": "ClusterClaimList",
+ "Kind": "StableConfigTypeList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterClaimSpec": {
- "description": "ClusterClaimSpec defines the desired state of the ClusterClaim.",
+ "io.openshift.example.v1.StableConfigTypeSpec": {
+ "description": "StableConfigTypeSpec is the desired state",
"type": "object",
"required": [
- "clusterPoolName"
+ "immutableField"
],
"properties": {
- "clusterPoolName": {
- "description": "ClusterPoolName is the name of the cluster pool from which to claim a cluster.",
+ "celUnion": {
+ "description": "celUnion demonstrates how to validate a discrminated union using CEL",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.example.v1.CELUnion"
+ },
+ "coolNewField": {
+ "description": "coolNewField is a field that is for tech preview only. On normal clusters this shouldn't be present",
"type": "string",
"default": ""
},
- "lifetime": {
- "description": "Lifetime is the maximum lifetime of the claim after it is assigned a cluster. If the claim still exists when the lifetime has elapsed, the claim will be deleted by Hive. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "evolvingCollection": {
+ "description": "evolvingCollection demonstrates how to have a collection where the maximum number of items varies on cluster type. For default clusters, this will be \"1\" but on TechPreview clusters, this value will be \"3\".",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "namespace": {
- "description": "Namespace is the namespace containing the ClusterDeployment (name will match the namespace) of the claimed cluster. This field will be set as soon as a suitable cluster can be found, however that cluster may still be resuming and not yet ready for use. Wait for the ClusterRunning condition to be true to avoid this issue.",
- "type": "string"
+ "evolvingUnion": {
+ "description": "evolvingUnion demonstrates how to phase in new values into discriminated union",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.example.v1.EvolvingUnion"
},
- "subjects": {
- "description": "Subjects hold references to which to authorize access to the claimed cluster.",
+ "immutableField": {
+ "description": "immutableField is a field that is immutable once the object has been created. It is required at all times.",
+ "type": "string",
+ "default": ""
+ },
+ "nonZeroDefault": {
+ "description": "nonZeroDefault is a demonstration of creating an integer field that has a non zero default. It required two default tags (one for CRD generation, one for client generation) and must have `omitempty` and be optional. A minimum value is added to demonstrate that a zero value would not be accepted.",
+ "type": "integer",
+ "format": "int32",
+ "default": 8
+ },
+ "optionalImmutableField": {
+ "description": "optionalImmutableField is a field that is immutable once set. It is optional but may not be changed once set.",
+ "type": "string",
+ "default": ""
+ },
+ "set": {
+ "description": "set demonstrates how to define and validate set of strings",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.rbac.v1.Subject"
+ "type": "string",
+ "default": ""
}
+ },
+ "stableField": {
+ "description": "stableField is a field that is present on default clusters and on tech preview clusters\n\nIf empty, the platform will choose a good default, which may change over time without notice.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "example.openshift.io",
"Version": "v1",
- "Kind": "ClusterClaimSpec",
+ "Kind": "StableConfigTypeSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterClaimStatus": {
- "description": "ClusterClaimStatus defines the observed state of ClusterClaim.",
+ "io.openshift.example.v1.StableConfigTypeStatus": {
+ "description": "StableConfigTypeStatus defines the observed status of the StableConfigType.",
"type": "object",
"properties": {
"conditions": {
- "description": "Conditions includes more detailed status for the cluster pool.",
+ "description": "Represents the observations of a foo's current state. Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterClaimCondition"
- }
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "lifetime": {
- "description": "Lifetime is the maximum lifetime of the claim after it is assigned a cluster. If the claim still exists when the lifetime has elapsed, the claim will be deleted by Hive.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "immutableField": {
+ "description": "immutableField is a field that is immutable once the object has been created. It is required at all times.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
+ "Group": "example.openshift.io",
"Version": "v1",
- "Kind": "ClusterClaimStatus",
+ "Kind": "StableConfigTypeStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterDeployment": {
- "description": "ClusterDeployment is the Schema for the clusterdeployments API",
+ "io.openshift.example.v1alpha1.NotStableConfigType": {
+ "description": "NotStableConfigType is a stable config type that is TechPreviewNoUpgrade only.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"properties": {
"apiVersion": {
@@ -82304,200 +83717,222 @@
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
+ "description": "spec is the specification of the desired behavior of the NotStableConfigType.",
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentSpec"
+ "$ref": "#/definitions/io.openshift.example.v1alpha1.NotStableConfigTypeSpec"
},
"status": {
+ "description": "status is the most recently observed status of the NotStableConfigType.",
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentStatus"
+ "$ref": "#/definitions/io.openshift.example.v1alpha1.NotStableConfigTypeStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterDeployment",
- "Scope": "Namespaced"
+ "Group": "example.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "NotStableConfigType",
+ "Scope": "Clustered"
}
},
- "io.openshift.hive.v1.ClusterDeploymentCondition": {
- "description": "ClusterDeploymentCondition contains details for the current condition of a cluster deployment",
+ "io.openshift.example.v1alpha1.NotStableConfigTypeList": {
+ "description": "NotStableConfigTypeList contains a list of NotStableConfigTypes.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "type",
- "status"
+ "items"
],
"properties": {
- "lastProbeTime": {
- "description": "LastProbeTime is the last time we probed the condition.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "lastTransitionTime": {
- "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "Message is a human-readable message indicating details about last transition.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "reason": {
- "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.",
- "type": "string"
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.example.v1alpha1.NotStableConfigType"
+ }
},
- "status": {
- "description": "Status is the status of the condition.",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "type": {
- "description": "Type is the type of the condition.",
- "type": "string",
- "default": ""
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterDeploymentCondition",
- "Scope": "Namespaced"
+ "Type": "list",
+ "Group": "example.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "NotStableConfigTypeList",
+ "Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterDeploymentCustomization": {
- "description": "ClusterDeploymentCustomization is the Schema for clusterdeploymentcustomizations API.",
+ "io.openshift.example.v1alpha1.NotStableConfigTypeSpec": {
+ "description": "NotStableConfigTypeSpec is the desired state",
"type": "object",
"required": [
- "spec"
+ "newField"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentCustomizationSpec"
- },
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentCustomizationStatus"
+ "newField": {
+ "description": "newField is a field that is tech preview, but because the entire type is gated, there is no marker on the field.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterDeploymentCustomization",
+ "Type": "nested",
+ "Group": "example.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "NotStableConfigTypeSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterDeploymentCustomizationList": {
- "description": "ClusterDeploymentCustomizationList contains a list of ClusterDeploymentCustomizations.",
+ "io.openshift.example.v1alpha1.NotStableConfigTypeStatus": {
+ "description": "NotStableConfigTypeStatus defines the observed status of the NotStableConfigType.",
"type": "object",
- "required": [
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
+ "conditions": {
+ "description": "Represents the observations of a foo's current state. Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentCustomization"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterDeploymentCustomizationList",
+ "Type": "nested",
+ "Group": "example.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "NotStableConfigTypeStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterDeploymentCustomizationSpec": {
- "description": "ClusterDeploymentCustomizationSpec defines the desired state of ClusterDeploymentCustomization.",
+ "io.openshift.helm.v1beta1.ConnectionConfig": {
"type": "object",
+ "required": [
+ "url"
+ ],
"properties": {
- "installConfigPatches": {
- "description": "InstallConfigPatches is a list of patches to be applied to the install-config.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.PatchEntity"
- }
+ "ca": {
+ "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca-bundle.crt\" is used to locate the data. If empty, the default system roots are used. The namespace for this config map is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ },
+ "tlsClientConfig": {
+ "description": "tlsClientConfig is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate and private key to present when connecting to the server. The key \"tls.crt\" is used to locate the client certificate. The key \"tls.key\" is used to locate the private key. The namespace for this secret is openshift-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ },
+ "url": {
+ "description": "Chart repository URL",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterDeploymentCustomizationSpec",
+ "Group": "helm.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "ConnectionConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterDeploymentCustomizationStatus": {
- "description": "ClusterDeploymentCustomizationStatus defines the observed state of ClusterDeploymentCustomization.",
+ "io.openshift.helm.v1beta1.ConnectionConfigNamespaceScoped": {
"type": "object",
+ "required": [
+ "url"
+ ],
"properties": {
- "clusterDeploymentRef": {
- "description": "ClusterDeploymentRef is a reference to the cluster deployment that this customization is applied on.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "basicAuthConfig": {
+ "description": "basicAuthConfig is an optional reference to a secret by name that contains the basic authentication credentials to present when connecting to the server. The key \"username\" is used locate the username. The key \"password\" is used to locate the password. The namespace for this secret must be same as the namespace where the project helm chart repository is getting instantiated.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
},
- "clusterPoolRef": {
- "description": "ClusterPoolRef is the name of the current cluster pool the CDC used at.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "ca": {
+ "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca-bundle.crt\" is used to locate the data. If empty, the default system roots are used. The namespace for this configmap must be same as the namespace where the project helm chart repository is getting instantiated.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
},
- "conditions": {
- "description": "Conditions describes the state of the operator's reconciliation functionality.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/com.github.openshift.custom-resource-status.conditions.v1.Condition"
- },
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
+ "tlsClientConfig": {
+ "description": "tlsClientConfig is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate and private key to present when connecting to the server. The key \"tls.crt\" is used to locate the client certificate. The key \"tls.key\" is used to locate the private key. The namespace for this secret must be same as the namespace where the project helm chart repository is getting instantiated.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
},
- "lastAppliedConfiguration": {
- "description": "LastAppliedConfiguration contains the last applied patches to the install-config. The information will retain for reference in case the customization is updated.",
- "type": "string"
+ "url": {
+ "description": "Chart repository URL",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterDeploymentCustomizationStatus",
+ "Group": "helm.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "ConnectionConfigNamespaceScoped",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterDeploymentList": {
- "description": "ClusterDeploymentList contains a list of ClusterDeployment",
+ "io.openshift.helm.v1beta1.HelmChartRepository": {
+ "description": "HelmChartRepository holds cluster-wide configuration for proxied Helm chart repository\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec holds user settable values for configuration",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepositorySpec"
+ },
+ "status": {
+ "description": "Observed status of the repository within the cluster..",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepositoryStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "helm.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "HelmChartRepository",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.helm.v1beta1.HelmChartRepositoryList": {
+ "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -82509,7 +83944,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeployment"
+ "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepository"
}
},
"kind": {
@@ -82517,199 +83952,78 @@
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterDeploymentList",
+ "Group": "helm.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "HelmChartRepositoryList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterDeploymentSpec": {
- "description": "ClusterDeploymentSpec defines the desired state of ClusterDeployment",
+ "io.openshift.helm.v1beta1.HelmChartRepositorySpec": {
+ "description": "Helm chart repository exposed within the cluster",
"type": "object",
"required": [
- "clusterName",
- "baseDomain",
- "platform"
+ "connectionConfig"
],
"properties": {
- "baseDomain": {
- "description": "BaseDomain is the base domain to which the cluster should belong.",
- "type": "string",
- "default": ""
- },
- "boundServiceAccountSigningKeySecretRef": {
- "description": "BoundServiceAccountSigningKeySecretRef refers to a Secret that contains a 'bound-service-account-signing-key.key' data key pointing to the private key that will be used to sign ServiceAccount objects. Primarily used to provision AWS clusters to use Amazon's Security Token Service.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "certificateBundles": {
- "description": "CertificateBundles is a list of certificate bundles associated with this cluster",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.CertificateBundleSpec"
- }
- },
- "clusterInstallRef": {
- "description": "ClusterInstallLocalReference provides reference to an object that implements the hivecontract ClusterInstall. The namespace of the object is same as the ClusterDeployment. This cannot be set when Provisioning is also set.",
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterInstallLocalReference"
- },
- "clusterMetadata": {
- "description": "ClusterMetadata contains metadata information about the installed cluster.",
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterMetadata"
- },
- "clusterName": {
- "description": "ClusterName is the friendly name of the cluster. It is used for subdomains, some resource tagging, and other instances where a friendly name for the cluster is useful.",
- "type": "string",
- "default": ""
- },
- "clusterPoolRef": {
- "description": "ClusterPoolRef is a reference to the ClusterPool that this ClusterDeployment originated from.",
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolReference"
- },
- "controlPlaneConfig": {
- "description": "ControlPlaneConfig contains additional configuration for the target cluster's control plane",
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ControlPlaneConfigSpec"
- },
- "hibernateAfter": {
- "description": "HibernateAfter will transition a cluster to hibernating power state after it has been running for the given duration. The time that a cluster has been running is the time since the cluster was installed or the time since the cluster last came out of hibernation. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "ingress": {
- "description": "Ingress allows defining desired clusteringress/shards to be configured on the cluster.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterIngress"
- }
- },
- "installAttemptsLimit": {
- "description": "InstallAttemptsLimit is the maximum number of times Hive will attempt to install the cluster.",
- "type": "integer",
- "format": "int32"
- },
- "installed": {
- "description": "Installed is true if the cluster has been installed",
- "type": "boolean",
- "default": false
- },
- "manageDNS": {
- "description": "ManageDNS specifies whether a DNSZone should be created and managed automatically for this ClusterDeployment",
- "type": "boolean"
- },
- "platform": {
- "description": "Platform is the configuration for the specific platform upon which to perform the installation.",
+ "connectionConfig": {
+ "description": "Required configuration for connecting to the chart repo",
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.Platform"
+ "$ref": "#/definitions/io.openshift.helm.v1beta1.ConnectionConfig"
},
- "powerState": {
- "description": "PowerState indicates whether a cluster should be running or hibernating. When omitted, PowerState defaults to the Running state.",
+ "description": {
+ "description": "Optional human readable repository description, it can be used by UI for displaying purposes",
"type": "string"
},
- "preserveOnDelete": {
- "description": "PreserveOnDelete allows the user to disconnect a cluster from Hive without deprovisioning it. This can also be used to abandon ongoing cluster deprovision.",
+ "disabled": {
+ "description": "If set to true, disable the repo usage in the cluster/namespace",
"type": "boolean"
},
- "provisioning": {
- "description": "Provisioning contains settings used only for initial cluster provisioning. May be unset in the case of adopted clusters.",
- "$ref": "#/definitions/io.openshift.hive.v1.Provisioning"
- },
- "pullSecretRef": {
- "description": "PullSecretRef is the reference to the secret to use when pulling images.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "name": {
+ "description": "Optional associated human readable repository name, it can be used by UI for displaying purposes",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterDeploymentSpec",
+ "Group": "helm.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "HelmChartRepositorySpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterDeploymentStatus": {
- "description": "ClusterDeploymentStatus defines the observed state of ClusterDeployment",
+ "io.openshift.helm.v1beta1.HelmChartRepositoryStatus": {
"type": "object",
"properties": {
- "apiURL": {
- "description": "APIURL is the URL where the cluster's API can be accessed.",
- "type": "string"
- },
- "certificateBundles": {
- "description": "CertificateBundles contains of the status of the certificate bundles associated with this cluster deployment.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.CertificateBundleStatus"
- }
- },
- "cliImage": {
- "description": "CLIImage is the name of the oc cli image to use when installing the target cluster",
- "type": "string"
- },
"conditions": {
- "description": "Conditions includes more detailed status for the cluster deployment",
+ "description": "conditions is a list of conditions and their statuses",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentCondition"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
}
- },
- "installRestarts": {
- "description": "InstallRestarts is the total count of container restarts on the clusters install job.",
- "type": "integer",
- "format": "int32"
- },
- "installStartedTimestamp": {
- "description": "InstallStartedTimestamp is the time when all pre-requisites were met and cluster installation was launched.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "installVersion": {
- "description": "InstallVersion is the version of OpenShift as reported by the release image resolved for the installation.",
- "type": "string"
- },
- "installedTimestamp": {
- "description": "InstalledTimestamp is the time we first detected that the cluster has been successfully installed.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "installerImage": {
- "description": "InstallerImage is the name of the installer image to use when installing the target cluster",
- "type": "string"
- },
- "platformStatus": {
- "description": "Platform contains the observed state for the specific platform upon which to perform the installation.",
- "$ref": "#/definitions/io.openshift.hive.v1.PlatformStatus"
- },
- "powerState": {
- "description": "PowerState indicates the powerstate of cluster",
- "type": "string"
- },
- "provisionRef": {
- "description": "ProvisionRef is a reference to the last ClusterProvision created for the deployment",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "webConsoleURL": {
- "description": "WebConsoleURL is the URL for the cluster's web console UI.",
- "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterDeploymentStatus",
+ "Group": "helm.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "HelmChartRepositoryStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterDeprovision": {
- "description": "ClusterDeprovision is the Schema for the clusterdeprovisions API",
+ "io.openshift.helm.v1beta1.ProjectHelmChartRepository": {
+ "description": "ProjectHelmChartRepository holds namespace-wide configuration for proxied Helm chart repository\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -82720,73 +84034,34 @@
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
+ "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovisionSpec"
+ "$ref": "#/definitions/io.openshift.helm.v1beta1.ProjectHelmChartRepositorySpec"
},
"status": {
+ "description": "Observed status of the repository within the namespace..",
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovisionStatus"
+ "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepositoryStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterDeprovision",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.ClusterDeprovisionCondition": {
- "description": "ClusterDeprovisionCondition contains details for the current condition of a ClusterDeprovision",
- "type": "object",
- "required": [
- "type",
- "status"
- ],
- "properties": {
- "lastProbeTime": {
- "description": "LastProbeTime is the last time we probed the condition.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "lastTransitionTime": {
- "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "Message is a human-readable message indicating details about last transition.",
- "type": "string"
- },
- "reason": {
- "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.",
- "type": "string"
- },
- "status": {
- "description": "Status is the status of the condition.",
- "type": "string",
- "default": ""
- },
- "type": {
- "description": "Type is the type of the condition.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterDeprovisionCondition",
+ "Group": "helm.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "ProjectHelmChartRepository",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterDeprovisionList": {
- "description": "ClusterDeprovisionList contains a list of ClusterDeprovision",
+ "io.openshift.helm.v1beta1.ProjectHelmChartRepositoryList": {
+ "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -82798,7 +84073,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovision"
+ "$ref": "#/definitions/io.openshift.helm.v1beta1.ProjectHelmChartRepository"
}
},
"kind": {
@@ -82806,199 +84081,227 @@
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterDeprovisionList",
+ "Group": "helm.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "ProjectHelmChartRepositoryList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterDeprovisionPlatform": {
- "description": "ClusterDeprovisionPlatform contains platform-specific configuration for the deprovision",
+ "io.openshift.helm.v1beta1.ProjectHelmChartRepositorySpec": {
+ "description": "Project Helm chart repository exposed within a namespace",
"type": "object",
+ "required": [
+ "connectionConfig"
+ ],
"properties": {
- "aws": {
- "description": "AWS contains AWS-specific deprovision settings",
- "$ref": "#/definitions/io.openshift.hive.v1.AWSClusterDeprovision"
- },
- "azure": {
- "description": "Azure contains Azure-specific deprovision settings",
- "$ref": "#/definitions/io.openshift.hive.v1.AzureClusterDeprovision"
- },
- "gcp": {
- "description": "GCP contains GCP-specific deprovision settings",
- "$ref": "#/definitions/io.openshift.hive.v1.GCPClusterDeprovision"
- },
- "ibmcloud": {
- "description": "IBMCloud contains IBM Cloud specific deprovision settings",
- "$ref": "#/definitions/io.openshift.hive.v1.IBMClusterDeprovision"
+ "connectionConfig": {
+ "description": "Required configuration for connecting to the chart repo",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.helm.v1beta1.ConnectionConfigNamespaceScoped"
},
- "openstack": {
- "description": "OpenStack contains OpenStack-specific deprovision settings",
- "$ref": "#/definitions/io.openshift.hive.v1.OpenStackClusterDeprovision"
+ "description": {
+ "description": "Optional human readable repository description, it can be used by UI for displaying purposes",
+ "type": "string"
},
- "ovirt": {
- "description": "Ovirt contains oVirt-specific deprovision settings",
- "$ref": "#/definitions/io.openshift.hive.v1.OvirtClusterDeprovision"
+ "disabled": {
+ "description": "If set to true, disable the repo usage in the namespace",
+ "type": "boolean"
},
- "vsphere": {
- "description": "VSphere contains VMWare vSphere-specific deprovision settings",
- "$ref": "#/definitions/io.openshift.hive.v1.VSphereClusterDeprovision"
+ "name": {
+ "description": "Optional associated human readable repository name, it can be used by UI for displaying purposes",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterDeprovisionPlatform",
+ "Group": "helm.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "ProjectHelmChartRepositorySpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterDeprovisionSpec": {
- "description": "ClusterDeprovisionSpec defines the desired state of ClusterDeprovision",
+ "io.openshift.hive.v1.AWSAssociatedVPC": {
+ "description": "AWSAssociatedVPC defines a VPC that should be able to resolve the DNS addresses setup for Private Link.",
"type": "object",
"required": [
- "infraID"
+ "vpcID",
+ "region"
],
"properties": {
- "baseDomain": {
- "description": "BaseDomain is the DNS base domain.",
- "type": "string"
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS for associating the VPC with the Private HostedZone created for PrivateLink. When not provided, the common credentials for the controller should be used.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "clusterID": {
- "description": "ClusterID is a globally unique identifier for the cluster to deprovision. It will be used if specified.",
- "type": "string"
+ "region": {
+ "type": "string",
+ "default": ""
},
- "clusterName": {
- "description": "ClusterName is the friendly name of the cluster. It is used for subdomains, some resource tagging, and other instances where a friendly name for the cluster is useful.",
+ "vpcID": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "AWSAssociatedVPC",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.AWSClusterDeprovision": {
+ "description": "AWSClusterDeprovision contains AWS-specific configuration for a ClusterDeprovision",
+ "type": "object",
+ "required": [
+ "region"
+ ],
+ "properties": {
+ "credentialsAssumeRole": {
+ "description": "CredentialsAssumeRole refers to the IAM role that must be assumed to obtain AWS account access for deprovisioning the cluster.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.AssumeRole"
+ },
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef is the AWS account credentials to use for deprovisioning the cluster",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "hostedZoneRole": {
+ "description": "HostedZoneRole is the role to assume when performing operations on a hosted zone owned by another account.",
"type": "string"
},
- "infraID": {
- "description": "InfraID is the identifier generated during installation for a cluster. It is used for tagging/naming resources in cloud providers.",
+ "region": {
+ "description": "Region is the AWS region for this deprovisioning",
"type": "string",
"default": ""
- },
- "platform": {
- "description": "Platform contains platform-specific configuration for a ClusterDeprovision",
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovisionPlatform"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterDeprovisionSpec",
+ "Kind": "AWSClusterDeprovision",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterDeprovisionStatus": {
- "description": "ClusterDeprovisionStatus defines the observed state of ClusterDeprovision",
+ "io.openshift.hive.v1.AWSDNSZoneSpec": {
+ "description": "AWSDNSZoneSpec contains AWS-specific DNSZone specifications",
"type": "object",
"properties": {
- "completed": {
- "description": "Completed is true when the uninstall has completed successfully",
- "type": "boolean"
- },
- "conditions": {
- "description": "Conditions includes more detailed status for the cluster deprovision",
+ "additionalTags": {
+ "description": "AdditionalTags is a set of additional tags to set on the DNS hosted zone. In addition to these tags,the DNS Zone controller will set a hive.openhsift.io/hostedzone tag identifying the HostedZone record that it belongs to.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovisionCondition"
+ "$ref": "#/definitions/io.openshift.hive.v1.AWSResourceTag"
}
+ },
+ "credentialsAssumeRole": {
+ "description": "CredentialsAssumeRole refers to the IAM role that must be assumed to obtain AWS account access for the DNS CRUD operations.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.AssumeRole"
+ },
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef contains a reference to a secret that contains AWS credentials for CRUD operations",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "region": {
+ "description": "Region is the AWS region to use for route53 operations. This defaults to us-east-1. For AWS China, use cn-northwest-1.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterDeprovisionStatus",
+ "Kind": "AWSDNSZoneSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterImageSet": {
- "description": "ClusterImageSet is the Schema for the clusterimagesets API",
+ "io.openshift.hive.v1.AWSDNSZoneStatus": {
+ "description": "AWSDNSZoneStatus contains status information specific to AWS DNS zones",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "zoneID": {
+ "description": "ZoneID is the ID of the zone in AWS",
"type": "string"
- },
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSetSpec"
- },
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSetStatus"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterImageSet",
- "Scope": "Clustered"
+ "Kind": "AWSDNSZoneStatus",
+ "Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterImageSetList": {
- "description": "ClusterImageSetList contains a list of ClusterImageSet",
+ "io.openshift.hive.v1.AWSPrivateLinkConfig": {
+ "description": "AWSPrivateLinkConfig defines the configuration for the aws-private-link controller.",
"type": "object",
"required": [
- "items"
+ "credentialsSecretRef"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
+ "associatedVPCs": {
+ "description": "AssociatedVPCs is the list of VPCs that should be able to resolve the DNS addresses setup for Private Link. This allows clients in VPC to resolve the AWS PrivateLink address using AWS's default DNS resolver for Private Route53 Hosted Zones.\n\nThis list should at minimum include the VPC where the current Hive controller is running.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSet"
+ "$ref": "#/definitions/io.openshift.hive.v1.AWSAssociatedVPC"
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS for creating the resources for AWS PrivateLink.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "dnsRecordType": {
+ "description": "DNSRecordType defines what type of DNS record should be created in Private Hosted Zone for the customer cluster's API endpoint (which is the VPC Endpoint's regional DNS name).",
"type": "string"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "endpointVPCInventory": {
+ "description": "EndpointVPCInventory is a list of VPCs and the corresponding subnets in various AWS regions. The controller uses this list to choose a VPC for creating AWS VPC Endpoints. Since the VPC Endpoints must be in the same region as the ClusterDeployment, we must have VPCs in that region to be able to setup Private Link.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.AWSPrivateLinkInventory"
+ }
}
},
"x-fabric8-info": {
- "Type": "list",
+ "Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterImageSetList",
+ "Kind": "AWSPrivateLinkConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterImageSetReference": {
- "description": "ClusterImageSetReference is a reference to a ClusterImageSet",
+ "io.openshift.hive.v1.AWSPrivateLinkInventory": {
+ "description": "AWSPrivateLinkInventory is a VPC and its corresponding subnets in an AWS region. This VPC will be used to create an AWS VPC Endpoint whenever there is a VPC Endpoint Service created for a ClusterDeployment.",
"type": "object",
"required": [
- "name"
+ "vpcID",
+ "region",
+ "subnets"
],
"properties": {
- "name": {
- "description": "Name is the name of the ClusterImageSet that this refers to",
+ "region": {
+ "type": "string",
+ "default": ""
+ },
+ "subnets": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.AWSPrivateLinkSubnet"
+ }
+ },
+ "vpcID": {
"type": "string",
"default": ""
}
@@ -83007,19 +84310,23 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterImageSetReference",
+ "Kind": "AWSPrivateLinkInventory",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterImageSetSpec": {
- "description": "ClusterImageSetSpec defines the desired state of ClusterImageSet",
+ "io.openshift.hive.v1.AWSPrivateLinkSubnet": {
+ "description": "AWSPrivateLinkSubnet defines a subnet in the an AWS VPC.",
"type": "object",
"required": [
- "releaseImage"
+ "subnetID",
+ "availabilityZone"
],
"properties": {
- "releaseImage": {
- "description": "ReleaseImage is the image that contains the payload to use when installing a cluster.",
+ "availabilityZone": {
+ "type": "string",
+ "default": ""
+ },
+ "subnetID": {
"type": "string",
"default": ""
}
@@ -83028,200 +84335,239 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterImageSetSpec",
+ "Kind": "AWSPrivateLinkSubnet",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterImageSetStatus": {
- "description": "ClusterImageSetStatus defines the observed state of ClusterImageSet",
+ "io.openshift.hive.v1.AWSPrivateLinkVPC": {
+ "description": "AWSPrivateLinkVPC defines an AWS VPC in a region.",
"type": "object",
+ "required": [
+ "vpcID",
+ "region"
+ ],
+ "properties": {
+ "region": {
+ "type": "string",
+ "default": ""
+ },
+ "vpcID": {
+ "type": "string",
+ "default": ""
+ }
+ },
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterImageSetStatus",
+ "Kind": "AWSPrivateLinkVPC",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterIngress": {
- "description": "ClusterIngress contains the configurable pieces for any ClusterIngress objects that should exist on the cluster.",
+ "io.openshift.hive.v1.AWSResourceTag": {
+ "description": "AWSResourceTag represents a tag that is applied to an AWS cloud resource",
"type": "object",
"required": [
- "name",
- "domain"
+ "key",
+ "value"
],
"properties": {
- "domain": {
- "description": "Domain (sometimes referred to as shard) is the full DNS suffix that the resulting IngressController object will service (eg abcd.mycluster.mydomain.com).",
+ "key": {
+ "description": "Key is the key for the tag",
"type": "string",
"default": ""
},
- "httpErrorCodePages": {
- "description": "HttpErrorCodePages allows configuring custom HTTP error pages using the IngressController object",
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
- },
- "name": {
- "description": "Name of the ClusterIngress object to create.",
+ "value": {
+ "description": "Value is the value for the tag",
"type": "string",
"default": ""
- },
- "namespaceSelector": {
- "description": "NamespaceSelector allows filtering the list of namespaces serviced by the ingress controller.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
- },
- "routeSelector": {
- "description": "RouteSelector allows filtering the set of Routes serviced by the ingress controller",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
- },
- "servingCertificate": {
- "description": "ServingCertificate references a CertificateBundle in the ClusterDeployment.Spec that should be used for this Ingress",
- "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterIngress",
+ "Kind": "AWSResourceTag",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterInstallCondition": {
- "description": "ClusterInstallCondition contains details for the current condition of a cluster install.",
+ "io.openshift.hive.v1.AWSServiceProviderCredentials": {
+ "description": "AWSServiceProviderCredentials is used to configure credentials related to being a service provider on AWS.",
+ "type": "object",
+ "properties": {
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS to become the Service Provider. Being a Service Provider allows the controllers to assume the role in customer AWS accounts to manager clusters.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "AWSServiceProviderCredentials",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.ArgoCDConfig": {
+ "description": "ArgoCDConfig contains settings for integration with ArgoCD.",
"type": "object",
"required": [
- "type",
- "status"
+ "enabled"
],
"properties": {
- "lastProbeTime": {
- "description": "LastProbeTime is the last time we probed the condition.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "lastTransitionTime": {
- "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "enabled": {
+ "description": "Enabled dictates if ArgoCD gitops integration is enabled. If not specified, the default is disabled.",
+ "type": "boolean",
+ "default": false
},
- "message": {
- "description": "Message is a human-readable message indicating details about last transition.",
+ "namespace": {
+ "description": "Namespace specifies the namespace where ArgoCD is installed. Used for the location of cluster secrets. Defaults to \"argocd\"",
"type": "string"
- },
- "reason": {
- "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.",
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "ArgoCDConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.AzureClusterDeprovision": {
+ "description": "AzureClusterDeprovision contains Azure-specific configuration for a ClusterDeprovision",
+ "type": "object",
+ "properties": {
+ "cloudName": {
+ "description": "cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to \"AzurePublicCloud\".",
"type": "string"
},
- "status": {
- "description": "Status is the status of the condition.",
- "type": "string",
- "default": ""
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef is the Azure account credentials to use for deprovisioning the cluster",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "type": {
- "description": "Type is the type of the condition.",
- "type": "string",
- "default": ""
+ "resourceGroupName": {
+ "description": "ResourceGroupName is the name of the resource group where the cluster was installed. Required for new deprovisions (schema notwithstanding).",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterInstallCondition",
+ "Kind": "AzureClusterDeprovision",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterInstallLocalReference": {
- "description": "ClusterInstallLocalReference provides reference to an object that implements the hivecontract ClusterInstall. The namespace of the object is same as the ClusterDeployment.",
+ "io.openshift.hive.v1.AzureDNSZoneSpec": {
+ "description": "AzureDNSZoneSpec contains Azure-specific DNSZone specifications",
"type": "object",
"required": [
- "group",
- "version",
- "kind",
- "name"
+ "credentialsSecretRef",
+ "resourceGroupName"
],
"properties": {
- "group": {
- "type": "string",
- "default": ""
+ "cloudName": {
+ "description": "CloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to \"AzurePublicCloud\".",
+ "type": "string"
},
- "kind": {
- "type": "string",
- "default": ""
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef references a secret that will be used to authenticate with Azure CloudDNS. It will need permission to create and manage CloudDNS Hosted Zones. Secret should have a key named 'osServicePrincipal.json'. The credentials must specify the project to use.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "name": {
+ "resourceGroupName": {
+ "description": "ResourceGroupName specifies the Azure resource group in which the Hosted Zone should be created.",
"type": "string",
"default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "AzureDNSZoneSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.AzureDNSZoneStatus": {
+ "description": "AzureDNSZoneStatus contains status information specific to Azure DNS zones",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "AzureDNSZoneStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.BackupConfig": {
+ "description": "BackupConfig contains settings for the Velero backup integration.",
+ "type": "object",
+ "properties": {
+ "minBackupPeriodSeconds": {
+ "description": "MinBackupPeriodSeconds specifies that a minimum of MinBackupPeriodSeconds will occur in between each backup. This is used to rate limit backups. This potentially batches together multiple changes into 1 backup. No backups will be lost as changes that happen during this interval are queued up and will result in a backup happening once the interval has been completed.",
+ "type": "integer",
+ "format": "int32"
},
- "version": {
- "type": "string",
- "default": ""
+ "velero": {
+ "description": "Velero specifies configuration for the Velero backup integration.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.VeleroBackupConfig"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterInstallLocalReference",
+ "Kind": "BackupConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterMetadata": {
- "description": "ClusterMetadata contains metadata information about the installed cluster.",
+ "io.openshift.hive.v1.BackupReference": {
+ "description": "BackupReference is a reference to a backup resource",
"type": "object",
"required": [
- "clusterID",
- "infraID",
- "adminKubeconfigSecretRef"
+ "name",
+ "namespace"
],
"properties": {
- "adminKubeconfigSecretRef": {
- "description": "AdminKubeconfigSecretRef references the secret containing the admin kubeconfig for this cluster.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "adminPasswordSecretRef": {
- "description": "AdminPasswordSecretRef references the secret containing the admin username/password which can be used to login to this cluster.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "clusterID": {
- "description": "ClusterID is a globally unique identifier for this cluster generated during installation. Used for reporting metrics among other places.",
+ "name": {
"type": "string",
"default": ""
},
- "infraID": {
- "description": "InfraID is an identifier for this cluster generated during installation and used for tagging/naming resources in cloud providers.",
+ "namespace": {
"type": "string",
"default": ""
- },
- "platform": {
- "description": "Platform holds platform-specific cluster metadata",
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterPlatformMetadata"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterMetadata",
+ "Kind": "BackupReference",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterOperatorState": {
- "description": "ClusterOperatorState summarizes the status of a single cluster operator",
+ "io.openshift.hive.v1.CertificateBundleSpec": {
+ "description": "CertificateBundleSpec specifies a certificate bundle associated with a cluster deployment",
"type": "object",
"required": [
- "name"
+ "name",
+ "certificateSecretRef"
],
"properties": {
- "conditions": {
- "description": "Conditions is the set of conditions in the status of the cluster operator on the target cluster",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatusCondition"
- }
+ "certificateSecretRef": {
+ "description": "CertificateSecretRef is the reference to the secret that contains the certificate bundle. If the certificate bundle is to be generated, it will be generated with the name in this reference. Otherwise, it is expected that the secret should exist in the same namespace as the ClusterDeployment",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "generate": {
+ "description": "Generate indicates whether this bundle should have real certificates generated for it.",
+ "type": "boolean"
},
"name": {
- "description": "Name is the name of the cluster operator",
+ "description": "Name is an identifier that must be unique within the bundle and must be referenced by an ingress or by the control plane serving certs",
"type": "string",
"default": ""
}
@@ -83230,40 +84576,40 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterOperatorState",
+ "Kind": "CertificateBundleSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterPlatformMetadata": {
+ "io.openshift.hive.v1.CertificateBundleStatus": {
+ "description": "CertificateBundleStatus specifies whether a certificate bundle was generated for this cluster deployment.",
"type": "object",
+ "required": [
+ "name",
+ "generated"
+ ],
"properties": {
- "aws": {
- "description": "AWS holds AWS-specific cluster metadata",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.Metadata"
- },
- "azure": {
- "description": "Azure holds azure-specific cluster metadata",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.azure.Metadata"
+ "generated": {
+ "description": "Generated indicates whether the certificate bundle was generated",
+ "type": "boolean",
+ "default": false
},
- "gcp": {
- "description": "GCP holds GCP-specific cluster metadata",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.Metadata"
+ "name": {
+ "description": "Name of the certificate bundle",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterPlatformMetadata",
+ "Kind": "CertificateBundleStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterPool": {
- "description": "ClusterPool represents a pool of clusters that should be kept ready to be given out to users. Clusters are removed from the pool once claimed and then automatically replaced with a new one.",
+ "io.openshift.hive.v1.Checkpoint": {
+ "description": "Checkpoint is the Schema for the backup of Hive objects.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -83279,101 +84625,37 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolSpec"
+ "$ref": "#/definitions/io.openshift.hive.v1.CheckpointSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolStatus"
+ "$ref": "#/definitions/io.openshift.hive.v1.CheckpointStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterPool",
+ "Kind": "Checkpoint",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterPoolClaimLifetime": {
- "description": "ClusterPoolClaimLifetime defines the lifetimes for claims for the cluster pool.",
+ "io.openshift.hive.v1.CheckpointList": {
+ "description": "CheckpointList contains a list of Checkpoint",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "default": {
- "description": "Default is the default lifetime of the claim when no lifetime is set on the claim itself. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "maximum": {
- "description": "Maximum is the maximum lifetime of the claim after it is assigned a cluster. If the claim still exists when the lifetime has elapsed, the claim will be deleted by Hive. The lifetime of a claim is the mimimum of the lifetimes set by the cluster pool and the claim itself. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterPoolClaimLifetime",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.ClusterPoolCondition": {
- "description": "ClusterPoolCondition contains details for the current condition of a cluster pool",
- "type": "object",
- "required": [
- "type",
- "status"
- ],
- "properties": {
- "lastProbeTime": {
- "description": "LastProbeTime is the last time we probed the condition.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "lastTransitionTime": {
- "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "Message is a human-readable message indicating details about last transition.",
- "type": "string"
- },
- "reason": {
- "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.",
- "type": "string"
- },
- "status": {
- "description": "Status is the status of the condition.",
- "type": "string",
- "default": ""
- },
- "type": {
- "description": "Type is the type of the condition.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterPoolCondition",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.ClusterPoolList": {
- "description": "ClusterPoolList contains a list of ClusterPools",
- "type": "object",
- "required": [
- "items"
- ],
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
"items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterPool"
+ "$ref": "#/definitions/io.openshift.hive.v1.Checkpoint"
}
},
"kind": {
@@ -83389,211 +84671,59 @@
"Type": "list",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterPoolList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.ClusterPoolReference": {
- "description": "ClusterPoolReference is a reference to a ClusterPool",
- "type": "object",
- "required": [
- "namespace",
- "poolName"
- ],
- "properties": {
- "claimName": {
- "description": "ClaimName is the name of the ClusterClaim that claimed the cluster from the pool.",
- "type": "string"
- },
- "claimedTimestamp": {
- "description": "ClaimedTimestamp is the time this cluster was assigned to a ClusterClaim. This is only used for ClusterDeployments belonging to ClusterPools.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "clusterDeploymentCustomization": {
- "description": "CustomizationRef is the ClusterPool Inventory claimed customization for this ClusterDeployment. The Customization exists in the ClusterPool namespace.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "namespace": {
- "description": "Namespace is the namespace where the ClusterPool resides.",
- "type": "string",
- "default": ""
- },
- "poolName": {
- "description": "PoolName is the name of the ClusterPool for which the cluster was created.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterPoolReference",
+ "Kind": "CheckpointList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterPoolSpec": {
- "description": "ClusterPoolSpec defines the desired state of the ClusterPool.",
+ "io.openshift.hive.v1.CheckpointSpec": {
+ "description": "CheckpointSpec defines the metadata around the Hive objects state in the namespace at the time of the last backup.",
"type": "object",
"required": [
- "platform",
- "size",
- "baseDomain",
- "imageSetRef"
+ "lastBackupChecksum",
+ "lastBackupTime",
+ "lastBackupRef"
],
"properties": {
- "annotations": {
- "description": "Annotations to be applied to new ClusterDeployments created for the pool. ClusterDeployments that have already been claimed will not be affected when this value is modified.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "baseDomain": {
- "description": "BaseDomain is the base domain to use for all clusters created in this pool.",
+ "lastBackupChecksum": {
+ "description": "LastBackupChecksum is the checksum of all Hive objects in the namespace at the time of the last backup.",
"type": "string",
"default": ""
},
- "claimLifetime": {
- "description": "ClaimLifetime defines the lifetimes for claims for the cluster pool.",
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolClaimLifetime"
- },
- "hibernateAfter": {
- "description": "HibernateAfter will be applied to new ClusterDeployments created for the pool. HibernateAfter will transition clusters in the clusterpool to hibernating power state after it has been running for the given duration. The time that a cluster has been running is the time since the cluster was installed or the time since the cluster last came out of hibernation. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "hibernationConfig": {
- "description": "HibernationConfig configures the hibernation/resume behavior of ClusterDeployments owned by the ClusterPool.",
- "$ref": "#/definitions/io.openshift.hive.v1.HibernationConfig"
- },
- "imageSetRef": {
- "description": "ImageSetRef is a reference to a ClusterImageSet. The release image specified in the ClusterImageSet will be used by clusters created for this cluster pool.",
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSetReference"
- },
- "installAttemptsLimit": {
- "description": "InstallAttemptsLimit is the maximum number of times Hive will attempt to install the cluster.",
- "type": "integer",
- "format": "int32"
- },
- "installConfigSecretTemplateRef": {
- "description": "InstallConfigSecretTemplateRef is a secret with the key install-config.yaml consisting of the content of the install-config.yaml to be used as a template for all clusters in this pool. Cluster specific settings (name, basedomain) will be injected dynamically when the ClusterDeployment install-config Secret is generated.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "installerEnv": {
- "description": "InstallerEnv are extra environment variables to pass through to the installer. This may be used to enable additional features of the installer.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
- }
- },
- "inventory": {
- "description": "Inventory maintains a list of entries consumed by the ClusterPool to customize the default ClusterDeployment.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.InventoryEntry"
- }
- },
- "labels": {
- "description": "Labels to be applied to new ClusterDeployments created for the pool. ClusterDeployments that have already been claimed will not be affected when this value is modified.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "maxConcurrent": {
- "description": "MaxConcurrent is the maximum number of clusters that will be provisioned or deprovisioned at an time. This includes the claimed clusters being deprovisioned. By default there is no limit.",
- "type": "integer",
- "format": "int32"
- },
- "maxSize": {
- "description": "MaxSize is the maximum number of clusters that will be provisioned including clusters that have been claimed and ones waiting to be used. By default there is no limit.",
- "type": "integer",
- "format": "int32"
- },
- "platform": {
- "description": "Platform encompasses the desired platform for the cluster.",
+ "lastBackupRef": {
+ "description": "LastBackupRef is a reference to last backup object created",
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.Platform"
- },
- "pullSecretRef": {
- "description": "PullSecretRef is the reference to the secret to use when pulling images.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "runningCount": {
- "description": "RunningCount is the number of clusters we should keep running. The remainder will be kept hibernated until claimed. By default no clusters will be kept running (all will be hibernated).",
- "type": "integer",
- "format": "int32"
- },
- "size": {
- "description": "Size is the default number of clusters that we should keep provisioned and waiting for use.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "$ref": "#/definitions/io.openshift.hive.v1.BackupReference"
},
- "skipMachinePools": {
- "description": "SkipMachinePools allows creating clusterpools where the machinepools are not managed by hive after cluster creation",
- "type": "boolean"
+ "lastBackupTime": {
+ "description": "LastBackupTime is the last time we performed a backup of the namespace",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterPoolSpec",
+ "Kind": "CheckpointSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterPoolStatus": {
- "description": "ClusterPoolStatus defines the observed state of ClusterPool",
+ "io.openshift.hive.v1.CheckpointStatus": {
+ "description": "CheckpointStatus defines the observed state of Checkpoint",
"type": "object",
- "required": [
- "size",
- "ready"
- ],
- "properties": {
- "conditions": {
- "description": "Conditions includes more detailed status for the cluster pool",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolCondition"
- }
- },
- "ready": {
- "description": "Ready is the number of unclaimed clusters that are installed and are running and ready to be claimed.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "size": {
- "description": "Size is the number of unclaimed clusters that have been created for the pool.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "standby": {
- "description": "Standby is the number of unclaimed clusters that are installed, but not running.",
- "type": "integer",
- "format": "int32",
- "default": 0
- }
- },
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterPoolStatus",
+ "Kind": "CheckpointStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterProvision": {
- "description": "ClusterProvision is the Schema for the clusterprovisions API",
+ "io.openshift.hive.v1.ClusterClaim": {
+ "description": "ClusterClaim represents a claim to a cluster from a cluster pool.",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -83609,23 +84739,23 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterProvisionSpec"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterClaimSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterProvisionStatus"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterClaimStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterProvision",
+ "Kind": "ClusterClaim",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterProvisionCondition": {
- "description": "ClusterProvisionCondition contains details for the current condition of a cluster provision",
+ "io.openshift.hive.v1.ClusterClaimCondition": {
+ "description": "ClusterClaimCondition contains details for the current condition of a cluster claim.",
"type": "object",
"required": [
"type",
@@ -83663,12 +84793,12 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterProvisionCondition",
+ "Kind": "ClusterClaimCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterProvisionList": {
- "description": "ClusterProvisionList contains a list of ClusterProvision",
+ "io.openshift.hive.v1.ClusterClaimList": {
+ "description": "ClusterClaimList contains a list of ClusterClaims.",
"type": "object",
"required": [
"items"
@@ -83682,7 +84812,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterProvision"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterClaim"
}
},
"kind": {
@@ -83698,118 +84828,74 @@
"Type": "list",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterProvisionList",
+ "Kind": "ClusterClaimList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterProvisionSpec": {
- "description": "ClusterProvisionSpec defines the results of provisioning a cluster.",
+ "io.openshift.hive.v1.ClusterClaimSpec": {
+ "description": "ClusterClaimSpec defines the desired state of the ClusterClaim.",
"type": "object",
"required": [
- "clusterDeploymentRef",
- "podSpec",
- "attempt",
- "stage"
+ "clusterPoolName"
],
"properties": {
- "adminKubeconfigSecretRef": {
- "description": "AdminKubeconfigSecretRef references the secret containing the admin kubeconfig for this cluster.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "adminPasswordSecretRef": {
- "description": "AdminPasswordSecretRef references the secret containing the admin username/password which can be used to login to this cluster.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "attempt": {
- "description": "Attempt is which attempt number of the cluster deployment that this ClusterProvision is",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "clusterDeploymentRef": {
- "description": "ClusterDeploymentRef references the cluster deployment provisioned.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "clusterID": {
- "description": "ClusterID is a globally unique identifier for this cluster generated during installation. Used for reporting metrics among other places.",
- "type": "string"
- },
- "infraID": {
- "description": "InfraID is an identifier for this cluster generated during installation and used for tagging/naming resources in cloud providers.",
- "type": "string"
- },
- "installLog": {
- "description": "InstallLog is the log from the installer.",
- "type": "string"
- },
- "metadata": {
- "description": "Metadata is the metadata.json generated by the installer, providing metadata information about the cluster created. NOTE: This is not used because it didn't work (it was always empty). We think because the thing it's storing (ClusterMetadata from installer) is not a runtime.Object, so can't be put in a RawExtension.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "metadataJSON": {
- "description": "MetadataJSON is a JSON representation of the ClusterMetadata produced by the installer. We don't use a runtime.RawExtension because ClusterMetadata isn't a runtime.Object. We don't use ClusterMetadata itself because we don't want our API consumers to need to pull in the installer code and its dependencies.",
+ "clusterPoolName": {
+ "description": "ClusterPoolName is the name of the cluster pool from which to claim a cluster.",
"type": "string",
- "format": "byte"
- },
- "podSpec": {
- "description": "PodSpec is the spec to use for the installer pod.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.PodSpec"
- },
- "prevClusterID": {
- "description": "PrevClusterID is the cluster ID of the previous failed provision attempt.",
- "type": "string"
+ "default": ""
},
- "prevInfraID": {
- "description": "PrevInfraID is the infra ID of the previous failed provision attempt.",
- "type": "string"
+ "lifetime": {
+ "description": "Lifetime is the maximum lifetime of the claim after it is assigned a cluster. If the claim still exists when the lifetime has elapsed, the claim will be deleted by Hive. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
},
- "prevProvisionName": {
- "description": "PrevProvisionName is the name of the previous failed provision attempt.",
+ "namespace": {
+ "description": "Namespace is the namespace containing the ClusterDeployment (name will match the namespace) of the claimed cluster. This field will be set as soon as a suitable cluster can be found, however that cluster may still be resuming and not yet ready for use. Wait for the ClusterRunning condition to be true to avoid this issue.",
"type": "string"
},
- "stage": {
- "description": "Stage is the stage of provisioning that the cluster deployment has reached.",
- "type": "string",
- "default": ""
+ "subjects": {
+ "description": "Subjects hold references to which to authorize access to the claimed cluster.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.rbac.v1.Subject"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterProvisionSpec",
+ "Kind": "ClusterClaimSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterProvisionStatus": {
- "description": "ClusterProvisionStatus defines the observed state of ClusterProvision.",
+ "io.openshift.hive.v1.ClusterClaimStatus": {
+ "description": "ClusterClaimStatus defines the observed state of ClusterClaim.",
"type": "object",
"properties": {
"conditions": {
- "description": "Conditions includes more detailed status for the cluster provision",
+ "description": "Conditions includes more detailed status for the cluster pool.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterProvisionCondition"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterClaimCondition"
}
},
- "jobRef": {
- "description": "JobRef is the reference to the job performing the provision.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "lifetime": {
+ "description": "Lifetime is the maximum lifetime of the claim after it is assigned a cluster. If the claim still exists when the lifetime has elapsed, the claim will be deleted by Hive.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterProvisionStatus",
+ "Kind": "ClusterClaimStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterRelocate": {
- "description": "ClusterRelocate is the Schema for the ClusterRelocates API",
+ "io.openshift.hive.v1.ClusterDeployment": {
+ "description": "ClusterDeployment is the Schema for the clusterdeployments API",
"type": "object",
"properties": {
"apiVersion": {
@@ -83826,97 +84912,70 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterRelocateSpec"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterRelocateStatus"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterRelocate",
- "Scope": "Clustered"
+ "Kind": "ClusterDeployment",
+ "Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterRelocateList": {
- "description": "ClusterRelocateList contains a list of ClusterRelocate",
+ "io.openshift.hive.v1.ClusterDeploymentCondition": {
+ "description": "ClusterDeploymentCondition contains details for the current condition of a cluster deployment",
"type": "object",
"required": [
- "items"
+ "type",
+ "status"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "lastProbeTime": {
+ "description": "LastProbeTime is the last time we probed the condition.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterRelocate"
- }
+ "lastTransitionTime": {
+ "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "message": {
+ "description": "Message is a human-readable message indicating details about last transition.",
"type": "string"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
- }
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterRelocateList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.ClusterRelocateSpec": {
- "description": "ClusterRelocateSpec defines the relocation of clusters from one Hive instance to another.",
- "type": "object",
- "required": [
- "kubeconfigSecretRef",
- "clusterDeploymentSelector"
- ],
- "properties": {
- "clusterDeploymentSelector": {
- "description": "ClusterDeploymentSelector is a LabelSelector indicating which clusters will be relocated.",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ "reason": {
+ "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.",
+ "type": "string"
},
- "kubeconfigSecretRef": {
- "description": "KubeconfigSecretRef is a reference to the secret containing the kubeconfig for the destination Hive instance. The kubeconfig must be in a data field where the key is \"kubeconfig\".",
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.KubeconfigSecretReference"
+ "status": {
+ "description": "Status is the status of the condition.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "Type is the type of the condition.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterRelocateSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.ClusterRelocateStatus": {
- "description": "ClusterRelocateStatus defines the observed state of ClusterRelocate.",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterRelocateStatus",
+ "Kind": "ClusterDeploymentCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterState": {
- "description": "ClusterState is the Schema for the clusterstates API",
+ "io.openshift.hive.v1.ClusterDeploymentCustomization": {
+ "description": "ClusterDeploymentCustomization is the Schema for clusterdeploymentcustomizations API.",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -83932,23 +84991,23 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterStateSpec"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentCustomizationSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterStateStatus"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentCustomizationStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterState",
+ "Kind": "ClusterDeploymentCustomization",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterStateList": {
- "description": "ClusterStateList contains a list of ClusterState",
+ "io.openshift.hive.v1.ClusterDeploymentCustomizationList": {
+ "description": "ClusterDeploymentCustomizationList contains a list of ClusterDeploymentCustomizations.",
"type": "object",
"required": [
"items"
@@ -83962,7 +85021,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterState"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentCustomization"
}
},
"kind": {
@@ -83978,198 +85037,281 @@
"Type": "list",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterStateList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.ClusterStateSpec": {
- "description": "ClusterStateSpec defines the desired state of ClusterState",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ClusterStateSpec",
+ "Kind": "ClusterDeploymentCustomizationList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ClusterStateStatus": {
- "description": "ClusterStateStatus defines the observed state of ClusterState",
+ "io.openshift.hive.v1.ClusterDeploymentCustomizationSpec": {
+ "description": "ClusterDeploymentCustomizationSpec defines the desired state of ClusterDeploymentCustomization.",
"type": "object",
"properties": {
- "clusterOperators": {
- "description": "ClusterOperators contains the state for every cluster operator in the target cluster",
+ "installConfigPatches": {
+ "description": "InstallConfigPatches is a list of patches to be applied to the install-config.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterOperatorState"
+ "$ref": "#/definitions/io.openshift.hive.v1.PatchEntity"
}
- },
- "lastUpdated": {
- "description": "LastUpdated is the last time that operator state was updated",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ClusterStateStatus",
+ "Kind": "ClusterDeploymentCustomizationSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ControlPlaneAdditionalCertificate": {
- "description": "ControlPlaneAdditionalCertificate defines an additional serving certificate for a control plane",
+ "io.openshift.hive.v1.ClusterDeploymentCustomizationStatus": {
+ "description": "ClusterDeploymentCustomizationStatus defines the observed state of ClusterDeploymentCustomization.",
"type": "object",
- "required": [
- "name",
- "domain"
- ],
"properties": {
- "domain": {
- "description": "Domain is the domain of the additional control plane certificate",
- "type": "string",
- "default": ""
+ "clusterDeploymentRef": {
+ "description": "ClusterDeploymentRef is a reference to the cluster deployment that this customization is applied on.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "name": {
- "description": "Name references a CertificateBundle in the ClusterDeployment.Spec that should be used for this additional certificate.",
- "type": "string",
- "default": ""
+ "clusterPoolRef": {
+ "description": "ClusterPoolRef is the name of the current cluster pool the CDC used at.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "conditions": {
+ "description": "Conditions describes the state of the operator's reconciliation functionality.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/com.github.openshift.custom-resource-status.conditions.v1.Condition"
+ },
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
+ },
+ "lastAppliedConfiguration": {
+ "description": "LastAppliedConfiguration contains the last applied patches to the install-config. The information will retain for reference in case the customization is updated.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ControlPlaneAdditionalCertificate",
+ "Kind": "ClusterDeploymentCustomizationStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ControlPlaneConfigSpec": {
- "description": "ControlPlaneConfigSpec contains additional configuration settings for a target cluster's control plane.",
+ "io.openshift.hive.v1.ClusterDeploymentList": {
+ "description": "ClusterDeploymentList contains a list of ClusterDeployment",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "apiServerIPOverride": {
- "description": "APIServerIPOverride is the optional override of the API server IP address. Hive will use this IP address for creating TCP connections. Port from the original API server URL will be used. This field can be used when repointing the APIServer's DNS is not viable option.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "apiURLOverride": {
- "description": "APIURLOverride is the optional URL override to which Hive will transition for communication with the API server of the remote cluster. When a remote cluster is created, Hive will initially communicate using the API URL established during installation. If an API URL Override is specified, Hive will periodically attempt to connect to the remote cluster using the override URL. Once Hive has determined that the override URL is active, Hive will use the override URL for further communications with the API server of the remote cluster.",
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeployment"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "servingCertificates": {
- "description": "ServingCertificates specifies serving certificates for the control plane",
+ "metadata": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ControlPlaneServingCertificateSpec"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ControlPlaneConfigSpec",
+ "Kind": "ClusterDeploymentList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ControlPlaneServingCertificateSpec": {
- "description": "ControlPlaneServingCertificateSpec specifies serving certificate settings for the control plane of the target cluster.",
+ "io.openshift.hive.v1.ClusterDeploymentSpec": {
+ "description": "ClusterDeploymentSpec defines the desired state of ClusterDeployment",
"type": "object",
+ "required": [
+ "clusterName",
+ "baseDomain",
+ "platform"
+ ],
"properties": {
- "additional": {
- "description": "Additional is a list of additional domains and certificates that are also associated with the control plane's api endpoint.",
+ "baseDomain": {
+ "description": "BaseDomain is the base domain to which the cluster should belong.",
+ "type": "string",
+ "default": ""
+ },
+ "boundServiceAccountSigningKeySecretRef": {
+ "description": "BoundServiceAccountSigningKeySecretRef refers to a Secret that contains a 'bound-service-account-signing-key.key' data key pointing to the private key that will be used to sign ServiceAccount objects. Primarily used to provision AWS clusters to use Amazon's Security Token Service.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "certificateBundles": {
+ "description": "CertificateBundles is a list of certificate bundles associated with this cluster",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ControlPlaneAdditionalCertificate"
+ "$ref": "#/definitions/io.openshift.hive.v1.CertificateBundleSpec"
}
},
- "default": {
- "description": "Default references the name of a CertificateBundle in the ClusterDeployment that should be used for the control plane's default endpoint.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "ControlPlaneServingCertificateSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.ControllerConfig": {
- "description": "ControllerConfig contains the configuration for a controller",
- "type": "object",
- "properties": {
- "clientBurst": {
- "description": "ClientBurst specifies client rate limiter burst for a controller",
- "type": "integer",
- "format": "int32"
+ "clusterInstallRef": {
+ "description": "ClusterInstallLocalReference provides reference to an object that implements the hivecontract ClusterInstall. The namespace of the object is same as the ClusterDeployment. This cannot be set when Provisioning is also set.",
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterInstallLocalReference"
},
- "clientQPS": {
- "description": "ClientQPS specifies client rate limiter QPS for a controller",
- "type": "integer",
- "format": "int32"
+ "clusterMetadata": {
+ "description": "ClusterMetadata contains metadata information about the installed cluster.",
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterMetadata"
},
- "concurrentReconciles": {
- "description": "ConcurrentReconciles specifies number of concurrent reconciles for a controller",
- "type": "integer",
- "format": "int32"
+ "clusterName": {
+ "description": "ClusterName is the friendly name of the cluster. It is used for subdomains, some resource tagging, and other instances where a friendly name for the cluster is useful.",
+ "type": "string",
+ "default": ""
},
- "queueBurst": {
- "description": "QueueBurst specifies workqueue rate limiter burst for a controller",
- "type": "integer",
- "format": "int32"
+ "clusterPoolRef": {
+ "description": "ClusterPoolRef is a reference to the ClusterPool that this ClusterDeployment originated from.",
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolReference"
},
- "queueQPS": {
- "description": "QueueQPS specifies workqueue rate limiter QPS for a controller",
- "type": "integer",
- "format": "int32"
+ "controlPlaneConfig": {
+ "description": "ControlPlaneConfig contains additional configuration for the target cluster's control plane",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ControlPlaneConfigSpec"
},
- "replicas": {
- "description": "Replicas specifies the number of replicas the specific controller pod should use. This is ONLY for controllers that have been split out into their own pods. This is ignored for all others.",
+ "hibernateAfter": {
+ "description": "HibernateAfter will transition a cluster to hibernating power state after it has been running for the given duration. The time that a cluster has been running is the time since the cluster was installed or the time since the cluster last came out of hibernation. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "ingress": {
+ "description": "Ingress allows defining desired clusteringress/shards to be configured on the cluster.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterIngress"
+ }
+ },
+ "installAttemptsLimit": {
+ "description": "InstallAttemptsLimit is the maximum number of times Hive will attempt to install the cluster.",
"type": "integer",
"format": "int32"
},
- "resources": {
- "description": "Resources describes the compute resource requirements of the controller container. This is ONLY for controllers that have been split out into their own pods. This is ignored for all others.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
+ "installed": {
+ "description": "Installed is true if the cluster has been installed",
+ "type": "boolean",
+ "default": false
+ },
+ "manageDNS": {
+ "description": "ManageDNS specifies whether a DNSZone should be created and managed automatically for this ClusterDeployment",
+ "type": "boolean"
+ },
+ "platform": {
+ "description": "Platform is the configuration for the specific platform upon which to perform the installation.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.Platform"
+ },
+ "powerState": {
+ "description": "PowerState indicates whether a cluster should be running or hibernating. When omitted, PowerState defaults to the Running state.",
+ "type": "string"
+ },
+ "preserveOnDelete": {
+ "description": "PreserveOnDelete allows the user to disconnect a cluster from Hive without deprovisioning it. This can also be used to abandon ongoing cluster deprovision.",
+ "type": "boolean"
+ },
+ "provisioning": {
+ "description": "Provisioning contains settings used only for initial cluster provisioning. May be unset in the case of adopted clusters.",
+ "$ref": "#/definitions/io.openshift.hive.v1.Provisioning"
+ },
+ "pullSecretRef": {
+ "description": "PullSecretRef is the reference to the secret to use when pulling images.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ControllerConfig",
+ "Kind": "ClusterDeploymentSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ControllersConfig": {
- "description": "ControllersConfig contains default as well as controller specific configurations",
+ "io.openshift.hive.v1.ClusterDeploymentStatus": {
+ "description": "ClusterDeploymentStatus defines the observed state of ClusterDeployment",
"type": "object",
"properties": {
- "controllers": {
- "description": "Controllers contains a list of configurations for different controllers",
+ "apiURL": {
+ "description": "APIURL is the URL where the cluster's API can be accessed.",
+ "type": "string"
+ },
+ "certificateBundles": {
+ "description": "CertificateBundles contains of the status of the certificate bundles associated with this cluster deployment.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SpecificControllerConfig"
+ "$ref": "#/definitions/io.openshift.hive.v1.CertificateBundleStatus"
}
},
- "default": {
- "description": "Default specifies default configuration for all the controllers, can be used to override following coded defaults default for concurrent reconciles is 5 default for client qps is 5 default for client burst is 10 default for queue qps is 10 default for queue burst is 100",
- "$ref": "#/definitions/io.openshift.hive.v1.ControllerConfig"
+ "cliImage": {
+ "description": "CLIImage is the name of the oc cli image to use when installing the target cluster",
+ "type": "string"
+ },
+ "conditions": {
+ "description": "Conditions includes more detailed status for the cluster deployment",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentCondition"
+ }
+ },
+ "installRestarts": {
+ "description": "InstallRestarts is the total count of container restarts on the clusters install job.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "installStartedTimestamp": {
+ "description": "InstallStartedTimestamp is the time when all pre-requisites were met and cluster installation was launched.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "installVersion": {
+ "description": "InstallVersion is the version of OpenShift as reported by the release image resolved for the installation.",
+ "type": "string"
+ },
+ "installedTimestamp": {
+ "description": "InstalledTimestamp is the time we first detected that the cluster has been successfully installed.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "installerImage": {
+ "description": "InstallerImage is the name of the installer image to use when installing the target cluster",
+ "type": "string"
+ },
+ "platformStatus": {
+ "description": "Platform contains the observed state for the specific platform upon which to perform the installation.",
+ "$ref": "#/definitions/io.openshift.hive.v1.PlatformStatus"
+ },
+ "powerState": {
+ "description": "PowerState indicates the powerstate of cluster",
+ "type": "string"
+ },
+ "provisionRef": {
+ "description": "ProvisionRef is a reference to the last ClusterProvision created for the deployment",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "webConsoleURL": {
+ "description": "WebConsoleURL is the URL for the cluster's web console UI.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ControllersConfig",
+ "Kind": "ClusterDeploymentStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.DNSZone": {
- "description": "DNSZone is the Schema for the dnszones API",
+ "io.openshift.hive.v1.ClusterDeprovision": {
+ "description": "ClusterDeprovision is the Schema for the clusterdeprovisions API",
"type": "object",
"properties": {
"apiVersion": {
@@ -84186,23 +85328,23 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.DNSZoneSpec"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovisionSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.DNSZoneStatus"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovisionStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "DNSZone",
+ "Kind": "ClusterDeprovision",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.DNSZoneCondition": {
- "description": "DNSZoneCondition contains details for the current condition of a DNSZone",
+ "io.openshift.hive.v1.ClusterDeprovisionCondition": {
+ "description": "ClusterDeprovisionCondition contains details for the current condition of a ClusterDeprovision",
"type": "object",
"required": [
"type",
@@ -84240,12 +85382,12 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "DNSZoneCondition",
+ "Kind": "ClusterDeprovisionCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.DNSZoneList": {
- "description": "DNSZoneList contains a list of DNSZone",
+ "io.openshift.hive.v1.ClusterDeprovisionList": {
+ "description": "ClusterDeprovisionList contains a list of ClusterDeprovision",
"type": "object",
"required": [
"items"
@@ -84259,7 +85401,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.DNSZone"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovision"
}
},
"kind": {
@@ -84275,365 +85417,414 @@
"Type": "list",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "DNSZoneList",
+ "Kind": "ClusterDeprovisionList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.DNSZoneSpec": {
- "description": "DNSZoneSpec defines the desired state of DNSZone",
+ "io.openshift.hive.v1.ClusterDeprovisionPlatform": {
+ "description": "ClusterDeprovisionPlatform contains platform-specific configuration for the deprovision",
"type": "object",
- "required": [
- "zone"
- ],
"properties": {
"aws": {
- "description": "AWS specifies AWS-specific cloud configuration",
- "$ref": "#/definitions/io.openshift.hive.v1.AWSDNSZoneSpec"
+ "description": "AWS contains AWS-specific deprovision settings",
+ "$ref": "#/definitions/io.openshift.hive.v1.AWSClusterDeprovision"
},
"azure": {
- "description": "Azure specifes Azure-specific cloud configuration",
- "$ref": "#/definitions/io.openshift.hive.v1.AzureDNSZoneSpec"
+ "description": "Azure contains Azure-specific deprovision settings",
+ "$ref": "#/definitions/io.openshift.hive.v1.AzureClusterDeprovision"
},
"gcp": {
- "description": "GCP specifies GCP-specific cloud configuration",
- "$ref": "#/definitions/io.openshift.hive.v1.GCPDNSZoneSpec"
+ "description": "GCP contains GCP-specific deprovision settings",
+ "$ref": "#/definitions/io.openshift.hive.v1.GCPClusterDeprovision"
},
- "linkToParentDomain": {
- "description": "LinkToParentDomain specifies whether DNS records should be automatically created to link this DNSZone with a parent domain.",
- "type": "boolean"
+ "ibmcloud": {
+ "description": "IBMCloud contains IBM Cloud specific deprovision settings",
+ "$ref": "#/definitions/io.openshift.hive.v1.IBMClusterDeprovision"
},
- "preserveOnDelete": {
- "description": "PreserveOnDelete allows the user to disconnect a DNSZone from Hive without deprovisioning it. This can also be used to abandon ongoing DNSZone deprovision. Typically set automatically due to PreserveOnDelete being set on a ClusterDeployment.",
- "type": "boolean"
+ "openstack": {
+ "description": "OpenStack contains OpenStack-specific deprovision settings",
+ "$ref": "#/definitions/io.openshift.hive.v1.OpenStackClusterDeprovision"
},
- "zone": {
- "description": "Zone is the DNS zone to host",
- "type": "string",
- "default": ""
+ "ovirt": {
+ "description": "Ovirt contains oVirt-specific deprovision settings",
+ "$ref": "#/definitions/io.openshift.hive.v1.OvirtClusterDeprovision"
+ },
+ "vsphere": {
+ "description": "VSphere contains VMWare vSphere-specific deprovision settings",
+ "$ref": "#/definitions/io.openshift.hive.v1.VSphereClusterDeprovision"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "DNSZoneSpec",
+ "Kind": "ClusterDeprovisionPlatform",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.DNSZoneStatus": {
- "description": "DNSZoneStatus defines the observed state of DNSZone",
+ "io.openshift.hive.v1.ClusterDeprovisionSpec": {
+ "description": "ClusterDeprovisionSpec defines the desired state of ClusterDeprovision",
"type": "object",
+ "required": [
+ "infraID"
+ ],
"properties": {
- "aws": {
- "description": "AWSDNSZoneStatus contains status information specific to AWS",
- "$ref": "#/definitions/io.openshift.hive.v1.AWSDNSZoneStatus"
- },
- "azure": {
- "description": "AzureDNSZoneStatus contains status information specific to Azure",
- "$ref": "#/definitions/io.openshift.hive.v1.AzureDNSZoneStatus"
- },
- "conditions": {
- "description": "Conditions includes more detailed status for the DNSZone",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.DNSZoneCondition"
- }
+ "baseDomain": {
+ "description": "BaseDomain is the DNS base domain.",
+ "type": "string"
},
- "gcp": {
- "description": "GCPDNSZoneStatus contains status information specific to GCP",
- "$ref": "#/definitions/io.openshift.hive.v1.GCPDNSZoneStatus"
+ "clusterID": {
+ "description": "ClusterID is a globally unique identifier for the cluster to deprovision. It will be used if specified.",
+ "type": "string"
},
- "lastSyncGeneration": {
- "description": "LastSyncGeneration is the generation of the zone resource that was last sync'd. This is used to know if the Object has changed and we should sync immediately.",
- "type": "integer",
- "format": "int64"
+ "clusterName": {
+ "description": "ClusterName is the friendly name of the cluster. It is used for subdomains, some resource tagging, and other instances where a friendly name for the cluster is useful.",
+ "type": "string"
},
- "lastSyncTimestamp": {
- "description": "LastSyncTimestamp is the time that the zone was last sync'd.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "infraID": {
+ "description": "InfraID is the identifier generated during installation for a cluster. It is used for tagging/naming resources in cloud providers.",
+ "type": "string",
+ "default": ""
},
- "nameServers": {
- "description": "NameServers is a list of nameservers for this DNS zone",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "platform": {
+ "description": "Platform contains platform-specific configuration for a ClusterDeprovision",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovisionPlatform"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "DNSZoneStatus",
+ "Kind": "ClusterDeprovisionSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.DeploymentConfig": {
+ "io.openshift.hive.v1.ClusterDeprovisionStatus": {
+ "description": "ClusterDeprovisionStatus defines the observed state of ClusterDeprovision",
"type": "object",
- "required": [
- "deploymentName"
- ],
"properties": {
- "deploymentName": {
- "description": "DeploymentName is the name of one of the Deployments/StatefulSets managed by hive-operator. NOTE: At this time each deployment has only one container. In the future, we may provide a way to specify which container this DeploymentConfig will be applied to.",
- "type": "string",
- "default": ""
+ "completed": {
+ "description": "Completed is true when the uninstall has completed successfully",
+ "type": "boolean"
},
- "resources": {
- "description": "Resources allows customization of the resource (memory, CPU, etc.) limits and requests used by containers in the Deployment/StatefulSet named by DeploymentName.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
+ "conditions": {
+ "description": "Conditions includes more detailed status for the cluster deprovision",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovisionCondition"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "DeploymentConfig",
+ "Kind": "ClusterDeprovisionStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.FailedProvisionAWSConfig": {
- "description": "FailedProvisionAWSConfig contains AWS-specific info to upload log files.",
+ "io.openshift.hive.v1.ClusterImageSet": {
+ "description": "ClusterImageSet is the Schema for the clusterimagesets API",
"type": "object",
- "required": [
- "credentialsSecretRef"
- ],
"properties": {
- "bucket": {
- "description": "Bucket is the S3 bucket to store the logs in.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS S3. It will need permission to upload logs to S3. Secret should have keys named aws_access_key_id and aws_secret_access_key that contain the AWS credentials. Example Secret:\n data:\n aws_access_key_id: minio\n aws_secret_access_key: minio123",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "region": {
- "description": "Region is the AWS region to use for S3 operations. This defaults to us-east-1. For AWS China, use cn-northwest-1.",
- "type": "string"
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSetSpec"
},
- "serviceEndpoint": {
- "description": "ServiceEndpoint is the url to connect to an S3 compatible provider.",
- "type": "string"
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSetStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "FailedProvisionAWSConfig",
- "Scope": "Namespaced"
+ "Kind": "ClusterImageSet",
+ "Scope": "Clustered"
}
},
- "io.openshift.hive.v1.FailedProvisionConfig": {
- "description": "FailedProvisionConfig contains settings to control behavior undertaken by Hive when an installation attempt fails.",
+ "io.openshift.hive.v1.ClusterImageSetList": {
+ "description": "ClusterImageSetList contains a list of ClusterImageSet",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "aws": {
- "$ref": "#/definitions/io.openshift.hive.v1.FailedProvisionAWSConfig"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "retryReasons": {
- "description": "RetryReasons is a list of installFailingReason strings from the [additional-]install-log-regexes ConfigMaps. If specified, Hive will only retry a failed installation if it results in one of the listed reasons. If omitted (not the same thing as empty!), Hive will retry regardless of the failure reason. (The total number of install attempts is still constrained by ClusterDeployment.Spec.InstallAttemptsLimit.)",
+ "items": {
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSet"
}
},
- "skipGatherLogs": {
- "description": "DEPRECATED: This flag is no longer respected and will be removed in the future.",
- "type": "boolean"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "FailedProvisionConfig",
+ "Kind": "ClusterImageSetList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.FeatureGateSelection": {
- "description": "FeatureGateSelection allows selecting feature gates for the controller.",
+ "io.openshift.hive.v1.ClusterImageSetReference": {
+ "description": "ClusterImageSetReference is a reference to a ClusterImageSet",
"type": "object",
+ "required": [
+ "name"
+ ],
"properties": {
- "custom": {
- "description": "custom allows the enabling or disabling of any feature. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations might cause unknown behavior. featureSet must equal \"Custom\" must be set to use this field.",
- "$ref": "#/definitions/io.openshift.hive.v1.FeatureGatesEnabled"
- },
- "featureSet": {
- "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting.",
- "type": "string"
+ "name": {
+ "description": "Name is the name of the ClusterImageSet that this refers to",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "FeatureGateSelection",
+ "Kind": "ClusterImageSetReference",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.FeatureGatesEnabled": {
- "description": "FeatureGatesEnabled is list of feature gates that must be enabled.",
+ "io.openshift.hive.v1.ClusterImageSetSpec": {
+ "description": "ClusterImageSetSpec defines the desired state of ClusterImageSet",
"type": "object",
- "properties": {
- "enabled": {
- "description": "enabled is a list of all feature gates that you want to force on",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "required": [
+ "releaseImage"
+ ],
+ "properties": {
+ "releaseImage": {
+ "description": "ReleaseImage is the image that contains the payload to use when installing a cluster.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "FeatureGatesEnabled",
+ "Kind": "ClusterImageSetSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.GCPClusterDeprovision": {
- "description": "GCPClusterDeprovision contains GCP-specific configuration for a ClusterDeprovision",
+ "io.openshift.hive.v1.ClusterImageSetStatus": {
+ "description": "ClusterImageSetStatus defines the observed state of ClusterImageSet",
"type": "object",
- "required": [
- "region"
- ],
- "properties": {
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef is the GCP account credentials to use for deprovisioning the cluster",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "networkProjectID": {
- "description": "NetworkProjectID is used for shared VPC setups",
- "type": "string"
- },
- "region": {
- "description": "Region is the GCP region for this deprovision",
- "type": "string",
- "default": ""
- }
- },
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "GCPClusterDeprovision",
+ "Kind": "ClusterImageSetStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.GCPDNSZoneSpec": {
- "description": "GCPDNSZoneSpec contains GCP-specific DNSZone specifications",
+ "io.openshift.hive.v1.ClusterIngress": {
+ "description": "ClusterIngress contains the configurable pieces for any ClusterIngress objects that should exist on the cluster.",
"type": "object",
"required": [
- "credentialsSecretRef"
+ "name",
+ "domain"
],
"properties": {
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef references a secret that will be used to authenticate with GCP CloudDNS. It will need permission to create and manage CloudDNS Hosted Zones. Secret should have a key named 'osServiceAccount.json'. The credentials must specify the project to use.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "domain": {
+ "description": "Domain (sometimes referred to as shard) is the full DNS suffix that the resulting IngressController object will service (eg abcd.mycluster.mydomain.com).",
+ "type": "string",
+ "default": ""
+ },
+ "httpErrorCodePages": {
+ "description": "HttpErrorCodePages allows configuring custom HTTP error pages using the IngressController object",
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ },
+ "name": {
+ "description": "Name of the ClusterIngress object to create.",
+ "type": "string",
+ "default": ""
+ },
+ "namespaceSelector": {
+ "description": "NamespaceSelector allows filtering the list of namespaces serviced by the ingress controller.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ },
+ "routeSelector": {
+ "description": "RouteSelector allows filtering the set of Routes serviced by the ingress controller",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ },
+ "servingCertificate": {
+ "description": "ServingCertificate references a CertificateBundle in the ClusterDeployment.Spec that should be used for this Ingress",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "GCPDNSZoneSpec",
+ "Kind": "ClusterIngress",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.GCPDNSZoneStatus": {
- "description": "GCPDNSZoneStatus contains status information specific to GCP Cloud DNS zones",
+ "io.openshift.hive.v1.ClusterInstallCondition": {
+ "description": "ClusterInstallCondition contains details for the current condition of a cluster install.",
"type": "object",
+ "required": [
+ "type",
+ "status"
+ ],
"properties": {
- "zoneName": {
- "description": "ZoneName is the name of the zone in GCP Cloud DNS",
+ "lastProbeTime": {
+ "description": "LastProbeTime is the last time we probed the condition.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "lastTransitionTime": {
+ "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "description": "Message is a human-readable message indicating details about last transition.",
+ "type": "string"
+ },
+ "reason": {
+ "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.",
"type": "string"
+ },
+ "status": {
+ "description": "Status is the status of the condition.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "Type is the type of the condition.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "GCPDNSZoneStatus",
+ "Kind": "ClusterInstallCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.GCPPrivateServiceConnectConfig": {
- "description": "GCPPrivateServiceConnectConfig defines the gcp private service connect config for the private-link controller.",
+ "io.openshift.hive.v1.ClusterInstallLocalReference": {
+ "description": "ClusterInstallLocalReference provides reference to an object that implements the hivecontract ClusterInstall. The namespace of the object is same as the ClusterDeployment.",
"type": "object",
"required": [
- "credentialsSecretRef"
+ "group",
+ "version",
+ "kind",
+ "name"
],
"properties": {
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with GCP for creating the resources for GCP Private Service Connect",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "group": {
+ "type": "string",
+ "default": ""
},
- "endpointVPCInventory": {
- "description": "EndpointVPCInventory is a list of VPCs and the corresponding subnets in various GCP regions. The controller uses this list to choose a VPC for creating GCP Endpoints. Since the VPC Endpoints must be in the same region as the ClusterDeployment, we must have VPCs in that region to be able to setup Private Service Connect.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.GCPPrivateServiceConnectInventory"
- }
+ "kind": {
+ "type": "string",
+ "default": ""
+ },
+ "name": {
+ "type": "string",
+ "default": ""
+ },
+ "version": {
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "GCPPrivateServiceConnectConfig",
+ "Kind": "ClusterInstallLocalReference",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.GCPPrivateServiceConnectInventory": {
- "description": "GCPPrivateServiceConnectInventory is a VPC and its corresponding subnets. This VPC will be used to create a GCP Endpoint whenever there is a Private Service Connect service created for a ClusterDeployment.",
+ "io.openshift.hive.v1.ClusterMetadata": {
+ "description": "ClusterMetadata contains metadata information about the installed cluster.",
"type": "object",
"required": [
- "network",
- "subnets"
+ "clusterID",
+ "infraID",
+ "adminKubeconfigSecretRef"
],
"properties": {
- "network": {
+ "adminKubeconfigSecretRef": {
+ "description": "AdminKubeconfigSecretRef references the secret containing the admin kubeconfig for this cluster.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "adminPasswordSecretRef": {
+ "description": "AdminPasswordSecretRef references the secret containing the admin username/password which can be used to login to this cluster.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "clusterID": {
+ "description": "ClusterID is a globally unique identifier for this cluster generated during installation. Used for reporting metrics among other places.",
"type": "string",
"default": ""
},
- "subnets": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.GCPPrivateServiceConnectSubnet"
- }
+ "infraID": {
+ "description": "InfraID is an identifier for this cluster generated during installation and used for tagging/naming resources in cloud providers.",
+ "type": "string",
+ "default": ""
+ },
+ "platform": {
+ "description": "Platform holds platform-specific cluster metadata",
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterPlatformMetadata"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "GCPPrivateServiceConnectInventory",
+ "Kind": "ClusterMetadata",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.GCPPrivateServiceConnectSubnet": {
- "description": "GCPPrivateServiceConnectSubnet defines subnet and the corresponding GCP region.",
+ "io.openshift.hive.v1.ClusterOperatorState": {
+ "description": "ClusterOperatorState summarizes the status of a single cluster operator",
"type": "object",
"required": [
- "subnet",
- "region"
+ "name"
],
"properties": {
- "region": {
- "type": "string",
- "default": ""
+ "conditions": {
+ "description": "Conditions is the set of conditions in the status of the cluster operator on the target cluster",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatusCondition"
+ }
},
- "subnet": {
+ "name": {
+ "description": "Name is the name of the cluster operator",
"type": "string",
"default": ""
}
@@ -84642,29 +85833,40 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "GCPPrivateServiceConnectSubnet",
+ "Kind": "ClusterOperatorState",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.HibernationConfig": {
+ "io.openshift.hive.v1.ClusterPlatformMetadata": {
"type": "object",
"properties": {
- "resumeTimeout": {
- "description": "ResumeTimeout is the maximum amount of time we will wait for an unclaimed ClusterDeployment to resume from hibernation (e.g. at the behest of runningCount, or in preparation for being claimed). If this time is exceeded, the ClusterDeployment will be considered Broken and we will replace it. The default (unspecified or zero) means no timeout -- we will allow the ClusterDeployment to continue trying to resume \"forever\". This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "aws": {
+ "description": "AWS holds AWS-specific cluster metadata",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.Metadata"
+ },
+ "azure": {
+ "description": "Azure holds azure-specific cluster metadata",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.azure.Metadata"
+ },
+ "gcp": {
+ "description": "GCP holds GCP-specific cluster metadata",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.Metadata"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "HibernationConfig",
+ "Kind": "ClusterPlatformMetadata",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.HiveConfig": {
- "description": "HiveConfig is the Schema for the hives API",
+ "io.openshift.hive.v1.ClusterPool": {
+ "description": "ClusterPool represents a pool of clusters that should be kept ready to be given out to users. Clusters are removed from the pool once claimed and then automatically replaced with a new one.",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -84680,23 +85882,44 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.HiveConfigSpec"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.HiveConfigStatus"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "HiveConfig",
- "Scope": "Clustered"
+ "Kind": "ClusterPool",
+ "Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.HiveConfigCondition": {
- "description": "HiveConfigCondition contains details for the current condition of a HiveConfig",
+ "io.openshift.hive.v1.ClusterPoolClaimLifetime": {
+ "description": "ClusterPoolClaimLifetime defines the lifetimes for claims for the cluster pool.",
+ "type": "object",
+ "properties": {
+ "default": {
+ "description": "Default is the default lifetime of the claim when no lifetime is set on the claim itself. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "maximum": {
+ "description": "Maximum is the maximum lifetime of the claim after it is assigned a cluster. If the claim still exists when the lifetime has elapsed, the claim will be deleted by Hive. The lifetime of a claim is the mimimum of the lifetimes set by the cluster pool and the claim itself. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterPoolClaimLifetime",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.ClusterPoolCondition": {
+ "description": "ClusterPoolCondition contains details for the current condition of a cluster pool",
"type": "object",
"required": [
"type",
@@ -84734,12 +85957,12 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "HiveConfigCondition",
+ "Kind": "ClusterPoolCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.HiveConfigList": {
- "description": "HiveConfigList contains a list of Hive",
+ "io.openshift.hive.v1.ClusterPoolList": {
+ "description": "ClusterPoolList contains a list of ClusterPools",
"type": "object",
"required": [
"items"
@@ -84753,7 +85976,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.HiveConfig"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterPool"
}
},
"kind": {
@@ -84769,269 +85992,210 @@
"Type": "list",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "HiveConfigList",
+ "Kind": "ClusterPoolList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.HiveConfigSpec": {
- "description": "HiveConfigSpec defines the desired state of Hive",
+ "io.openshift.hive.v1.ClusterPoolReference": {
+ "description": "ClusterPoolReference is a reference to a ClusterPool",
"type": "object",
+ "required": [
+ "namespace",
+ "poolName"
+ ],
"properties": {
- "additionalCertificateAuthoritiesSecretRef": {
- "description": "AdditionalCertificateAuthoritiesSecretRef is a list of references to secrets in the TargetNamespace that contain an additional Certificate Authority to use when communicating with target clusters. These certificate authorities will be used in addition to any self-signed CA generated by each cluster on installation. The cert data should be stored in the Secret key named 'ca.crt'.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- }
- },
- "argoCDConfig": {
- "description": "ArgoCD specifies configuration for ArgoCD integration. If enabled, Hive will automatically add provisioned clusters to ArgoCD, and remove them when they are deprovisioned.",
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ArgoCDConfig"
- },
- "awsPrivateLink": {
- "description": "AWSPrivateLink defines the configuration for the aws-private-link controller. It provides 3 major pieces of information required by the controller, 1. The Credentials that should be used to create AWS PrivateLink resources other than\n what exist in the customer's account.\n2. A list of VPCs that can be used by the controller to choose one to create AWS VPC Endpoints\n for the AWS VPC Endpoint Services created for ClusterDeployments in their\n corresponding regions.\n3. A list of VPCs that should be able to resolve the DNS addresses setup for Private Link.",
- "$ref": "#/definitions/io.openshift.hive.v1.AWSPrivateLinkConfig"
- },
- "backup": {
- "description": "Backup specifies configuration for backup integration. If absent, backup integration will be disabled.",
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.BackupConfig"
- },
- "clusterVersionPollInterval": {
- "description": "ClusterVersionPollInterval is a string duration indicating how much time must pass before checking whether we need to update the hive.openshift.io/version* labels on ClusterDeployment. If zero or unset, we'll only reconcile when the ClusterDeployment changes.",
+ "claimName": {
+ "description": "ClaimName is the name of the ClusterClaim that claimed the cluster from the pool.",
"type": "string"
},
- "controllersConfig": {
- "description": "ControllersConfig is used to configure different hive controllers",
- "$ref": "#/definitions/io.openshift.hive.v1.ControllersConfig"
- },
- "deleteProtection": {
- "description": "DeleteProtection can be set to \"enabled\" to turn on automatic delete protection for ClusterDeployments. When enabled, Hive will add the \"hive.openshift.io/protected-delete\" annotation to new ClusterDeployments. Once a ClusterDeployment has been installed, a user must remove the annotation from a ClusterDeployment prior to deleting it.",
- "type": "string"
+ "claimedTimestamp": {
+ "description": "ClaimedTimestamp is the time this cluster was assigned to a ClusterClaim. This is only used for ClusterDeployments belonging to ClusterPools.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "deploymentConfig": {
- "description": "DeploymentConfig is used to configure (pods/containers of) the Deployments generated by hive-operator.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.DeploymentConfig"
- }
+ "clusterDeploymentCustomization": {
+ "description": "CustomizationRef is the ClusterPool Inventory claimed customization for this ClusterDeployment. The Customization exists in the ClusterPool namespace.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "deprovisionsDisabled": {
- "description": "DeprovisionsDisabled can be set to true to block deprovision jobs from running.",
- "type": "boolean"
+ "namespace": {
+ "description": "Namespace is the namespace where the ClusterPool resides.",
+ "type": "string",
+ "default": ""
},
- "disabledControllers": {
- "description": "DisabledControllers allows selectively disabling Hive controllers by name. The name of an individual controller matches the name of the controller as seen in the Hive logging output.",
- "type": "array",
- "items": {
+ "poolName": {
+ "description": "PoolName is the name of the ClusterPool for which the cluster was created.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterPoolReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.ClusterPoolSpec": {
+ "description": "ClusterPoolSpec defines the desired state of the ClusterPool.",
+ "type": "object",
+ "required": [
+ "platform",
+ "size",
+ "baseDomain",
+ "imageSetRef"
+ ],
+ "properties": {
+ "annotations": {
+ "description": "Annotations to be applied to new ClusterDeployments created for the pool. ClusterDeployments that have already been claimed will not be affected when this value is modified.",
+ "type": "object",
+ "additionalProperties": {
"type": "string",
"default": ""
}
},
- "exportMetrics": {
- "description": "ExportMetrics has been disabled and has no effect. If upgrading from a version where it was active, please be aware of the following in your HiveConfig.Spec.TargetNamespace (default `hive` if unset): 1) ServiceMonitors named hive-controllers and hive-clustersync; 2) Role and RoleBinding named prometheus-k8s; 3) The `openshift.io/cluster-monitoring` metadata.label on the Namespace itself. You may wish to delete these resources. Or you may wish to continue using them to enable monitoring in your environment; but be aware that hive will no longer reconcile them.",
- "type": "boolean"
+ "baseDomain": {
+ "description": "BaseDomain is the base domain to use for all clusters created in this pool.",
+ "type": "string",
+ "default": ""
},
- "failedProvisionConfig": {
- "description": "FailedProvisionConfig is used to configure settings related to handling provision failures.",
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.FailedProvisionConfig"
+ "claimLifetime": {
+ "description": "ClaimLifetime defines the lifetimes for claims for the cluster pool.",
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolClaimLifetime"
},
- "featureGates": {
- "$ref": "#/definitions/io.openshift.hive.v1.FeatureGateSelection"
+ "hibernateAfter": {
+ "description": "HibernateAfter will be applied to new ClusterDeployments created for the pool. HibernateAfter will transition clusters in the clusterpool to hibernating power state after it has been running for the given duration. The time that a cluster has been running is the time since the cluster was installed or the time since the cluster last came out of hibernation. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
},
- "globalPullSecretRef": {
- "description": "GlobalPullSecretRef is used to specify a pull secret that will be used globally by all of the cluster deployments. For each cluster deployment, the contents of GlobalPullSecret will be merged with the specific pull secret for a cluster deployment(if specified), with precedence given to the contents of the pull secret for the cluster deployment. The global pull secret is assumed to be in the TargetNamespace.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "hibernationConfig": {
+ "description": "HibernationConfig configures the hibernation/resume behavior of ClusterDeployments owned by the ClusterPool.",
+ "$ref": "#/definitions/io.openshift.hive.v1.HibernationConfig"
},
- "logLevel": {
- "description": "LogLevel is the level of logging to use for the Hive controllers. Acceptable levels, from coarsest to finest, are panic, fatal, error, warn, info, debug, and trace. The default level is info.",
- "type": "string"
+ "imageSetRef": {
+ "description": "ImageSetRef is a reference to a ClusterImageSet. The release image specified in the ClusterImageSet will be used by clusters created for this cluster pool.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSetReference"
},
- "machinePoolPollInterval": {
- "description": "MachinePoolPollInterval is a string duration indicating how much time must pass before checking whether remote resources related to MachinePools need to be reapplied. Set to zero to disable polling -- we'll only reconcile when hub objects change. The default interval is 30m.",
- "type": "string"
+ "installAttemptsLimit": {
+ "description": "InstallAttemptsLimit is the maximum number of times Hive will attempt to install the cluster.",
+ "type": "integer",
+ "format": "int32"
},
- "maintenanceMode": {
- "description": "MaintenanceMode can be set to true to disable the hive controllers in situations where we need to ensure nothing is running that will add or act upon finalizers on Hive types. This should rarely be needed. Sets replicas to 0 for the hive-controllers deployment to accomplish this.",
- "type": "boolean"
+ "installConfigSecretTemplateRef": {
+ "description": "InstallConfigSecretTemplateRef is a secret with the key install-config.yaml consisting of the content of the install-config.yaml to be used as a template for all clusters in this pool. Cluster specific settings (name, basedomain) will be injected dynamically when the ClusterDeployment install-config Secret is generated.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "managedDomains": {
- "description": "ManagedDomains is the list of DNS domains that are managed by the Hive cluster When specifying 'manageDNS: true' in a ClusterDeployment, the ClusterDeployment's baseDomain should be a direct child of one of these domains, otherwise the ClusterDeployment creation will result in a validation error.",
+ "installerEnv": {
+ "description": "InstallerEnv are extra environment variables to pass through to the installer. This may be used to enable additional features of the installer.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ManageDNSConfig"
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
}
},
- "metricsConfig": {
- "description": "MetricsConfig encapsulates metrics specific configurations, like opting in for certain metrics.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.metricsconfig.MetricsConfig"
+ "inventory": {
+ "description": "Inventory maintains a list of entries consumed by the ClusterPool to customize the default ClusterDeployment.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.InventoryEntry"
+ }
},
- "privateLink": {
- "description": "PrivateLink is used to configure the privatelink controller.",
- "$ref": "#/definitions/io.openshift.hive.v1.PrivateLinkConfig"
+ "labels": {
+ "description": "Labels to be applied to new ClusterDeployments created for the pool. ClusterDeployments that have already been claimed will not be affected when this value is modified.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
},
- "releaseImageVerificationConfigMapRef": {
- "description": "ReleaseImageVerificationConfigMapRef is a reference to the ConfigMap that will be used to verify release images.\n\nThe config map structure is exactly the same as the config map used for verification of release images for OpenShift 4 during upgrades. Therefore you can usually set this to the config map shipped as part of OpenShift (openshift-config-managed/release-verification).\n\nSee https://github.com/openshift/cluster-update-keys for more details. The keys within the config map in the data field define how verification is performed:\n\nverifier-public-key-*: One or more GPG public keys in ASCII form that must have signed the\n release image by digest.\n\nstore-*: A URL (scheme file://, http://, or https://) location that contains signatures. These\n signatures are in the atomic container signature format. The URL will have the digest\n of the image appended to it as \"\u003cSTORE\u003e/\u003cALGO\u003e=\u003cDIGEST\u003e/signature-\u003cNUMBER\u003e\" as described\n in the container image signing format. The docker-image-manifest section of the\n signature must match the release image digest. Signatures are searched starting at\n NUMBER 1 and incrementing if the signature exists but is not valid. The signature is a\n GPG signed and encrypted JSON message. The file store is provided for testing only at\n the current time, although future versions of the CVO might allow host mounting of\n signatures.\n\nSee https://github.com/containers/image/blob/ab49b0a48428c623a8f03b41b9083d48966b34a9/docs/signature-protocols.md for a description of the signature store\n\nThe returned verifier will require that any new release image will only be considered verified if each provided public key has signed the release image digest. The signature may be in any store and the lookup order is internally defined.\n\nIf not set, no verification will be performed.",
- "$ref": "#/definitions/io.openshift.hive.v1.ReleaseImageVerificationConfigMapReference"
+ "maxConcurrent": {
+ "description": "MaxConcurrent is the maximum number of clusters that will be provisioned or deprovisioned at an time. This includes the claimed clusters being deprovisioned. By default there is no limit.",
+ "type": "integer",
+ "format": "int32"
},
- "serviceProviderCredentialsConfig": {
- "description": "ServiceProviderCredentialsConfig is used to configure credentials related to being a service provider on various cloud platforms.",
+ "maxSize": {
+ "description": "MaxSize is the maximum number of clusters that will be provisioned including clusters that have been claimed and ones waiting to be used. By default there is no limit.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "platform": {
+ "description": "Platform encompasses the desired platform for the cluster.",
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ServiceProviderCredentials"
+ "$ref": "#/definitions/io.openshift.hive.v1.Platform"
},
- "syncSetReapplyInterval": {
- "description": "SyncSetReapplyInterval is a string duration indicating how much time must pass before SyncSet resources will be reapplied. The default reapply interval is two hours.",
- "type": "string"
+ "pullSecretRef": {
+ "description": "PullSecretRef is the reference to the secret to use when pulling images.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "targetNamespace": {
- "description": "TargetNamespace is the namespace where the core Hive components should be run. Defaults to \"hive\". Will be created if it does not already exist. All resource references in HiveConfig can be assumed to be in the TargetNamespace. NOTE: Whereas it is possible to edit this value, causing hive to \"move\" its core components to the new namespace, the old namespace is not deleted, as it will still contain resources created by kubernetes and/or other OpenShift controllers.",
- "type": "string"
+ "runningCount": {
+ "description": "RunningCount is the number of clusters we should keep running. The remainder will be kept hibernated until claimed. By default no clusters will be kept running (all will be hibernated).",
+ "type": "integer",
+ "format": "int32"
+ },
+ "size": {
+ "description": "Size is the default number of clusters that we should keep provisioned and waiting for use.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "skipMachinePools": {
+ "description": "SkipMachinePools allows creating clusterpools where the machinepools are not managed by hive after cluster creation",
+ "type": "boolean"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "HiveConfigSpec",
+ "Kind": "ClusterPoolSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.HiveConfigStatus": {
- "description": "HiveConfigStatus defines the observed state of Hive",
+ "io.openshift.hive.v1.ClusterPoolStatus": {
+ "description": "ClusterPoolStatus defines the observed state of ClusterPool",
"type": "object",
+ "required": [
+ "size",
+ "ready"
+ ],
"properties": {
- "aggregatorClientCAHash": {
- "description": "AggregatorClientCAHash keeps an md5 hash of the aggregator client CA configmap data from the openshift-config-managed namespace. When the configmap changes, admission is redeployed.",
- "type": "string"
- },
"conditions": {
- "description": "Conditions includes more detailed status for the HiveConfig",
+ "description": "Conditions includes more detailed status for the cluster pool",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.HiveConfigCondition"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolCondition"
}
},
- "configApplied": {
- "description": "ConfigApplied will be set by the hive operator to indicate whether or not the LastGenerationObserved was successfully reconciled.",
- "type": "boolean"
+ "ready": {
+ "description": "Ready is the number of unclaimed clusters that are installed and are running and ready to be claimed.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "observedGeneration": {
- "description": "ObservedGeneration will record the most recently processed HiveConfig object's generation.",
+ "size": {
+ "description": "Size is the number of unclaimed clusters that have been created for the pool.",
"type": "integer",
- "format": "int64"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "HiveConfigStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.IBMClusterDeprovision": {
- "description": "IBMClusterDeprovision contains IBM Cloud specific configuration for a ClusterDeprovision",
- "type": "object",
- "required": [
- "credentialsSecretRef",
- "region",
- "baseDomain"
- ],
- "properties": {
- "baseDomain": {
- "description": "BaseDomain is the DNS base domain.",
- "type": "string",
- "default": ""
- },
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef is the IBM Cloud credentials to use for deprovisioning the cluster",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "region": {
- "description": "Region specifies the IBM Cloud region",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "IBMClusterDeprovision",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.IdentityProviderStatus": {
- "description": "IdentityProviderStatus defines the observed state of SyncSet",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "IdentityProviderStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.InventoryEntry": {
- "description": "InventoryEntry maintains a reference to a custom resource consumed by a clusterpool to customize the cluster deployment.",
- "type": "object",
- "required": [
- "name"
- ],
- "properties": {
- "kind": {
- "description": "Kind denotes the kind of the referenced resource. The default is ClusterDeploymentCustomization, which is also currently the only supported value.",
- "type": "string"
- },
- "name": {
- "description": "Name is the name of the referenced resource.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "InventoryEntry",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.KubeconfigSecretReference": {
- "description": "KubeconfigSecretReference is a reference to a secret containing the kubeconfig for a remote cluster.",
- "type": "object",
- "required": [
- "name",
- "namespace"
- ],
- "properties": {
- "name": {
- "description": "Name is the name of the secret.",
- "type": "string",
- "default": ""
+ "format": "int32",
+ "default": 0
},
- "namespace": {
- "description": "Namespace is the namespace where the secret lives.",
- "type": "string",
- "default": ""
+ "standby": {
+ "description": "Standby is the number of unclaimed clusters that are installed, but not running.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "KubeconfigSecretReference",
+ "Kind": "ClusterPoolStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.MachinePool": {
- "description": "MachinePool is the Schema for the machinepools API",
+ "io.openshift.hive.v1.ClusterProvision": {
+ "description": "ClusterProvision is the Schema for the clusterprovisions API",
"type": "object",
"properties": {
"apiVersion": {
@@ -85048,52 +86212,23 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolSpec"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterProvisionSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolStatus"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterProvisionStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "MachinePool",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.MachinePoolAutoscaling": {
- "description": "MachinePoolAutoscaling details how the machine pool is to be auto-scaled.",
- "type": "object",
- "required": [
- "minReplicas",
- "maxReplicas"
- ],
- "properties": {
- "maxReplicas": {
- "description": "MaxReplicas is the maximum number of replicas for the machine pool.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "minReplicas": {
- "description": "MinReplicas is the minimum number of replicas for the machine pool.",
- "type": "integer",
- "format": "int32",
- "default": 0
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "MachinePoolAutoscaling",
+ "Kind": "ClusterProvision",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.MachinePoolCondition": {
- "description": "MachinePoolCondition contains details for the current condition of a machine pool",
+ "io.openshift.hive.v1.ClusterProvisionCondition": {
+ "description": "ClusterProvisionCondition contains details for the current condition of a cluster provision",
"type": "object",
"required": [
"type",
@@ -85131,12 +86266,12 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "MachinePoolCondition",
+ "Kind": "ClusterProvisionCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.MachinePoolList": {
- "description": "MachinePoolList contains a list of MachinePool",
+ "io.openshift.hive.v1.ClusterProvisionList": {
+ "description": "ClusterProvisionList contains a list of ClusterProvision",
"type": "object",
"required": [
"items"
@@ -85150,7 +86285,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.MachinePool"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterProvision"
}
},
"kind": {
@@ -85166,12 +86301,118 @@
"Type": "list",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "MachinePoolList",
+ "Kind": "ClusterProvisionList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.MachinePoolNameLease": {
- "description": "MachinePoolNameLease is the Schema for the MachinePoolNameLeases API. This resource is mostly empty as we're primarily relying on the name to determine if a lease is available. Note that not all cloud providers require the use of a lease for naming, at present this is only required for GCP where we're extremely restricted on name lengths.",
+ "io.openshift.hive.v1.ClusterProvisionSpec": {
+ "description": "ClusterProvisionSpec defines the results of provisioning a cluster.",
+ "type": "object",
+ "required": [
+ "clusterDeploymentRef",
+ "podSpec",
+ "attempt",
+ "stage"
+ ],
+ "properties": {
+ "adminKubeconfigSecretRef": {
+ "description": "AdminKubeconfigSecretRef references the secret containing the admin kubeconfig for this cluster.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "adminPasswordSecretRef": {
+ "description": "AdminPasswordSecretRef references the secret containing the admin username/password which can be used to login to this cluster.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "attempt": {
+ "description": "Attempt is which attempt number of the cluster deployment that this ClusterProvision is",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "clusterDeploymentRef": {
+ "description": "ClusterDeploymentRef references the cluster deployment provisioned.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "clusterID": {
+ "description": "ClusterID is a globally unique identifier for this cluster generated during installation. Used for reporting metrics among other places.",
+ "type": "string"
+ },
+ "infraID": {
+ "description": "InfraID is an identifier for this cluster generated during installation and used for tagging/naming resources in cloud providers.",
+ "type": "string"
+ },
+ "installLog": {
+ "description": "InstallLog is the log from the installer.",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "Metadata is the metadata.json generated by the installer, providing metadata information about the cluster created. NOTE: This is not used because it didn't work (it was always empty). We think because the thing it's storing (ClusterMetadata from installer) is not a runtime.Object, so can't be put in a RawExtension.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "metadataJSON": {
+ "description": "MetadataJSON is a JSON representation of the ClusterMetadata produced by the installer. We don't use a runtime.RawExtension because ClusterMetadata isn't a runtime.Object. We don't use ClusterMetadata itself because we don't want our API consumers to need to pull in the installer code and its dependencies.",
+ "type": "string",
+ "format": "byte"
+ },
+ "podSpec": {
+ "description": "PodSpec is the spec to use for the installer pod.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.PodSpec"
+ },
+ "prevClusterID": {
+ "description": "PrevClusterID is the cluster ID of the previous failed provision attempt.",
+ "type": "string"
+ },
+ "prevInfraID": {
+ "description": "PrevInfraID is the infra ID of the previous failed provision attempt.",
+ "type": "string"
+ },
+ "prevProvisionName": {
+ "description": "PrevProvisionName is the name of the previous failed provision attempt.",
+ "type": "string"
+ },
+ "stage": {
+ "description": "Stage is the stage of provisioning that the cluster deployment has reached.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterProvisionSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.ClusterProvisionStatus": {
+ "description": "ClusterProvisionStatus defines the observed state of ClusterProvision.",
+ "type": "object",
+ "properties": {
+ "conditions": {
+ "description": "Conditions includes more detailed status for the cluster provision",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterProvisionCondition"
+ }
+ },
+ "jobRef": {
+ "description": "JobRef is the reference to the job performing the provision.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterProvisionStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.ClusterRelocate": {
+ "description": "ClusterRelocate is the Schema for the ClusterRelocates API",
"type": "object",
"properties": {
"apiVersion": {
@@ -85188,23 +86429,23 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolNameLeaseSpec"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterRelocateSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolNameLeaseStatus"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterRelocateStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "MachinePoolNameLease",
- "Scope": "Namespaced"
+ "Kind": "ClusterRelocate",
+ "Scope": "Clustered"
}
},
- "io.openshift.hive.v1.MachinePoolNameLeaseList": {
- "description": "MachinePoolNameLeaseList contains a list of MachinePoolNameLeases.",
+ "io.openshift.hive.v1.ClusterRelocateList": {
+ "description": "ClusterRelocateList contains a list of ClusterRelocate",
"type": "object",
"required": [
"items"
@@ -85218,7 +86459,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolNameLease"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterRelocate"
}
},
"kind": {
@@ -85234,270 +86475,219 @@
"Type": "list",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "MachinePoolNameLeaseList",
+ "Kind": "ClusterRelocateList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.MachinePoolNameLeaseSpec": {
- "description": "MachinePoolNameLeaseSpec is a minimal resource for obtaining unique machine pool names of a limited length.",
+ "io.openshift.hive.v1.ClusterRelocateSpec": {
+ "description": "ClusterRelocateSpec defines the relocation of clusters from one Hive instance to another.",
"type": "object",
+ "required": [
+ "kubeconfigSecretRef",
+ "clusterDeploymentSelector"
+ ],
+ "properties": {
+ "clusterDeploymentSelector": {
+ "description": "ClusterDeploymentSelector is a LabelSelector indicating which clusters will be relocated.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ },
+ "kubeconfigSecretRef": {
+ "description": "KubeconfigSecretRef is a reference to the secret containing the kubeconfig for the destination Hive instance. The kubeconfig must be in a data field where the key is \"kubeconfig\".",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.KubeconfigSecretReference"
+ }
+ },
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "MachinePoolNameLeaseSpec",
+ "Kind": "ClusterRelocateSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.MachinePoolNameLeaseStatus": {
- "description": "MachinePoolNameLeaseStatus defines the observed state of MachinePoolNameLease.",
+ "io.openshift.hive.v1.ClusterRelocateStatus": {
+ "description": "ClusterRelocateStatus defines the observed state of ClusterRelocate.",
"type": "object",
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "MachinePoolNameLeaseStatus",
+ "Kind": "ClusterRelocateStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.MachinePoolPlatform": {
- "description": "MachinePoolPlatform is the platform-specific configuration for a machine pool. Only one of the platforms should be set.",
+ "io.openshift.hive.v1.ClusterState": {
+ "description": "ClusterState is the Schema for the clusterstates API",
"type": "object",
"properties": {
- "aws": {
- "description": "AWS is the configuration used when installing on AWS.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.MachinePoolPlatform"
- },
- "azure": {
- "description": "Azure is the configuration used when installing on Azure.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.azure.MachinePool"
- },
- "gcp": {
- "description": "GCP is the configuration used when installing on GCP.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.MachinePool"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "ibmcloud": {
- "description": "IBMCloud is the configuration used when installing on IBM Cloud.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ibmcloud.MachinePool"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "openstack": {
- "description": "OpenStack is the configuration used when installing on OpenStack.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.openstack.MachinePool"
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "ovirt": {
- "description": "Ovirt is the configuration used when installing on oVirt.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ovirt.MachinePool"
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterStateSpec"
},
- "vsphere": {
- "description": "VSphere is the configuration used when installing on vSphere",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.vsphere.MachinePool"
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterStateStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "MachinePoolPlatform",
+ "Kind": "ClusterState",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.MachinePoolSpec": {
- "description": "MachinePoolSpec defines the desired state of MachinePool",
+ "io.openshift.hive.v1.ClusterStateList": {
+ "description": "ClusterStateList contains a list of ClusterState",
"type": "object",
"required": [
- "clusterDeploymentRef",
- "name",
- "platform"
+ "items"
],
"properties": {
- "autoscaling": {
- "description": "Autoscaling is the details for auto-scaling the machine pool. Replicas and autoscaling cannot be used together.",
- "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolAutoscaling"
- },
- "clusterDeploymentRef": {
- "description": "ClusterDeploymentRef references the cluster deployment to which this machine pool belongs.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "labels": {
- "description": "Map of label string keys and values that will be applied to the created MachineSet's MachineSpec. This affects the labels that will end up on the *Nodes* (in contrast with the MachineLabels field). This list will overwrite any modifications made to Node labels on an ongoing basis.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "machineLabels": {
- "description": "Map of label string keys and values that will be applied to the created MachineSet's MachineTemplateSpec. This affects the labels that will end up on the *Machines* (in contrast with the Labels field). This list will overwrite any modifications made to Machine labels on an ongoing basis. Note: We ignore entries that conflict with generated labels.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "name": {
- "description": "Name is the name of the machine pool.",
- "type": "string",
- "default": ""
- },
- "platform": {
- "description": "Platform is configuration for machine pool specific to the platform. When using a MachinePool to control the default worker machines created by installer, these must match the values provided in the install-config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolPlatform"
- },
- "replicas": {
- "description": "Replicas is the count of machines for this machine pool. Replicas and autoscaling cannot be used together. Default is 1, if autoscaling is not used.",
- "type": "integer",
- "format": "int64"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "taints": {
- "description": "List of taints that will be applied to the created MachineSet's MachineSpec. This list will overwrite any modifications made to Node taints on an ongoing basis. In case of duplicate entries, first encountered taint Value will be preserved, and the rest collapsed on the corresponding MachineSets. Note that taints are uniquely identified based on key+effect, not just key.",
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.Taint"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterState"
}
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterStateList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.ClusterStateSpec": {
+ "description": "ClusterStateSpec defines the desired state of ClusterState",
+ "type": "object",
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "MachinePoolSpec",
+ "Kind": "ClusterStateSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.MachinePoolStatus": {
- "description": "MachinePoolStatus defines the observed state of MachinePool",
+ "io.openshift.hive.v1.ClusterStateStatus": {
+ "description": "ClusterStateStatus defines the observed state of ClusterState",
"type": "object",
"properties": {
- "conditions": {
- "description": "Conditions includes more detailed status for the cluster deployment",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolCondition"
- }
- },
- "controlledByReplica": {
- "description": "ControlledByReplica indicates which replica of the hive-machinepool StatefulSet is responsible for this MachinePool. Note that this value indicates the replica that most recently handled the MachinePool. If the hive-machinepool statefulset is scaled up or down, the controlling replica can change, potentially causing logs to be spread across multiple pods.",
- "type": "integer",
- "format": "int64"
- },
- "machineSets": {
- "description": "MachineSets is the status of the machine sets for the machine pool on the remote cluster.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.MachineSetStatus"
- }
- },
- "ownedLabels": {
- "description": "OwnedLabels lists the keys of labels this MachinePool created on the remote MachineSet's MachineSpec. (In contrast with OwnedMachineLabels.) Used to identify labels to remove from the remote MachineSet when they are absent from the MachinePool's spec.labels.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "ownedMachineLabels": {
- "description": "OwnedMachineLabels lists the keys of labels this MachinePool created on the remote MachineSet's MachineTemplateSpec. (In contrast with OwnedLabels.) Used to identify labels to remove from the remote MachineSet when they are absent from the MachinePool's spec.machineLabels.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "ownedTaints": {
- "description": "OwnedTaints lists identifiers of taints this MachinePool created on the remote MachineSet. Used to identify taints to remove from the remote MachineSet when they are absent from the MachinePool's spec.taints.",
+ "clusterOperators": {
+ "description": "ClusterOperators contains the state for every cluster operator in the target cluster",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.TaintIdentifier"
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterOperatorState"
}
},
- "replicas": {
- "description": "Replicas is the current number of replicas for the machine pool.",
- "type": "integer",
- "format": "int32"
+ "lastUpdated": {
+ "description": "LastUpdated is the last time that operator state was updated",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "MachinePoolStatus",
+ "Kind": "ClusterStateStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.MachineSetStatus": {
- "description": "MachineSetStatus is the status of a machineset in the remote cluster.",
+ "io.openshift.hive.v1.ControlPlaneAdditionalCertificate": {
+ "description": "ControlPlaneAdditionalCertificate defines an additional serving certificate for a control plane",
"type": "object",
"required": [
"name",
- "replicas",
- "minReplicas",
- "maxReplicas"
+ "domain"
],
"properties": {
- "errorMessage": {
- "type": "string"
- },
- "errorReason": {
- "description": "In the event that there is a terminal problem reconciling the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason will be populated with a succinct value suitable for machine interpretation, while ErrorMessage will contain a more verbose string suitable for logging and human consumption.",
- "type": "string"
- },
- "maxReplicas": {
- "description": "MaxReplicas is the maximum number of replicas for the machine set.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "minReplicas": {
- "description": "MinReplicas is the minimum number of replicas for the machine set.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "domain": {
+ "description": "Domain is the domain of the additional control plane certificate",
+ "type": "string",
+ "default": ""
},
"name": {
- "description": "Name is the name of the machine set.",
+ "description": "Name references a CertificateBundle in the ClusterDeployment.Spec that should be used for this additional certificate.",
"type": "string",
"default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "ControlPlaneAdditionalCertificate",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.ControlPlaneConfigSpec": {
+ "description": "ControlPlaneConfigSpec contains additional configuration settings for a target cluster's control plane.",
+ "type": "object",
+ "properties": {
+ "apiServerIPOverride": {
+ "description": "APIServerIPOverride is the optional override of the API server IP address. Hive will use this IP address for creating TCP connections. Port from the original API server URL will be used. This field can be used when repointing the APIServer's DNS is not viable option.",
+ "type": "string"
},
- "readyReplicas": {
- "description": "The number of ready replicas for this MachineSet. A machine is considered ready when the node has been created and is \"Ready\". It is transferred as-is from the MachineSet from remote cluster.",
- "type": "integer",
- "format": "int32"
+ "apiURLOverride": {
+ "description": "APIURLOverride is the optional URL override to which Hive will transition for communication with the API server of the remote cluster. When a remote cluster is created, Hive will initially communicate using the API URL established during installation. If an API URL Override is specified, Hive will periodically attempt to connect to the remote cluster using the override URL. Once Hive has determined that the override URL is active, Hive will use the override URL for further communications with the API server of the remote cluster.",
+ "type": "string"
},
- "replicas": {
- "description": "Replicas is the current number of replicas for the machine set.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "servingCertificates": {
+ "description": "ServingCertificates specifies serving certificates for the control plane",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ControlPlaneServingCertificateSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "MachineSetStatus",
+ "Kind": "ControlPlaneConfigSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ManageDNSAWSConfig": {
- "description": "ManageDNSAWSConfig contains AWS-specific info to manage a given domain.",
+ "io.openshift.hive.v1.ControlPlaneServingCertificateSpec": {
+ "description": "ControlPlaneServingCertificateSpec specifies serving certificate settings for the control plane of the target cluster.",
"type": "object",
- "required": [
- "credentialsSecretRef"
- ],
"properties": {
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS Route53. It will need permission to manage entries for the domain listed in the parent ManageDNSConfig object. Secret should have AWS keys named 'aws_access_key_id' and 'aws_secret_access_key'.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "additional": {
+ "description": "Additional is a list of additional domains and certificates that are also associated with the control plane's api endpoint.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ControlPlaneAdditionalCertificate"
+ }
},
- "region": {
- "description": "Region is the AWS region to use for route53 operations. This defaults to us-east-1. For AWS China, use cn-northwest-1.",
+ "default": {
+ "description": "Default references the name of a CertificateBundle in the ClusterDeployment that should be used for the control plane's default endpoint.",
"type": "string"
}
},
@@ -85505,185 +86695,222 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ManageDNSAWSConfig",
+ "Kind": "ControlPlaneServingCertificateSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ManageDNSAzureConfig": {
- "description": "ManageDNSAzureConfig contains Azure-specific info to manage a given domain",
+ "io.openshift.hive.v1.ControllerConfig": {
+ "description": "ControllerConfig contains the configuration for a controller",
"type": "object",
- "required": [
- "credentialsSecretRef",
- "resourceGroupName"
- ],
"properties": {
- "cloudName": {
- "description": "CloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to \"AzurePublicCloud\".",
- "type": "string"
+ "clientBurst": {
+ "description": "ClientBurst specifies client rate limiter burst for a controller",
+ "type": "integer",
+ "format": "int32"
},
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with Azure DNS. It wil need permission to manage entries in each of the managed domains listed in the parent ManageDNSConfig object. Secret should have a key named 'osServicePrincipal.json'",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "clientQPS": {
+ "description": "ClientQPS specifies client rate limiter QPS for a controller",
+ "type": "integer",
+ "format": "int32"
},
- "resourceGroupName": {
- "description": "ResourceGroupName specifies the Azure resource group containing the DNS zones for the domains being managed.",
- "type": "string",
- "default": ""
+ "concurrentReconciles": {
+ "description": "ConcurrentReconciles specifies number of concurrent reconciles for a controller",
+ "type": "integer",
+ "format": "int32"
+ },
+ "queueBurst": {
+ "description": "QueueBurst specifies workqueue rate limiter burst for a controller",
+ "type": "integer",
+ "format": "int32"
+ },
+ "queueQPS": {
+ "description": "QueueQPS specifies workqueue rate limiter QPS for a controller",
+ "type": "integer",
+ "format": "int32"
+ },
+ "replicas": {
+ "description": "Replicas specifies the number of replicas the specific controller pod should use. This is ONLY for controllers that have been split out into their own pods. This is ignored for all others.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "resources": {
+ "description": "Resources describes the compute resource requirements of the controller container. This is ONLY for controllers that have been split out into their own pods. This is ignored for all others.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ManageDNSAzureConfig",
+ "Kind": "ControllerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ManageDNSConfig": {
- "description": "ManageDNSConfig contains the domain being managed, and the cloud-specific details for accessing/managing the domain.",
+ "io.openshift.hive.v1.ControllersConfig": {
+ "description": "ControllersConfig contains default as well as controller specific configurations",
"type": "object",
- "required": [
- "domains"
- ],
"properties": {
- "aws": {
- "description": "AWS contains AWS-specific settings for external DNS",
- "$ref": "#/definitions/io.openshift.hive.v1.ManageDNSAWSConfig"
- },
- "azure": {
- "description": "Azure contains Azure-specific settings for external DNS",
- "$ref": "#/definitions/io.openshift.hive.v1.ManageDNSAzureConfig"
- },
- "domains": {
- "description": "Domains is the list of domains that hive will be managing entries for with the provided credentials.",
+ "controllers": {
+ "description": "Controllers contains a list of configurations for different controllers",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.SpecificControllerConfig"
}
},
- "gcp": {
- "description": "GCP contains GCP-specific settings for external DNS",
- "$ref": "#/definitions/io.openshift.hive.v1.ManageDNSGCPConfig"
+ "default": {
+ "description": "Default specifies default configuration for all the controllers, can be used to override following coded defaults default for concurrent reconciles is 5 default for client qps is 5 default for client burst is 10 default for queue qps is 10 default for queue burst is 100",
+ "$ref": "#/definitions/io.openshift.hive.v1.ControllerConfig"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ManageDNSConfig",
+ "Kind": "ControllersConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ManageDNSGCPConfig": {
- "description": "ManageDNSGCPConfig contains GCP-specific info to manage a given domain.",
+ "io.openshift.hive.v1.DNSZone": {
+ "description": "DNSZone is the Schema for the dnszones API",
"type": "object",
- "required": [
- "credentialsSecretRef"
- ],
"properties": {
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with GCP DNS. It will need permission to manage entries in each of the managed domains for this cluster. listed in the parent ManageDNSConfig object. Secret should have a key named 'osServiceAccount.json'. The credentials must specify the project to use.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.DNSZoneSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.DNSZoneStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ManageDNSGCPConfig",
+ "Kind": "DNSZone",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.OpenStackClusterDeprovision": {
- "description": "OpenStackClusterDeprovision contains OpenStack-specific configuration for a ClusterDeprovision",
+ "io.openshift.hive.v1.DNSZoneCondition": {
+ "description": "DNSZoneCondition contains details for the current condition of a DNSZone",
"type": "object",
"required": [
- "cloud"
+ "type",
+ "status"
],
"properties": {
- "certificatesSecretRef": {
- "description": "CertificatesSecretRef refers to a secret that contains CA certificates necessary for communicating with the OpenStack.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "lastProbeTime": {
+ "description": "LastProbeTime is the last time we probed the condition.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "cloud": {
- "description": "Cloud is the secion in the clouds.yaml secret below to use for auth/connectivity.",
+ "lastTransitionTime": {
+ "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "description": "Message is a human-readable message indicating details about last transition.",
+ "type": "string"
+ },
+ "reason": {
+ "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.",
+ "type": "string"
+ },
+ "status": {
+ "description": "Status is the status of the condition.",
"type": "string",
"default": ""
},
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef is the OpenStack account credentials to use for deprovisioning the cluster",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "type": {
+ "description": "Type is the type of the condition.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "OpenStackClusterDeprovision",
+ "Kind": "DNSZoneCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.OvirtClusterDeprovision": {
- "description": "OvirtClusterDeprovision contains oVirt-specific configuration for a ClusterDeprovision",
+ "io.openshift.hive.v1.DNSZoneList": {
+ "description": "DNSZoneList contains a list of DNSZone",
"type": "object",
"required": [
- "clusterID",
- "credentialsSecretRef",
- "certificatesSecretRef"
+ "items"
],
"properties": {
- "certificatesSecretRef": {
- "description": "CertificatesSecretRef refers to a secret that contains the oVirt CA certificates necessary for communicating with the oVirt.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "clusterID": {
- "description": "The oVirt cluster ID",
- "type": "string",
- "default": ""
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.DNSZone"
+ }
},
- "credentialsSecretRef": {
- "description": "CredentialsSecretRef is the oVirt account credentials to use for deprovisioning the cluster secret fields: ovirt_url, ovirt_username, ovirt_password, ovirt_ca_bundle",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "OvirtClusterDeprovision",
+ "Kind": "DNSZoneList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.PatchEntity": {
- "description": "PatchEntity represent a json patch (RFC 6902) to be applied to the install-config",
+ "io.openshift.hive.v1.DNSZoneSpec": {
+ "description": "DNSZoneSpec defines the desired state of DNSZone",
"type": "object",
"required": [
- "op",
- "path",
- "value"
+ "zone"
],
"properties": {
- "from": {
- "description": "From is the json path to copy or move the value from",
- "type": "string"
+ "aws": {
+ "description": "AWS specifies AWS-specific cloud configuration",
+ "$ref": "#/definitions/io.openshift.hive.v1.AWSDNSZoneSpec"
},
- "op": {
- "description": "Op is the operation to perform: add, remove, replace, move, copy, test",
- "type": "string",
- "default": ""
+ "azure": {
+ "description": "Azure specifes Azure-specific cloud configuration",
+ "$ref": "#/definitions/io.openshift.hive.v1.AzureDNSZoneSpec"
},
- "path": {
- "description": "Path is the json path to the value to be modified",
- "type": "string",
- "default": ""
+ "gcp": {
+ "description": "GCP specifies GCP-specific cloud configuration",
+ "$ref": "#/definitions/io.openshift.hive.v1.GCPDNSZoneSpec"
},
- "value": {
- "description": "Value is the value to be used in the operation",
+ "linkToParentDomain": {
+ "description": "LinkToParentDomain specifies whether DNS records should be automatically created to link this DNSZone with a parent domain.",
+ "type": "boolean"
+ },
+ "preserveOnDelete": {
+ "description": "PreserveOnDelete allows the user to disconnect a DNSZone from Hive without deprovisioning it. This can also be used to abandon ongoing DNSZone deprovision. Typically set automatically due to PreserveOnDelete being set on a ClusterDeployment.",
+ "type": "boolean"
+ },
+ "zone": {
+ "description": "Zone is the DNS zone to host",
"type": "string",
"default": ""
}
@@ -85692,323 +86919,300 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "PatchEntity",
+ "Kind": "DNSZoneSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.Platform": {
- "description": "Platform is the configuration for the specific platform upon which to perform the installation. Only one of the platform configuration should be set.",
+ "io.openshift.hive.v1.DNSZoneStatus": {
+ "description": "DNSZoneStatus defines the observed state of DNSZone",
"type": "object",
"properties": {
- "agentBareMetal": {
- "description": "AgentBareMetal is the configuration used when performing an Assisted Agent based installation to bare metal.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.agent.BareMetalPlatform"
- },
"aws": {
- "description": "AWS is the configuration used when installing on AWS.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.Platform"
+ "description": "AWSDNSZoneStatus contains status information specific to AWS",
+ "$ref": "#/definitions/io.openshift.hive.v1.AWSDNSZoneStatus"
},
"azure": {
- "description": "Azure is the configuration used when installing on Azure.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.azure.Platform"
+ "description": "AzureDNSZoneStatus contains status information specific to Azure",
+ "$ref": "#/definitions/io.openshift.hive.v1.AzureDNSZoneStatus"
},
- "baremetal": {
- "description": "BareMetal is the configuration used when installing on bare metal.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.baremetal.Platform"
+ "conditions": {
+ "description": "Conditions includes more detailed status for the DNSZone",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.DNSZoneCondition"
+ }
},
"gcp": {
- "description": "GCP is the configuration used when installing on Google Cloud Platform.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.Platform"
- },
- "ibmcloud": {
- "description": "IBMCloud is the configuration used when installing on IBM Cloud",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ibmcloud.Platform"
- },
- "none": {
- "description": "None indicates platform-agnostic install. https://docs.openshift.com/container-platform/4.7/installing/installing_platform_agnostic/installing-platform-agnostic.html",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.none.Platform"
+ "description": "GCPDNSZoneStatus contains status information specific to GCP",
+ "$ref": "#/definitions/io.openshift.hive.v1.GCPDNSZoneStatus"
},
- "openstack": {
- "description": "OpenStack is the configuration used when installing on OpenStack",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.openstack.Platform"
+ "lastSyncGeneration": {
+ "description": "LastSyncGeneration is the generation of the zone resource that was last sync'd. This is used to know if the Object has changed and we should sync immediately.",
+ "type": "integer",
+ "format": "int64"
},
- "ovirt": {
- "description": "Ovirt is the configuration used when installing on oVirt",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ovirt.Platform"
+ "lastSyncTimestamp": {
+ "description": "LastSyncTimestamp is the time that the zone was last sync'd.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "vsphere": {
- "description": "VSphere is the configuration used when installing on vSphere",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.vsphere.Platform"
+ "nameServers": {
+ "description": "NameServers is a list of nameservers for this DNS zone",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "Platform",
+ "Kind": "DNSZoneStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.PlatformStatus": {
- "description": "PlatformStatus contains the observed state for the specific platform upon which to perform the installation",
+ "io.openshift.hive.v1.DeploymentConfig": {
"type": "object",
+ "required": [
+ "deploymentName"
+ ],
"properties": {
- "aws": {
- "description": "AWS is the observed state on AWS.",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.PlatformStatus"
+ "deploymentName": {
+ "description": "DeploymentName is the name of one of the Deployments/StatefulSets managed by hive-operator. NOTE: At this time each deployment has only one container. In the future, we may provide a way to specify which container this DeploymentConfig will be applied to.",
+ "type": "string",
+ "default": ""
},
- "gcp": {
- "description": "GCP is the observed state on GCP",
- "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.PlatformStatus"
+ "resources": {
+ "description": "Resources allows customization of the resource (memory, CPU, etc.) limits and requests used by containers in the Deployment/StatefulSet named by DeploymentName.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "PlatformStatus",
+ "Kind": "DeploymentConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.PrivateLinkConfig": {
- "description": "PrivateLinkConfig defines the configuration for the privatelink controller.",
+ "io.openshift.hive.v1.FailedProvisionAWSConfig": {
+ "description": "FailedProvisionAWSConfig contains AWS-specific info to upload log files.",
"type": "object",
+ "required": [
+ "credentialsSecretRef"
+ ],
"properties": {
- "gcp": {
- "description": "GCP is the configuration for GCP hub and link resources.",
- "$ref": "#/definitions/io.openshift.hive.v1.GCPPrivateServiceConnectConfig"
+ "bucket": {
+ "description": "Bucket is the S3 bucket to store the logs in.",
+ "type": "string"
+ },
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS S3. It will need permission to upload logs to S3. Secret should have keys named aws_access_key_id and aws_secret_access_key that contain the AWS credentials. Example Secret:\n data:\n aws_access_key_id: minio\n aws_secret_access_key: minio123",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "region": {
+ "description": "Region is the AWS region to use for S3 operations. This defaults to us-east-1. For AWS China, use cn-northwest-1.",
+ "type": "string"
+ },
+ "serviceEndpoint": {
+ "description": "ServiceEndpoint is the url to connect to an S3 compatible provider.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "PrivateLinkConfig",
+ "Kind": "FailedProvisionAWSConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.Provisioning": {
- "description": "Provisioning contains settings used only for initial cluster provisioning.",
+ "io.openshift.hive.v1.FailedProvisionConfig": {
+ "description": "FailedProvisionConfig contains settings to control behavior undertaken by Hive when an installation attempt fails.",
"type": "object",
"properties": {
- "imageSetRef": {
- "description": "ImageSetRef is a reference to a ClusterImageSet. If a value is specified for ReleaseImage, that will take precedence over the one from the ClusterImageSet.",
- "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSetReference"
- },
- "installConfigSecretRef": {
- "description": "InstallConfigSecretRef is the reference to a secret that contains an openshift-install InstallConfig. This file will be passed through directly to the installer. Any version of InstallConfig can be used, provided it can be parsed by the openshift-install version for the release you are provisioning.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "installerEnv": {
- "description": "InstallerEnv are extra environment variables to pass through to the installer. This may be used to enable additional features of the installer.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
- }
- },
- "installerImageOverride": {
- "description": "InstallerImageOverride allows specifying a URI for the installer image, normally gleaned from the metadata within the ReleaseImage.",
- "type": "string"
- },
- "manifestsConfigMapRef": {
- "description": "ManifestsConfigMapRef is a reference to user-provided manifests to add to or replace manifests that are generated by the installer. It serves the same purpose as, and is mutually exclusive with, ManifestsSecretRef.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "manifestsSecretRef": {
- "description": "ManifestsSecretRef is a reference to user-provided manifests to add to or replace manifests that are generated by the installer. It serves the same purpose as, and is mutually exclusive with, ManifestsConfigMapRef.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "releaseImage": {
- "description": "ReleaseImage is the image containing metadata for all components that run in the cluster, and is the primary and best way to specify what specific version of OpenShift you wish to install.",
- "type": "string"
+ "aws": {
+ "$ref": "#/definitions/io.openshift.hive.v1.FailedProvisionAWSConfig"
},
- "sshKnownHosts": {
- "description": "SSHKnownHosts are known hosts to be configured in the hive install manager pod to avoid ssh prompts. Use of ssh in the install pod is somewhat limited today (failure log gathering from cluster, some bare metal provisioning scenarios), so this setting is often not needed.",
+ "retryReasons": {
+ "description": "RetryReasons is a list of installFailingReason strings from the [additional-]install-log-regexes ConfigMaps. If specified, Hive will only retry a failed installation if it results in one of the listed reasons. If omitted (not the same thing as empty!), Hive will retry regardless of the failure reason. (The total number of install attempts is still constrained by ClusterDeployment.Spec.InstallAttemptsLimit.)",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "sshPrivateKeySecretRef": {
- "description": "SSHPrivateKeySecretRef is the reference to the secret that contains the private SSH key to use for access to compute instances. This private key should correspond to the public key included in the InstallConfig. The private key is used by Hive to gather logs on the target cluster if there are install failures. The SSH private key is expected to be in the secret data under the \"ssh-privatekey\" key.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "skipGatherLogs": {
+ "description": "DEPRECATED: This flag is no longer respected and will be removed in the future.",
+ "type": "boolean"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "Provisioning",
+ "Kind": "FailedProvisionConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ReleaseImageVerificationConfigMapReference": {
- "description": "ReleaseImageVerificationConfigMapReference is a reference to the ConfigMap that will be used to verify release images.",
+ "io.openshift.hive.v1.FeatureGateSelection": {
+ "description": "FeatureGateSelection allows selecting feature gates for the controller.",
"type": "object",
- "required": [
- "namespace",
- "name"
- ],
"properties": {
- "name": {
- "description": "Name of the ConfigMap",
- "type": "string",
- "default": ""
+ "custom": {
+ "description": "custom allows the enabling or disabling of any feature. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations might cause unknown behavior. featureSet must equal \"Custom\" must be set to use this field.",
+ "$ref": "#/definitions/io.openshift.hive.v1.FeatureGatesEnabled"
},
- "namespace": {
- "description": "Namespace of the ConfigMap",
- "type": "string",
- "default": ""
+ "featureSet": {
+ "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ReleaseImageVerificationConfigMapReference",
+ "Kind": "FeatureGateSelection",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SecretMapping": {
- "description": "SecretMapping defines a source and destination for a secret to be synced by a SyncSet",
+ "io.openshift.hive.v1.FeatureGatesEnabled": {
+ "description": "FeatureGatesEnabled is list of feature gates that must be enabled.",
"type": "object",
- "required": [
- "sourceRef",
- "targetRef"
- ],
"properties": {
- "sourceRef": {
- "description": "SourceRef specifies the name and namespace of a secret on the management cluster",
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SecretReference"
- },
- "targetRef": {
- "description": "TargetRef specifies the target name and namespace of the secret on the target cluster",
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SecretReference"
+ "enabled": {
+ "description": "enabled is a list of all feature gates that you want to force on",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SecretMapping",
+ "Kind": "FeatureGatesEnabled",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SecretReference": {
- "description": "SecretReference is a reference to a secret by name and namespace",
+ "io.openshift.hive.v1.GCPClusterDeprovision": {
+ "description": "GCPClusterDeprovision contains GCP-specific configuration for a ClusterDeprovision",
"type": "object",
"required": [
- "name"
+ "region"
],
"properties": {
- "name": {
- "description": "Name is the name of the secret",
- "type": "string",
- "default": ""
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef is the GCP account credentials to use for deprovisioning the cluster",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "namespace": {
- "description": "Namespace is the namespace where the secret lives. If not present for the source secret reference, it is assumed to be the same namespace as the syncset with the reference.",
+ "networkProjectID": {
+ "description": "NetworkProjectID is used for shared VPC setups",
"type": "string"
+ },
+ "region": {
+ "description": "Region is the GCP region for this deprovision",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SecretReference",
+ "Kind": "GCPClusterDeprovision",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SelectorSyncIdentityProvider": {
- "description": "SelectorSyncIdentityProvider is the Schema for the SelectorSyncSet API",
+ "io.openshift.hive.v1.GCPDNSZoneSpec": {
+ "description": "GCPDNSZoneSpec contains GCP-specific DNSZone specifications",
"type": "object",
+ "required": [
+ "credentialsSecretRef"
+ ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncIdentityProviderSpec"
- },
- "status": {
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef references a secret that will be used to authenticate with GCP CloudDNS. It will need permission to create and manage CloudDNS Hosted Zones. Secret should have a key named 'osServiceAccount.json'. The credentials must specify the project to use.",
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.IdentityProviderStatus"
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SelectorSyncIdentityProvider",
- "Scope": "Clustered"
+ "Kind": "GCPDNSZoneSpec",
+ "Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SelectorSyncIdentityProviderList": {
- "description": "SelectorSyncIdentityProviderList contains a list of SelectorSyncIdentityProviders",
+ "io.openshift.hive.v1.GCPDNSZoneStatus": {
+ "description": "GCPDNSZoneStatus contains status information specific to GCP Cloud DNS zones",
+ "type": "object",
+ "properties": {
+ "zoneName": {
+ "description": "ZoneName is the name of the zone in GCP Cloud DNS",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "GCPDNSZoneStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.GCPPrivateServiceConnectConfig": {
+ "description": "GCPPrivateServiceConnectConfig defines the gcp private service connect config for the private-link controller.",
"type": "object",
"required": [
- "items"
+ "credentialsSecretRef"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with GCP for creating the resources for GCP Private Service Connect",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "items": {
+ "endpointVPCInventory": {
+ "description": "EndpointVPCInventory is a list of VPCs and the corresponding subnets in various GCP regions. The controller uses this list to choose a VPC for creating GCP Endpoints. Since the VPC Endpoints must be in the same region as the ClusterDeployment, we must have VPCs in that region to be able to setup Private Service Connect.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncIdentityProvider"
+ "$ref": "#/definitions/io.openshift.hive.v1.GCPPrivateServiceConnectInventory"
}
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "list",
+ "Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SelectorSyncIdentityProviderList",
+ "Kind": "GCPPrivateServiceConnectConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SelectorSyncIdentityProviderSpec": {
- "description": "SelectorSyncIdentityProviderSpec defines the SyncIdentityProviderCommonSpec to sync to ClusterDeploymentSelector indicating which clusters the SelectorSyncIdentityProvider applies to in any namespace.",
+ "io.openshift.hive.v1.GCPPrivateServiceConnectInventory": {
+ "description": "GCPPrivateServiceConnectInventory is a VPC and its corresponding subnets. This VPC will be used to create a GCP Endpoint whenever there is a Private Service Connect service created for a ClusterDeployment.",
"type": "object",
"required": [
- "identityProviders"
+ "network",
+ "subnets"
],
"properties": {
- "clusterDeploymentSelector": {
- "description": "ClusterDeploymentSelector is a LabelSelector indicating which clusters the SelectorIdentityProvider applies to in any namespace.",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ "network": {
+ "type": "string",
+ "default": ""
},
- "identityProviders": {
- "description": "IdentityProviders is an ordered list of ways for a user to identify themselves",
+ "subnets": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.IdentityProvider"
+ "$ref": "#/definitions/io.openshift.hive.v1.GCPPrivateServiceConnectSubnet"
}
}
},
@@ -86016,12 +87220,53 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SelectorSyncIdentityProviderSpec",
+ "Kind": "GCPPrivateServiceConnectInventory",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SelectorSyncSet": {
- "description": "SelectorSyncSet is the Schema for the SelectorSyncSet API",
+ "io.openshift.hive.v1.GCPPrivateServiceConnectSubnet": {
+ "description": "GCPPrivateServiceConnectSubnet defines subnet and the corresponding GCP region.",
+ "type": "object",
+ "required": [
+ "subnet",
+ "region"
+ ],
+ "properties": {
+ "region": {
+ "type": "string",
+ "default": ""
+ },
+ "subnet": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "GCPPrivateServiceConnectSubnet",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.HibernationConfig": {
+ "type": "object",
+ "properties": {
+ "resumeTimeout": {
+ "description": "ResumeTimeout is the maximum amount of time we will wait for an unclaimed ClusterDeployment to resume from hibernation (e.g. at the behest of runningCount, or in preparation for being claimed). If this time is exceeded, the ClusterDeployment will be considered Broken and we will replace it. The default (unspecified or zero) means no timeout -- we will allow the ClusterDeployment to continue trying to resume \"forever\". This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "HibernationConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.HiveConfig": {
+ "description": "HiveConfig is the Schema for the hives API",
"type": "object",
"properties": {
"apiVersion": {
@@ -86038,23 +87283,66 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncSetSpec"
+ "$ref": "#/definitions/io.openshift.hive.v1.HiveConfigSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncSetStatus"
+ "$ref": "#/definitions/io.openshift.hive.v1.HiveConfigStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SelectorSyncSet",
+ "Kind": "HiveConfig",
"Scope": "Clustered"
}
},
- "io.openshift.hive.v1.SelectorSyncSetList": {
- "description": "SelectorSyncSetList contains a list of SyncSets",
+ "io.openshift.hive.v1.HiveConfigCondition": {
+ "description": "HiveConfigCondition contains details for the current condition of a HiveConfig",
+ "type": "object",
+ "required": [
+ "type",
+ "status"
+ ],
+ "properties": {
+ "lastProbeTime": {
+ "description": "LastProbeTime is the last time we probed the condition.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "lastTransitionTime": {
+ "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "description": "Message is a human-readable message indicating details about last transition.",
+ "type": "string"
+ },
+ "reason": {
+ "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.",
+ "type": "string"
+ },
+ "status": {
+ "description": "Status is the status of the condition.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "Type is the type of the condition.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "HiveConfigCondition",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.HiveConfigList": {
+ "description": "HiveConfigList contains a list of Hive",
"type": "object",
"required": [
"items"
@@ -86068,7 +87356,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncSet"
+ "$ref": "#/definitions/io.openshift.hive.v1.HiveConfig"
}
},
"kind": {
@@ -86084,149 +87372,255 @@
"Type": "list",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SelectorSyncSetList",
+ "Kind": "HiveConfigList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SelectorSyncSetSpec": {
- "description": "SelectorSyncSetSpec defines the SyncSetCommonSpec resources and patches to sync along with a ClusterDeploymentSelector indicating which clusters the SelectorSyncSet applies to in any namespace.",
+ "io.openshift.hive.v1.HiveConfigSpec": {
+ "description": "HiveConfigSpec defines the desired state of Hive",
"type": "object",
"properties": {
- "applyBehavior": {
- "description": "ApplyBehavior indicates how resources in this syncset will be applied to the target cluster. The default value of \"Apply\" indicates that resources should be applied using the 'oc apply' command. If no value is set, \"Apply\" is assumed. A value of \"CreateOnly\" indicates that the resource will only be created if it does not already exist in the target cluster. Otherwise, it will be left alone. A value of \"CreateOrUpdate\" indicates that the resource will be created/updated without the use of the 'oc apply' command, allowing larger resources to be synced, but losing some functionality of the 'oc apply' command such as the ability to remove annotations, labels, and other map entries in general.",
- "type": "string"
+ "additionalCertificateAuthoritiesSecretRef": {
+ "description": "AdditionalCertificateAuthoritiesSecretRef is a list of references to secrets in the TargetNamespace that contain an additional Certificate Authority to use when communicating with target clusters. These certificate authorities will be used in addition to any self-signed CA generated by each cluster on installation. The cert data should be stored in the Secret key named 'ca.crt'.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ }
},
- "clusterDeploymentSelector": {
- "description": "ClusterDeploymentSelector is a LabelSelector indicating which clusters the SelectorSyncSet applies to in any namespace.",
+ "argoCDConfig": {
+ "description": "ArgoCD specifies configuration for ArgoCD integration. If enabled, Hive will automatically add provisioned clusters to ArgoCD, and remove them when they are deprovisioned.",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ "$ref": "#/definitions/io.openshift.hive.v1.ArgoCDConfig"
},
- "enableResourceTemplates": {
- "description": "EnableResourceTemplates, if True, causes hive to honor golang text/templates in Resources. While the standard syntax is supported, it won't do you a whole lot of good as the parser does not pass a data object (i.e. there is no \"dot\" for you to use). This currently exists to expose a single function: {{ fromCDLabel \"some.label/key\" }} will be substituted with the string value of ClusterDeployment.Labels[\"some.label/key\"]. The empty string is interpolated if there are no labels, or if the indicated key does not exist. Note that this only works in values (not e.g. map keys) that are of type string.",
- "type": "boolean"
+ "awsPrivateLink": {
+ "description": "AWSPrivateLink defines the configuration for the aws-private-link controller. It provides 3 major pieces of information required by the controller, 1. The Credentials that should be used to create AWS PrivateLink resources other than\n what exist in the customer's account.\n2. A list of VPCs that can be used by the controller to choose one to create AWS VPC Endpoints\n for the AWS VPC Endpoint Services created for ClusterDeployments in their\n corresponding regions.\n3. A list of VPCs that should be able to resolve the DNS addresses setup for Private Link.",
+ "$ref": "#/definitions/io.openshift.hive.v1.AWSPrivateLinkConfig"
},
- "patches": {
- "description": "Patches is the list of patches to apply.",
+ "backup": {
+ "description": "Backup specifies configuration for backup integration. If absent, backup integration will be disabled.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.BackupConfig"
+ },
+ "clusterVersionPollInterval": {
+ "description": "ClusterVersionPollInterval is a string duration indicating how much time must pass before checking whether we need to update the hive.openshift.io/version* labels on ClusterDeployment. If zero or unset, we'll only reconcile when the ClusterDeployment changes.",
+ "type": "string"
+ },
+ "controllersConfig": {
+ "description": "ControllersConfig is used to configure different hive controllers",
+ "$ref": "#/definitions/io.openshift.hive.v1.ControllersConfig"
+ },
+ "deleteProtection": {
+ "description": "DeleteProtection can be set to \"enabled\" to turn on automatic delete protection for ClusterDeployments. When enabled, Hive will add the \"hive.openshift.io/protected-delete\" annotation to new ClusterDeployments. Once a ClusterDeployment has been installed, a user must remove the annotation from a ClusterDeployment prior to deleting it.",
+ "type": "string"
+ },
+ "deploymentConfig": {
+ "description": "DeploymentConfig is used to configure (pods/containers of) the Deployments generated by hive-operator.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SyncObjectPatch"
+ "$ref": "#/definitions/io.openshift.hive.v1.DeploymentConfig"
}
},
- "resourceApplyMode": {
- "description": "ResourceApplyMode indicates if the Resource apply mode is \"Upsert\" (default) or \"Sync\". ApplyMode \"Upsert\" indicates create and update. ApplyMode \"Sync\" indicates create, update and delete.",
- "type": "string"
+ "deprovisionsDisabled": {
+ "description": "DeprovisionsDisabled can be set to true to block deprovision jobs from running.",
+ "type": "boolean"
},
- "resources": {
- "description": "Resources is the list of objects to sync from RawExtension definitions.",
+ "disabledControllers": {
+ "description": "DisabledControllers allows selectively disabling Hive controllers by name. The name of an individual controller matches the name of the controller as seen in the Hive logging output.",
"type": "array",
"items": {
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "type": "string",
+ "default": ""
}
},
- "secretMappings": {
- "description": "Secrets is the list of secrets to sync along with their respective destinations.",
+ "exportMetrics": {
+ "description": "ExportMetrics has been disabled and has no effect. If upgrading from a version where it was active, please be aware of the following in your HiveConfig.Spec.TargetNamespace (default `hive` if unset): 1) ServiceMonitors named hive-controllers and hive-clustersync; 2) Role and RoleBinding named prometheus-k8s; 3) The `openshift.io/cluster-monitoring` metadata.label on the Namespace itself. You may wish to delete these resources. Or you may wish to continue using them to enable monitoring in your environment; but be aware that hive will no longer reconcile them.",
+ "type": "boolean"
+ },
+ "failedProvisionConfig": {
+ "description": "FailedProvisionConfig is used to configure settings related to handling provision failures.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.FailedProvisionConfig"
+ },
+ "featureGates": {
+ "$ref": "#/definitions/io.openshift.hive.v1.FeatureGateSelection"
+ },
+ "globalPullSecretRef": {
+ "description": "GlobalPullSecretRef is used to specify a pull secret that will be used globally by all of the cluster deployments. For each cluster deployment, the contents of GlobalPullSecret will be merged with the specific pull secret for a cluster deployment(if specified), with precedence given to the contents of the pull secret for the cluster deployment. The global pull secret is assumed to be in the TargetNamespace.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "logLevel": {
+ "description": "LogLevel is the level of logging to use for the Hive controllers. Acceptable levels, from coarsest to finest, are panic, fatal, error, warn, info, debug, and trace. The default level is info.",
+ "type": "string"
+ },
+ "machinePoolPollInterval": {
+ "description": "MachinePoolPollInterval is a string duration indicating how much time must pass before checking whether remote resources related to MachinePools need to be reapplied. Set to zero to disable polling -- we'll only reconcile when hub objects change. The default interval is 30m.",
+ "type": "string"
+ },
+ "maintenanceMode": {
+ "description": "MaintenanceMode can be set to true to disable the hive controllers in situations where we need to ensure nothing is running that will add or act upon finalizers on Hive types. This should rarely be needed. Sets replicas to 0 for the hive-controllers deployment to accomplish this.",
+ "type": "boolean"
+ },
+ "managedDomains": {
+ "description": "ManagedDomains is the list of DNS domains that are managed by the Hive cluster When specifying 'manageDNS: true' in a ClusterDeployment, the ClusterDeployment's baseDomain should be a direct child of one of these domains, otherwise the ClusterDeployment creation will result in a validation error.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SecretMapping"
+ "$ref": "#/definitions/io.openshift.hive.v1.ManageDNSConfig"
}
+ },
+ "metricsConfig": {
+ "description": "MetricsConfig encapsulates metrics specific configurations, like opting in for certain metrics.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.metricsconfig.MetricsConfig"
+ },
+ "privateLink": {
+ "description": "PrivateLink is used to configure the privatelink controller.",
+ "$ref": "#/definitions/io.openshift.hive.v1.PrivateLinkConfig"
+ },
+ "releaseImageVerificationConfigMapRef": {
+ "description": "ReleaseImageVerificationConfigMapRef is a reference to the ConfigMap that will be used to verify release images.\n\nThe config map structure is exactly the same as the config map used for verification of release images for OpenShift 4 during upgrades. Therefore you can usually set this to the config map shipped as part of OpenShift (openshift-config-managed/release-verification).\n\nSee https://github.com/openshift/cluster-update-keys for more details. The keys within the config map in the data field define how verification is performed:\n\nverifier-public-key-*: One or more GPG public keys in ASCII form that must have signed the\n release image by digest.\n\nstore-*: A URL (scheme file://, http://, or https://) location that contains signatures. These\n signatures are in the atomic container signature format. The URL will have the digest\n of the image appended to it as \"\u003cSTORE\u003e/\u003cALGO\u003e=\u003cDIGEST\u003e/signature-\u003cNUMBER\u003e\" as described\n in the container image signing format. The docker-image-manifest section of the\n signature must match the release image digest. Signatures are searched starting at\n NUMBER 1 and incrementing if the signature exists but is not valid. The signature is a\n GPG signed and encrypted JSON message. The file store is provided for testing only at\n the current time, although future versions of the CVO might allow host mounting of\n signatures.\n\nSee https://github.com/containers/image/blob/ab49b0a48428c623a8f03b41b9083d48966b34a9/docs/signature-protocols.md for a description of the signature store\n\nThe returned verifier will require that any new release image will only be considered verified if each provided public key has signed the release image digest. The signature may be in any store and the lookup order is internally defined.\n\nIf not set, no verification will be performed.",
+ "$ref": "#/definitions/io.openshift.hive.v1.ReleaseImageVerificationConfigMapReference"
+ },
+ "serviceProviderCredentialsConfig": {
+ "description": "ServiceProviderCredentialsConfig is used to configure credentials related to being a service provider on various cloud platforms.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.ServiceProviderCredentials"
+ },
+ "syncSetReapplyInterval": {
+ "description": "SyncSetReapplyInterval is a string duration indicating how much time must pass before SyncSet resources will be reapplied. The default reapply interval is two hours.",
+ "type": "string"
+ },
+ "targetNamespace": {
+ "description": "TargetNamespace is the namespace where the core Hive components should be run. Defaults to \"hive\". Will be created if it does not already exist. All resource references in HiveConfig can be assumed to be in the TargetNamespace. NOTE: Whereas it is possible to edit this value, causing hive to \"move\" its core components to the new namespace, the old namespace is not deleted, as it will still contain resources created by kubernetes and/or other OpenShift controllers.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SelectorSyncSetSpec",
+ "Kind": "HiveConfigSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SelectorSyncSetStatus": {
- "description": "SelectorSyncSetStatus defines the observed state of a SelectorSyncSet",
+ "io.openshift.hive.v1.HiveConfigStatus": {
+ "description": "HiveConfigStatus defines the observed state of Hive",
"type": "object",
+ "properties": {
+ "aggregatorClientCAHash": {
+ "description": "AggregatorClientCAHash keeps an md5 hash of the aggregator client CA configmap data from the openshift-config-managed namespace. When the configmap changes, admission is redeployed.",
+ "type": "string"
+ },
+ "conditions": {
+ "description": "Conditions includes more detailed status for the HiveConfig",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.HiveConfigCondition"
+ }
+ },
+ "configApplied": {
+ "description": "ConfigApplied will be set by the hive operator to indicate whether or not the LastGenerationObserved was successfully reconciled.",
+ "type": "boolean"
+ },
+ "observedGeneration": {
+ "description": "ObservedGeneration will record the most recently processed HiveConfig object's generation.",
+ "type": "integer",
+ "format": "int64"
+ }
+ },
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SelectorSyncSetStatus",
+ "Kind": "HiveConfigStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.ServiceProviderCredentials": {
- "description": "ServiceProviderCredentials is used to configure credentials related to being a service provider on various cloud platforms.",
+ "io.openshift.hive.v1.IBMClusterDeprovision": {
+ "description": "IBMClusterDeprovision contains IBM Cloud specific configuration for a ClusterDeprovision",
"type": "object",
+ "required": [
+ "credentialsSecretRef",
+ "region",
+ "baseDomain"
+ ],
"properties": {
- "aws": {
- "description": "AWS is used to configure credentials related to being a service provider on AWS.",
- "$ref": "#/definitions/io.openshift.hive.v1.AWSServiceProviderCredentials"
+ "baseDomain": {
+ "description": "BaseDomain is the DNS base domain.",
+ "type": "string",
+ "default": ""
+ },
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef is the IBM Cloud credentials to use for deprovisioning the cluster",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "region": {
+ "description": "Region specifies the IBM Cloud region",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ServiceProviderCredentials",
+ "Kind": "IBMClusterDeprovision",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SpecificControllerConfig": {
- "description": "SpecificControllerConfig contains the configuration for a specific controller",
+ "io.openshift.hive.v1.IdentityProviderStatus": {
+ "description": "IdentityProviderStatus defines the observed state of SyncSet",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "IdentityProviderStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.InventoryEntry": {
+ "description": "InventoryEntry maintains a reference to a custom resource consumed by a clusterpool to customize the cluster deployment.",
"type": "object",
"required": [
- "name",
- "config"
+ "name"
],
"properties": {
- "config": {
- "description": "ControllerConfig contains the configuration for the controller specified by Name field",
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.ControllerConfig"
+ "kind": {
+ "description": "Kind denotes the kind of the referenced resource. The default is ClusterDeploymentCustomization, which is also currently the only supported value.",
+ "type": "string"
},
"name": {
- "description": "Name specifies the name of the controller",
- "type": "string",
- "default": ""
+ "description": "Name is the name of the referenced resource.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SpecificControllerConfig",
+ "Kind": "InventoryEntry",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SyncCondition": {
- "description": "SyncCondition is a condition in a SyncStatus",
+ "io.openshift.hive.v1.KubeconfigSecretReference": {
+ "description": "KubeconfigSecretReference is a reference to a secret containing the kubeconfig for a remote cluster.",
"type": "object",
"required": [
- "type",
- "status"
+ "name",
+ "namespace"
],
"properties": {
- "lastProbeTime": {
- "description": "LastProbeTime is the last time we probed the condition.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "lastTransitionTime": {
- "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "Message is a human-readable message indicating details about last transition.",
- "type": "string"
- },
- "reason": {
- "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.",
- "type": "string"
- },
- "status": {
- "description": "Status is the status of the condition.",
+ "name": {
+ "description": "Name is the name of the secret.",
"type": "string",
"default": ""
},
- "type": {
- "description": "Type is the type of the condition.",
+ "namespace": {
+ "description": "Namespace is the namespace where the secret lives.",
"type": "string",
"default": ""
}
@@ -86235,12 +87629,12 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SyncCondition",
+ "Kind": "KubeconfigSecretReference",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SyncIdentityProvider": {
- "description": "SyncIdentityProvider is the Schema for the SyncIdentityProvider API",
+ "io.openshift.hive.v1.MachinePool": {
+ "description": "MachinePool is the Schema for the machinepools API",
"type": "object",
"properties": {
"apiVersion": {
@@ -86257,162 +87651,130 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SyncIdentityProviderSpec"
+ "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.IdentityProviderStatus"
+ "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SyncIdentityProvider",
+ "Kind": "MachinePool",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SyncIdentityProviderCommonSpec": {
- "description": "SyncIdentityProviderCommonSpec defines the identity providers to sync",
+ "io.openshift.hive.v1.MachinePoolAutoscaling": {
+ "description": "MachinePoolAutoscaling details how the machine pool is to be auto-scaled.",
"type": "object",
"required": [
- "identityProviders"
+ "minReplicas",
+ "maxReplicas"
],
"properties": {
- "identityProviders": {
- "description": "IdentityProviders is an ordered list of ways for a user to identify themselves",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.IdentityProvider"
- }
+ "maxReplicas": {
+ "description": "MaxReplicas is the maximum number of replicas for the machine pool.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "minReplicas": {
+ "description": "MinReplicas is the minimum number of replicas for the machine pool.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SyncIdentityProviderCommonSpec",
+ "Kind": "MachinePoolAutoscaling",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SyncIdentityProviderList": {
- "description": "SyncIdentityProviderList contains a list of SyncIdentityProviders",
+ "io.openshift.hive.v1.MachinePoolCondition": {
+ "description": "MachinePoolCondition contains details for the current condition of a machine pool",
"type": "object",
"required": [
- "items"
+ "type",
+ "status"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "lastProbeTime": {
+ "description": "LastProbeTime is the last time we probed the condition.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SyncIdentityProvider"
- }
+ "lastTransitionTime": {
+ "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "message": {
+ "description": "Message is a human-readable message indicating details about last transition.",
"type": "string"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "reason": {
+ "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.",
+ "type": "string"
+ },
+ "status": {
+ "description": "Status is the status of the condition.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "Type is the type of the condition.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
+ "Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SyncIdentityProviderList",
+ "Kind": "MachinePoolCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SyncIdentityProviderSpec": {
- "description": "SyncIdentityProviderSpec defines the SyncIdentityProviderCommonSpec identity providers to sync along with ClusterDeploymentRefs indicating which clusters the SyncIdentityProvider applies to in the SyncIdentityProvider's namespace.",
+ "io.openshift.hive.v1.MachinePoolList": {
+ "description": "MachinePoolList contains a list of MachinePool",
"type": "object",
"required": [
- "identityProviders",
- "clusterDeploymentRefs"
+ "items"
],
"properties": {
- "clusterDeploymentRefs": {
- "description": "ClusterDeploymentRefs is the list of LocalObjectReference indicating which clusters the SyncSet applies to in the SyncSet's namespace.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- }
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "identityProviders": {
- "description": "IdentityProviders is an ordered list of ways for a user to identify themselves",
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.IdentityProvider"
+ "$ref": "#/definitions/io.openshift.hive.v1.MachinePool"
}
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "SyncIdentityProviderSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.SyncObjectPatch": {
- "description": "SyncObjectPatch represents a patch to be applied to a specific object",
- "type": "object",
- "required": [
- "apiVersion",
- "kind",
- "name",
- "patch"
- ],
- "properties": {
- "apiVersion": {
- "description": "APIVersion is the Group and Version of the object to be patched.",
- "type": "string",
- "default": ""
},
"kind": {
- "description": "Kind is the Kind of the object to be patched.",
- "type": "string",
- "default": ""
- },
- "name": {
- "description": "Name is the name of the object to be patched.",
- "type": "string",
- "default": ""
- },
- "namespace": {
- "description": "Namespace is the Namespace in which the object to patch exists. Defaults to the SyncSet's Namespace.",
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "patch": {
- "description": "Patch is the patch to apply.",
- "type": "string",
- "default": ""
- },
- "patchType": {
- "description": "PatchType indicates the PatchType as \"strategic\" (default), \"json\", or \"merge\".",
- "type": "string"
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SyncObjectPatch",
+ "Kind": "MachinePoolList",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SyncSet": {
- "description": "SyncSet is the Schema for the SyncSet API",
+ "io.openshift.hive.v1.MachinePoolNameLease": {
+ "description": "MachinePoolNameLease is the Schema for the MachinePoolNameLeases API. This resource is mostly empty as we're primarily relying on the name to determine if a lease is available. Note that not all cloud providers require the use of a lease for naming, at present this is only required for GCP where we're extremely restricted on name lengths.",
"type": "object",
"properties": {
"apiVersion": {
@@ -86429,150 +87791,174 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SyncSetSpec"
+ "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolNameLeaseSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SyncSetStatus"
+ "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolNameLeaseStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SyncSet",
+ "Kind": "MachinePoolNameLease",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SyncSetCommonSpec": {
- "description": "SyncSetCommonSpec defines the resources and patches to sync",
+ "io.openshift.hive.v1.MachinePoolNameLeaseList": {
+ "description": "MachinePoolNameLeaseList contains a list of MachinePoolNameLeases.",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "applyBehavior": {
- "description": "ApplyBehavior indicates how resources in this syncset will be applied to the target cluster. The default value of \"Apply\" indicates that resources should be applied using the 'oc apply' command. If no value is set, \"Apply\" is assumed. A value of \"CreateOnly\" indicates that the resource will only be created if it does not already exist in the target cluster. Otherwise, it will be left alone. A value of \"CreateOrUpdate\" indicates that the resource will be created/updated without the use of the 'oc apply' command, allowing larger resources to be synced, but losing some functionality of the 'oc apply' command such as the ability to remove annotations, labels, and other map entries in general.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "enableResourceTemplates": {
- "description": "EnableResourceTemplates, if True, causes hive to honor golang text/templates in Resources. While the standard syntax is supported, it won't do you a whole lot of good as the parser does not pass a data object (i.e. there is no \"dot\" for you to use). This currently exists to expose a single function: {{ fromCDLabel \"some.label/key\" }} will be substituted with the string value of ClusterDeployment.Labels[\"some.label/key\"]. The empty string is interpolated if there are no labels, or if the indicated key does not exist. Note that this only works in values (not e.g. map keys) that are of type string.",
- "type": "boolean"
- },
- "patches": {
- "description": "Patches is the list of patches to apply.",
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SyncObjectPatch"
+ "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolNameLease"
}
},
- "resourceApplyMode": {
- "description": "ResourceApplyMode indicates if the Resource apply mode is \"Upsert\" (default) or \"Sync\". ApplyMode \"Upsert\" indicates create and update. ApplyMode \"Sync\" indicates create, update and delete.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "resources": {
- "description": "Resources is the list of objects to sync from RawExtension definitions.",
- "type": "array",
- "items": {
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- }
- },
- "secretMappings": {
- "description": "Secrets is the list of secrets to sync along with their respective destinations.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SecretMapping"
- }
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "MachinePoolNameLeaseList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.MachinePoolNameLeaseSpec": {
+ "description": "MachinePoolNameLeaseSpec is a minimal resource for obtaining unique machine pool names of a limited length.",
+ "type": "object",
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SyncSetCommonSpec",
+ "Kind": "MachinePoolNameLeaseSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SyncSetList": {
- "description": "SyncSetList contains a list of SyncSets",
+ "io.openshift.hive.v1.MachinePoolNameLeaseStatus": {
+ "description": "MachinePoolNameLeaseStatus defines the observed state of MachinePoolNameLease.",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "MachinePoolNameLeaseStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.MachinePoolPlatform": {
+ "description": "MachinePoolPlatform is the platform-specific configuration for a machine pool. Only one of the platforms should be set.",
"type": "object",
- "required": [
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "aws": {
+ "description": "AWS is the configuration used when installing on AWS.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.MachinePoolPlatform"
},
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SyncSet"
- }
+ "azure": {
+ "description": "Azure is the configuration used when installing on Azure.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.azure.MachinePool"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "gcp": {
+ "description": "GCP is the configuration used when installing on GCP.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.MachinePool"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "ibmcloud": {
+ "description": "IBMCloud is the configuration used when installing on IBM Cloud.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ibmcloud.MachinePool"
+ },
+ "openstack": {
+ "description": "OpenStack is the configuration used when installing on OpenStack.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.openstack.MachinePool"
+ },
+ "ovirt": {
+ "description": "Ovirt is the configuration used when installing on oVirt.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ovirt.MachinePool"
+ },
+ "vsphere": {
+ "description": "VSphere is the configuration used when installing on vSphere",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.vsphere.MachinePool"
}
},
"x-fabric8-info": {
- "Type": "list",
+ "Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SyncSetList",
+ "Kind": "MachinePoolPlatform",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SyncSetObjectStatus": {
- "description": "SyncSetObjectStatus describes the status of resources created or patches that have been applied from a SyncSet or SelectorSyncSet.",
+ "io.openshift.hive.v1.MachinePoolSpec": {
+ "description": "MachinePoolSpec defines the desired state of MachinePool",
"type": "object",
"required": [
- "name"
+ "clusterDeploymentRef",
+ "name",
+ "platform"
],
"properties": {
- "conditions": {
- "description": "Conditions is the list of SyncConditions used to indicate UnknownObject when a resource type cannot be determined from a SyncSet resource.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SyncCondition"
+ "autoscaling": {
+ "description": "Autoscaling is the details for auto-scaling the machine pool. Replicas and autoscaling cannot be used together.",
+ "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolAutoscaling"
+ },
+ "clusterDeploymentRef": {
+ "description": "ClusterDeploymentRef references the cluster deployment to which this machine pool belongs.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "labels": {
+ "description": "Map of label string keys and values that will be applied to the created MachineSet's MachineSpec. This affects the labels that will end up on the *Nodes* (in contrast with the MachineLabels field). This list will overwrite any modifications made to Node labels on an ongoing basis.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "machineLabels": {
+ "description": "Map of label string keys and values that will be applied to the created MachineSet's MachineTemplateSpec. This affects the labels that will end up on the *Machines* (in contrast with the Labels field). This list will overwrite any modifications made to Machine labels on an ongoing basis. Note: We ignore entries that conflict with generated labels.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
}
},
"name": {
- "description": "Name is the name of the SyncSet.",
+ "description": "Name is the name of the machine pool.",
"type": "string",
"default": ""
},
- "patches": {
- "description": "Patches is the list of SyncStatus for patches that have been applied.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SyncStatus"
- }
- },
- "resourceApplyMode": {
- "description": "ResourceApplyMode indicates if the Resource apply mode is \"Upsert\" (default) or \"Sync\". ApplyMode \"Upsert\" indicates create and update. ApplyMode \"Sync\" indicates create, update and delete.",
- "type": "string"
+ "platform": {
+ "description": "Platform is configuration for machine pool specific to the platform. When using a MachinePool to control the default worker machines created by installer, these must match the values provided in the install-config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolPlatform"
},
- "resources": {
- "description": "Resources is the list of SyncStatus for objects that have been synced.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SyncStatus"
- }
+ "replicas": {
+ "description": "Replicas is the count of machines for this machine pool. Replicas and autoscaling cannot be used together. Default is 1, if autoscaling is not used.",
+ "type": "integer",
+ "format": "int64"
},
- "secrets": {
- "description": "Secrets is the list of SyncStatus for secrets that have been synced.",
+ "taints": {
+ "description": "List of taints that will be applied to the created MachineSet's MachineSpec. This list will overwrite any modifications made to Node taints on an ongoing basis. In case of duplicate entries, first encountered taint Value will be preserved, and the rest collapsed on the corresponding MachineSets. Note that taints are uniquely identified based on key+effect, not just key.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SyncStatus"
+ "$ref": "#/definitions/io.k8s.api.core.v1.Taint"
}
}
},
@@ -86580,153 +87966,141 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SyncSetObjectStatus",
+ "Kind": "MachinePoolSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SyncSetSpec": {
- "description": "SyncSetSpec defines the SyncSetCommonSpec resources and patches to sync along with ClusterDeploymentRefs indicating which clusters the SyncSet applies to in the SyncSet's namespace.",
+ "io.openshift.hive.v1.MachinePoolStatus": {
+ "description": "MachinePoolStatus defines the observed state of MachinePool",
"type": "object",
- "required": [
- "clusterDeploymentRefs"
- ],
"properties": {
- "applyBehavior": {
- "description": "ApplyBehavior indicates how resources in this syncset will be applied to the target cluster. The default value of \"Apply\" indicates that resources should be applied using the 'oc apply' command. If no value is set, \"Apply\" is assumed. A value of \"CreateOnly\" indicates that the resource will only be created if it does not already exist in the target cluster. Otherwise, it will be left alone. A value of \"CreateOrUpdate\" indicates that the resource will be created/updated without the use of the 'oc apply' command, allowing larger resources to be synced, but losing some functionality of the 'oc apply' command such as the ability to remove annotations, labels, and other map entries in general.",
- "type": "string"
- },
- "clusterDeploymentRefs": {
- "description": "ClusterDeploymentRefs is the list of LocalObjectReference indicating which clusters the SyncSet applies to in the SyncSet's namespace.",
+ "conditions": {
+ "description": "Conditions includes more detailed status for the cluster deployment",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolCondition"
}
},
- "enableResourceTemplates": {
- "description": "EnableResourceTemplates, if True, causes hive to honor golang text/templates in Resources. While the standard syntax is supported, it won't do you a whole lot of good as the parser does not pass a data object (i.e. there is no \"dot\" for you to use). This currently exists to expose a single function: {{ fromCDLabel \"some.label/key\" }} will be substituted with the string value of ClusterDeployment.Labels[\"some.label/key\"]. The empty string is interpolated if there are no labels, or if the indicated key does not exist. Note that this only works in values (not e.g. map keys) that are of type string.",
- "type": "boolean"
+ "controlledByReplica": {
+ "description": "ControlledByReplica indicates which replica of the hive-machinepool StatefulSet is responsible for this MachinePool. Note that this value indicates the replica that most recently handled the MachinePool. If the hive-machinepool statefulset is scaled up or down, the controlling replica can change, potentially causing logs to be spread across multiple pods.",
+ "type": "integer",
+ "format": "int64"
},
- "patches": {
- "description": "Patches is the list of patches to apply.",
+ "machineSets": {
+ "description": "MachineSets is the status of the machine sets for the machine pool on the remote cluster.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SyncObjectPatch"
+ "$ref": "#/definitions/io.openshift.hive.v1.MachineSetStatus"
}
},
- "resourceApplyMode": {
- "description": "ResourceApplyMode indicates if the Resource apply mode is \"Upsert\" (default) or \"Sync\". ApplyMode \"Upsert\" indicates create and update. ApplyMode \"Sync\" indicates create, update and delete.",
- "type": "string"
+ "ownedLabels": {
+ "description": "OwnedLabels lists the keys of labels this MachinePool created on the remote MachineSet's MachineSpec. (In contrast with OwnedMachineLabels.) Used to identify labels to remove from the remote MachineSet when they are absent from the MachinePool's spec.labels.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "resources": {
- "description": "Resources is the list of objects to sync from RawExtension definitions.",
+ "ownedMachineLabels": {
+ "description": "OwnedMachineLabels lists the keys of labels this MachinePool created on the remote MachineSet's MachineTemplateSpec. (In contrast with OwnedLabels.) Used to identify labels to remove from the remote MachineSet when they are absent from the MachinePool's spec.machineLabels.",
"type": "array",
"items": {
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "type": "string",
+ "default": ""
}
},
- "secretMappings": {
- "description": "Secrets is the list of secrets to sync along with their respective destinations.",
+ "ownedTaints": {
+ "description": "OwnedTaints lists identifiers of taints this MachinePool created on the remote MachineSet. Used to identify taints to remove from the remote MachineSet when they are absent from the MachinePool's spec.taints.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SecretMapping"
+ "$ref": "#/definitions/io.openshift.hive.v1.TaintIdentifier"
}
+ },
+ "replicas": {
+ "description": "Replicas is the current number of replicas for the machine pool.",
+ "type": "integer",
+ "format": "int32"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SyncSetSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.hive.v1.SyncSetStatus": {
- "description": "SyncSetStatus defines the observed state of a SyncSet",
- "type": "object",
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "hive.openshift.io",
- "Version": "v1",
- "Kind": "SyncSetStatus",
+ "Kind": "MachinePoolStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.SyncStatus": {
- "description": "SyncStatus describes objects that have been created or patches that have been applied using the unique md5 sum of the object or patch.",
+ "io.openshift.hive.v1.MachineSetStatus": {
+ "description": "MachineSetStatus is the status of a machineset in the remote cluster.",
"type": "object",
"required": [
- "apiVersion",
- "kind",
"name",
- "namespace",
- "hash",
- "conditions"
+ "replicas",
+ "minReplicas",
+ "maxReplicas"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion is the Group and Version of the object that was synced or patched.",
- "type": "string",
- "default": ""
+ "errorMessage": {
+ "type": "string"
},
- "conditions": {
- "description": "Conditions is the list of conditions indicating success or failure of object create, update and delete as well as patch application.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.hive.v1.SyncCondition"
- }
+ "errorReason": {
+ "description": "In the event that there is a terminal problem reconciling the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason will be populated with a succinct value suitable for machine interpretation, while ErrorMessage will contain a more verbose string suitable for logging and human consumption.",
+ "type": "string"
},
- "hash": {
- "description": "Hash is the unique md5 hash of the resource or patch.",
- "type": "string",
- "default": ""
+ "maxReplicas": {
+ "description": "MaxReplicas is the maximum number of replicas for the machine set.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "kind": {
- "description": "Kind is the Kind of the object that was synced or patched.",
- "type": "string",
- "default": ""
+ "minReplicas": {
+ "description": "MinReplicas is the minimum number of replicas for the machine set.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
"name": {
- "description": "Name is the name of the object that was synced or patched.",
+ "description": "Name is the name of the machine set.",
"type": "string",
"default": ""
},
- "namespace": {
- "description": "Namespace is the Namespace of the object that was synced or patched.",
- "type": "string",
- "default": ""
+ "readyReplicas": {
+ "description": "The number of ready replicas for this MachineSet. A machine is considered ready when the node has been created and is \"Ready\". It is transferred as-is from the MachineSet from remote cluster.",
+ "type": "integer",
+ "format": "int32"
},
- "resource": {
- "description": "Resource is the resource name for the object that was synced. This will be populated for resources, but not patches",
- "type": "string"
+ "replicas": {
+ "description": "Replicas is the current number of replicas for the machine set.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SyncStatus",
+ "Kind": "MachineSetStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.TaintIdentifier": {
- "description": "TaintIdentifier uniquely identifies a Taint. (It turns out taints are mutually exclusive by key+effect, not simply by key.)",
+ "io.openshift.hive.v1.ManageDNSAWSConfig": {
+ "description": "ManageDNSAWSConfig contains AWS-specific info to manage a given domain.",
"type": "object",
+ "required": [
+ "credentialsSecretRef"
+ ],
"properties": {
- "effect": {
- "description": "Effect matches corev1.Taint.Effect.\n\nPossible enum values:\n - `\"NoExecute\"` Evict any already-running pods that do not tolerate the taint. Currently enforced by NodeController.\n - `\"NoSchedule\"` Do not allow new pods to schedule onto the node unless they tolerate the taint, but allow all pods submitted to Kubelet without going through the scheduler to start, and allow all already-running pods to continue running. Enforced by the scheduler.\n - `\"PreferNoSchedule\"` Like TaintEffectNoSchedule, but the scheduler tries not to schedule new pods onto the node, rather than prohibiting new pods from scheduling onto the node entirely. Enforced by the scheduler.",
- "type": "string",
- "enum": [
- "NoExecute",
- "NoSchedule",
- "PreferNoSchedule"
- ]
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS Route53. It will need permission to manage entries for the domain listed in the parent ManageDNSConfig object. Secret should have AWS keys named 'aws_access_key_id' and 'aws_secret_access_key'.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "key": {
- "description": "Key matches corev1.Taint.Key.",
+ "region": {
+ "description": "Region is the AWS region to use for route53 operations. This defaults to us-east-1. For AWS China, use cn-northwest-1.",
"type": "string"
}
},
@@ -86734,31 +88108,29 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "TaintIdentifier",
+ "Kind": "ManageDNSAWSConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.VSphereClusterDeprovision": {
- "description": "VSphereClusterDeprovision contains VMware vSphere-specific configuration for a ClusterDeprovision",
+ "io.openshift.hive.v1.ManageDNSAzureConfig": {
+ "description": "ManageDNSAzureConfig contains Azure-specific info to manage a given domain",
"type": "object",
"required": [
"credentialsSecretRef",
- "certificatesSecretRef",
- "vCenter"
+ "resourceGroupName"
],
"properties": {
- "certificatesSecretRef": {
- "description": "CertificatesSecretRef refers to a secret that contains the vSphere CA certificates necessary for communicating with the VCenter.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "cloudName": {
+ "description": "CloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to \"AzurePublicCloud\".",
+ "type": "string"
},
"credentialsSecretRef": {
- "description": "CredentialsSecretRef is the vSphere account credentials to use for deprovisioning the cluster",
+ "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with Azure DNS. It wil need permission to manage entries in each of the managed domains listed in the parent ManageDNSConfig object. Secret should have a key named 'osServicePrincipal.json'",
"default": {},
"$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "vCenter": {
- "description": "VCenter is the vSphere vCenter hostname.",
+ "resourceGroupName": {
+ "description": "ResourceGroupName specifies the Azure resource group containing the DNS zones for the domains being managed.",
"type": "string",
"default": ""
}
@@ -86767,338 +88139,428 @@
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "VSphereClusterDeprovision",
+ "Kind": "ManageDNSAzureConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.hive.v1.VeleroBackupConfig": {
- "description": "VeleroBackupConfig contains settings for the Velero backup integration.",
+ "io.openshift.hive.v1.ManageDNSConfig": {
+ "description": "ManageDNSConfig contains the domain being managed, and the cloud-specific details for accessing/managing the domain.",
"type": "object",
+ "required": [
+ "domains"
+ ],
"properties": {
- "enabled": {
- "description": "Enabled dictates if Velero backup integration is enabled. If not specified, the default is disabled.",
- "type": "boolean"
- },
- "namespace": {
- "description": "Namespace specifies in which namespace velero backup objects should be created. If not specified, the default is a namespace named \"velero\".",
- "type": "string"
+ "aws": {
+ "description": "AWS contains AWS-specific settings for external DNS",
+ "$ref": "#/definitions/io.openshift.hive.v1.ManageDNSAWSConfig"
+ },
+ "azure": {
+ "description": "Azure contains Azure-specific settings for external DNS",
+ "$ref": "#/definitions/io.openshift.hive.v1.ManageDNSAzureConfig"
+ },
+ "domains": {
+ "description": "Domains is the list of domains that hive will be managing entries for with the provided credentials.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "gcp": {
+ "description": "GCP contains GCP-specific settings for external DNS",
+ "$ref": "#/definitions/io.openshift.hive.v1.ManageDNSGCPConfig"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "VeleroBackupConfig",
+ "Kind": "ManageDNSConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.DockerImageReference": {
- "description": "DockerImageReference points to a container image.",
+ "io.openshift.hive.v1.ManageDNSGCPConfig": {
+ "description": "ManageDNSGCPConfig contains GCP-specific info to manage a given domain.",
"type": "object",
"required": [
- "Registry",
- "Namespace",
- "Name",
- "Tag",
- "ID"
+ "credentialsSecretRef"
],
"properties": {
- "ID": {
- "description": "ID is the identifier for the container image",
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with GCP DNS. It will need permission to manage entries in each of the managed domains for this cluster. listed in the parent ManageDNSConfig object. Secret should have a key named 'osServiceAccount.json'. The credentials must specify the project to use.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "ManageDNSGCPConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.OpenStackClusterDeprovision": {
+ "description": "OpenStackClusterDeprovision contains OpenStack-specific configuration for a ClusterDeprovision",
+ "type": "object",
+ "required": [
+ "cloud"
+ ],
+ "properties": {
+ "certificatesSecretRef": {
+ "description": "CertificatesSecretRef refers to a secret that contains CA certificates necessary for communicating with the OpenStack.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "cloud": {
+ "description": "Cloud is the secion in the clouds.yaml secret below to use for auth/connectivity.",
"type": "string",
"default": ""
},
- "Name": {
- "description": "Name is the name of the container image",
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef is the OpenStack account credentials to use for deprovisioning the cluster",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "OpenStackClusterDeprovision",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.OvirtClusterDeprovision": {
+ "description": "OvirtClusterDeprovision contains oVirt-specific configuration for a ClusterDeprovision",
+ "type": "object",
+ "required": [
+ "clusterID",
+ "credentialsSecretRef",
+ "certificatesSecretRef"
+ ],
+ "properties": {
+ "certificatesSecretRef": {
+ "description": "CertificatesSecretRef refers to a secret that contains the oVirt CA certificates necessary for communicating with the oVirt.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "clusterID": {
+ "description": "The oVirt cluster ID",
"type": "string",
"default": ""
},
- "Namespace": {
- "description": "Namespace is the namespace that contains the container image",
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef is the oVirt account credentials to use for deprovisioning the cluster secret fields: ovirt_url, ovirt_username, ovirt_password, ovirt_ca_bundle",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "OvirtClusterDeprovision",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.PatchEntity": {
+ "description": "PatchEntity represent a json patch (RFC 6902) to be applied to the install-config",
+ "type": "object",
+ "required": [
+ "op",
+ "path",
+ "value"
+ ],
+ "properties": {
+ "from": {
+ "description": "From is the json path to copy or move the value from",
+ "type": "string"
+ },
+ "op": {
+ "description": "Op is the operation to perform: add, remove, replace, move, copy, test",
"type": "string",
"default": ""
},
- "Registry": {
- "description": "Registry is the registry that contains the container image",
+ "path": {
+ "description": "Path is the json path to the value to be modified",
"type": "string",
"default": ""
},
- "Tag": {
- "description": "Tag is which tag of the container image is being referenced",
+ "value": {
+ "description": "Value is the value to be used in the operation",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "DockerImageReference",
+ "Kind": "PatchEntity",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.Image": {
- "description": "Image is an immutable representation of a container image and metadata at a point in time. Images are named by taking a hash of their contents (metadata and content) and any change in format, content, or metadata results in a new name. The images resource is primarily for use by cluster administrators and integrations like the cluster image registry - end users instead access images via the imagestreamtags or imagestreamimages resources. While image metadata is stored in the API, any integration that implements the container image registry API must provide its own storage for the raw manifest data, image config, and layer contents.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.hive.v1.Platform": {
+ "description": "Platform is the configuration for the specific platform upon which to perform the installation. Only one of the platform configuration should be set.",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "dockerImageConfig": {
- "description": "DockerImageConfig is a JSON blob that the runtime uses to set up the container. This is a part of manifest schema v2. Will not be set when the image represents a manifest list.",
- "type": "string"
- },
- "dockerImageLayers": {
- "description": "DockerImageLayers represents the layers in the image. May not be set if the image does not define that data or if the image represents a manifest list.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageLayer"
- }
+ "agentBareMetal": {
+ "description": "AgentBareMetal is the configuration used when performing an Assisted Agent based installation to bare metal.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.agent.BareMetalPlatform"
},
- "dockerImageManifest": {
- "description": "DockerImageManifest is the raw JSON of the manifest",
- "type": "string"
+ "aws": {
+ "description": "AWS is the configuration used when installing on AWS.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.Platform"
},
- "dockerImageManifestMediaType": {
- "description": "DockerImageManifestMediaType specifies the mediaType of manifest. This is a part of manifest schema v2.",
- "type": "string"
+ "azure": {
+ "description": "Azure is the configuration used when installing on Azure.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.azure.Platform"
},
- "dockerImageManifests": {
- "description": "DockerImageManifests holds information about sub-manifests when the image represents a manifest list. When this field is present, no DockerImageLayers should be specified.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageManifest"
- }
+ "baremetal": {
+ "description": "BareMetal is the configuration used when installing on bare metal.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.baremetal.Platform"
},
- "dockerImageMetadata": {
- "description": "DockerImageMetadata contains metadata about this image",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension",
- "x-kubernetes-patch-strategy": "replace"
+ "gcp": {
+ "description": "GCP is the configuration used when installing on Google Cloud Platform.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.Platform"
},
- "dockerImageMetadataVersion": {
- "description": "DockerImageMetadataVersion conveys the version of the object, which if empty defaults to \"1.0\"",
- "type": "string"
+ "ibmcloud": {
+ "description": "IBMCloud is the configuration used when installing on IBM Cloud",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ibmcloud.Platform"
},
- "dockerImageReference": {
- "description": "DockerImageReference is the string that can be used to pull this image.",
- "type": "string"
+ "none": {
+ "description": "None indicates platform-agnostic install. https://docs.openshift.com/container-platform/4.7/installing/installing_platform_agnostic/installing-platform-agnostic.html",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.none.Platform"
},
- "dockerImageSignatures": {
- "description": "DockerImageSignatures provides the signatures as opaque blobs. This is a part of manifest schema v1.",
- "type": "array",
- "items": {
- "type": "string",
- "format": "byte"
- }
+ "openstack": {
+ "description": "OpenStack is the configuration used when installing on OpenStack",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.openstack.Platform"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "ovirt": {
+ "description": "Ovirt is the configuration used when installing on oVirt",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ovirt.Platform"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "vsphere": {
+ "description": "VSphere is the configuration used when installing on vSphere",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.vsphere.Platform"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "Platform",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.PlatformStatus": {
+ "description": "PlatformStatus contains the observed state for the specific platform upon which to perform the installation",
+ "type": "object",
+ "properties": {
+ "aws": {
+ "description": "AWS is the observed state on AWS.",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.PlatformStatus"
},
- "signatures": {
- "description": "Signatures holds all signatures of the image.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageSignature"
- },
- "x-kubernetes-patch-merge-key": "name",
- "x-kubernetes-patch-strategy": "merge"
+ "gcp": {
+ "description": "GCP is the observed state on GCP",
+ "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.PlatformStatus"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "image.openshift.io",
+ "Type": "nested",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "Image",
- "Scope": "Clustered"
+ "Kind": "PlatformStatus",
+ "Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageBlobReferences": {
- "description": "ImageBlobReferences describes the blob references within an image.",
+ "io.openshift.hive.v1.PrivateLinkConfig": {
+ "description": "PrivateLinkConfig defines the configuration for the privatelink controller.",
"type": "object",
"properties": {
- "config": {
- "description": "config, if set, is the blob that contains the image config. Some images do not have separate config blobs and this field will be set to nil if so.",
- "type": "string"
+ "gcp": {
+ "description": "GCP is the configuration for GCP hub and link resources.",
+ "$ref": "#/definitions/io.openshift.hive.v1.GCPPrivateServiceConnectConfig"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "PrivateLinkConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.Provisioning": {
+ "description": "Provisioning contains settings used only for initial cluster provisioning.",
+ "type": "object",
+ "properties": {
+ "imageSetRef": {
+ "description": "ImageSetRef is a reference to a ClusterImageSet. If a value is specified for ReleaseImage, that will take precedence over the one from the ClusterImageSet.",
+ "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSetReference"
},
- "imageMissing": {
- "description": "imageMissing is true if the image is referenced by the image stream but the image object has been deleted from the API by an administrator. When this field is set, layers and config fields may be empty and callers that depend on the image metadata should consider the image to be unavailable for download or viewing.",
- "type": "boolean",
- "default": false
+ "installConfigSecretRef": {
+ "description": "InstallConfigSecretRef is the reference to a secret that contains an openshift-install InstallConfig. This file will be passed through directly to the installer. Any version of InstallConfig can be used, provided it can be parsed by the openshift-install version for the release you are provisioning.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "layers": {
- "description": "layers is the list of blobs that compose this image, from base layer to top layer. All layers referenced by this array will be defined in the blobs map. Some images may have zero layers.",
+ "installerEnv": {
+ "description": "InstallerEnv are extra environment variables to pass through to the installer. This may be used to enable additional features of the installer.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar"
}
},
- "manifests": {
- "description": "manifests is the list of other image names that this image points to. For a single architecture image, it is empty. For a multi-arch image, it consists of the digests of single architecture images, such images shouldn't have layers nor config.",
+ "installerImageOverride": {
+ "description": "InstallerImageOverride allows specifying a URI for the installer image, normally gleaned from the metadata within the ReleaseImage.",
+ "type": "string"
+ },
+ "manifestsConfigMapRef": {
+ "description": "ManifestsConfigMapRef is a reference to user-provided manifests to add to or replace manifests that are generated by the installer. It serves the same purpose as, and is mutually exclusive with, ManifestsSecretRef.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "manifestsSecretRef": {
+ "description": "ManifestsSecretRef is a reference to user-provided manifests to add to or replace manifests that are generated by the installer. It serves the same purpose as, and is mutually exclusive with, ManifestsConfigMapRef.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "releaseImage": {
+ "description": "ReleaseImage is the image containing metadata for all components that run in the cluster, and is the primary and best way to specify what specific version of OpenShift you wish to install.",
+ "type": "string"
+ },
+ "sshKnownHosts": {
+ "description": "SSHKnownHosts are known hosts to be configured in the hive install manager pod to avoid ssh prompts. Use of ssh in the install pod is somewhat limited today (failure log gathering from cluster, some bare metal provisioning scenarios), so this setting is often not needed.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
+ },
+ "sshPrivateKeySecretRef": {
+ "description": "SSHPrivateKeySecretRef is the reference to the secret that contains the private SSH key to use for access to compute instances. This private key should correspond to the public key included in the InstallConfig. The private key is used by Hive to gather logs on the target cluster if there are install failures. The SSH private key is expected to be in the secret data under the \"ssh-privatekey\" key.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageBlobReferences",
+ "Kind": "Provisioning",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageImportSpec": {
- "description": "ImageImportSpec describes a request to import a specific image.",
+ "io.openshift.hive.v1.ReleaseImageVerificationConfigMapReference": {
+ "description": "ReleaseImageVerificationConfigMapReference is a reference to the ConfigMap that will be used to verify release images.",
"type": "object",
"required": [
- "from"
+ "namespace",
+ "name"
],
"properties": {
- "from": {
- "description": "From is the source of an image to import; only kind DockerImage is allowed",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "importPolicy": {
- "description": "ImportPolicy is the policy controlling how the image is imported",
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.TagImportPolicy"
- },
- "includeManifest": {
- "description": "IncludeManifest determines if the manifest for each image is returned in the response",
- "type": "boolean"
- },
- "referencePolicy": {
- "description": "ReferencePolicy defines how other components should consume the image",
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.TagReferencePolicy"
+ "name": {
+ "description": "Name of the ConfigMap",
+ "type": "string",
+ "default": ""
},
- "to": {
- "description": "To is a tag in the current image stream to assign the imported image to, if name is not specified the default tag from from.name will be used",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "namespace": {
+ "description": "Namespace of the ConfigMap",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageImportSpec",
+ "Kind": "ReleaseImageVerificationConfigMapReference",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageImportStatus": {
- "description": "ImageImportStatus describes the result of an image import.",
+ "io.openshift.hive.v1.SecretMapping": {
+ "description": "SecretMapping defines a source and destination for a secret to be synced by a SyncSet",
"type": "object",
"required": [
- "status"
+ "sourceRef",
+ "targetRef"
],
"properties": {
- "image": {
- "description": "Image is the metadata of that image, if the image was located",
- "$ref": "#/definitions/io.openshift.image.v1.Image"
- },
- "manifests": {
- "description": "Manifests holds sub-manifests metadata when importing a manifest list",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.Image"
- }
- },
- "status": {
- "description": "Status is the status of the image import, including errors encountered while retrieving the image",
+ "sourceRef": {
+ "description": "SourceRef specifies the name and namespace of a secret on the management cluster",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status"
+ "$ref": "#/definitions/io.openshift.hive.v1.SecretReference"
},
- "tag": {
- "description": "Tag is the tag this image was located under, if any",
- "type": "string"
+ "targetRef": {
+ "description": "TargetRef specifies the target name and namespace of the secret on the target cluster",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.SecretReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageImportStatus",
+ "Kind": "SecretMapping",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageLayer": {
- "description": "ImageLayer represents a single layer of the image. Some images may have multiple layers. Some may have none.",
+ "io.openshift.hive.v1.SecretReference": {
+ "description": "SecretReference is a reference to a secret by name and namespace",
"type": "object",
"required": [
- "name",
- "size",
- "mediaType"
+ "name"
],
"properties": {
- "mediaType": {
- "description": "MediaType of the referenced object.",
- "type": "string",
- "default": ""
- },
"name": {
- "description": "Name of the layer as defined by the underlying store.",
+ "description": "Name is the name of the secret",
"type": "string",
"default": ""
},
- "size": {
- "description": "Size of the layer in bytes as defined by the underlying store.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "namespace": {
+ "description": "Namespace is the namespace where the secret lives. If not present for the source secret reference, it is assumed to be the same namespace as the syncset with the reference.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageLayer",
+ "Kind": "SecretReference",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageLayerData": {
- "description": "ImageLayerData contains metadata about an image layer.",
+ "io.openshift.hive.v1.SelectorSyncIdentityProvider": {
+ "description": "SelectorSyncIdentityProvider is the Schema for the SelectorSyncSet API",
"type": "object",
- "required": [
- "size",
- "mediaType"
- ],
"properties": {
- "mediaType": {
- "description": "MediaType of the referenced object.",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "size": {
- "description": "Size of the layer in bytes as defined by the underlying store. This field is optional if the necessary information about size is not available.",
- "type": "integer",
- "format": "int64"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncIdentityProviderSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.IdentityProviderStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "image.openshift.io",
+ "Type": "object",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageLayerData",
- "Scope": "Namespaced"
+ "Kind": "SelectorSyncIdentityProvider",
+ "Scope": "Clustered"
}
},
- "io.openshift.image.v1.ImageList": {
- "description": "ImageList is a list of Image objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.hive.v1.SelectorSyncIdentityProviderList": {
+ "description": "SelectorSyncIdentityProviderList contains a list of SelectorSyncIdentityProviders",
"type": "object",
"required": [
"items"
@@ -87109,11 +88571,10 @@
"type": "string"
},
"items": {
- "description": "Items is a list of images",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.Image"
+ "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncIdentityProvider"
}
},
"kind": {
@@ -87121,241 +88582,269 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageList",
+ "Kind": "SelectorSyncIdentityProviderList",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageLookupPolicy": {
- "description": "ImageLookupPolicy describes how an image stream can be used to override the image references used by pods, builds, and other resources in a namespace.",
+ "io.openshift.hive.v1.SelectorSyncIdentityProviderSpec": {
+ "description": "SelectorSyncIdentityProviderSpec defines the SyncIdentityProviderCommonSpec to sync to ClusterDeploymentSelector indicating which clusters the SelectorSyncIdentityProvider applies to in any namespace.",
"type": "object",
"required": [
- "local"
+ "identityProviders"
],
"properties": {
- "local": {
- "description": "local will change the docker short image references (like \"mysql\" or \"php:latest\") on objects in this namespace to the image ID whenever they match this image stream, instead of reaching out to a remote registry. The name will be fully qualified to an image ID if found. The tag's referencePolicy is taken into account on the replaced value. Only works within the current namespace.",
- "type": "boolean",
- "default": false
+ "clusterDeploymentSelector": {
+ "description": "ClusterDeploymentSelector is a LabelSelector indicating which clusters the SelectorIdentityProvider applies to in any namespace.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ },
+ "identityProviders": {
+ "description": "IdentityProviders is an ordered list of ways for a user to identify themselves",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.IdentityProvider"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageLookupPolicy",
+ "Kind": "SelectorSyncIdentityProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageManifest": {
- "description": "ImageManifest represents sub-manifests of a manifest list. The Digest field points to a regular Image object.",
+ "io.openshift.hive.v1.SelectorSyncSet": {
+ "description": "SelectorSyncSet is the Schema for the SelectorSyncSet API",
"type": "object",
- "required": [
- "digest",
- "mediaType",
- "manifestSize",
- "architecture",
- "os"
- ],
"properties": {
- "architecture": {
- "description": "Architecture specifies the supported CPU architecture, for example `amd64` or `ppc64le`.",
- "type": "string",
- "default": ""
- },
- "digest": {
- "description": "Digest is the unique identifier for the manifest. It refers to an Image object.",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "manifestSize": {
- "description": "ManifestSize represents the size of the raw object contents, in bytes.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "mediaType": {
- "description": "MediaType defines the type of the manifest, possible values are application/vnd.oci.image.manifest.v1+json, application/vnd.docker.distribution.manifest.v2+json or application/vnd.docker.distribution.manifest.v1+json.",
- "type": "string",
- "default": ""
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "os": {
- "description": "OS specifies the operating system, for example `linux`.",
- "type": "string",
- "default": ""
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncSetSpec"
},
- "variant": {
- "description": "Variant is an optional field repreenting a variant of the CPU, for example v6 to specify a particular CPU variant of the ARM CPU.",
- "type": "string"
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncSetStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "image.openshift.io",
+ "Type": "object",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageManifest",
- "Scope": "Namespaced"
+ "Kind": "SelectorSyncSet",
+ "Scope": "Clustered"
}
},
- "io.openshift.image.v1.ImageSignature": {
- "description": "ImageSignature holds a signature of an image. It allows to verify image identity and possibly other claims as long as the signature is trusted. Based on this information it is possible to restrict runnable images to those matching cluster-wide policy. Mandatory fields should be parsed by clients doing image verification. The others are parsed from signature's content by the server. They serve just an informative purpose.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.hive.v1.SelectorSyncSetList": {
+ "description": "SelectorSyncSetList contains a list of SyncSets",
"type": "object",
"required": [
- "type",
- "content"
+ "items"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "conditions": {
- "description": "Conditions represent the latest available observations of a signature's current state.",
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.SignatureCondition"
- },
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "content": {
- "description": "Required: An opaque binary string which is an image's signature.",
- "type": "string",
- "format": "byte"
- },
- "created": {
- "description": "If specified, it is the time of signature's creation.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "imageIdentity": {
- "description": "A human readable string representing image's identity. It could be a product name and version, or an image pull spec (e.g. \"registry.access.redhat.com/rhel7/rhel:7.2\").",
- "type": "string"
- },
- "issuedBy": {
- "description": "If specified, it holds information about an issuer of signing certificate or key (a person or entity who signed the signing certificate or key).",
- "$ref": "#/definitions/io.openshift.image.v1.SignatureIssuer"
- },
- "issuedTo": {
- "description": "If specified, it holds information about a subject of signing certificate or key (a person or entity who signed the image).",
- "$ref": "#/definitions/io.openshift.image.v1.SignatureSubject"
+ "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncSet"
+ }
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "signedClaims": {
- "description": "Contains claims from the signature.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "type": {
- "description": "Required: Describes a type of stored blob.",
- "type": "string",
- "default": ""
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "image.openshift.io",
+ "Type": "list",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageSignature",
- "Scope": "Clustered"
+ "Kind": "SelectorSyncSetList",
+ "Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageStream": {
- "description": "An ImageStream stores a mapping of tags to images, metadata overrides that are applied when images are tagged in a stream, and an optional reference to a container image repository on a registry. Users typically update the spec.tags field to point to external images which are imported from container registries using credentials in your namespace with the pull secret type, or to existing image stream tags and images which are immediately accessible for tagging or pulling. The history of images applied to a tag is visible in the status.tags field and any user who can view an image stream is allowed to tag that image into their own image streams. Access to pull images from the integrated registry is granted by having the \"get imagestreams/layers\" permission on a given image stream. Users may remove a tag by deleting the imagestreamtag resource, which causes both spec and status for that tag to be removed. Image stream history is retained until an administrator runs the prune operation, which removes references that are no longer in use. To preserve a historical image, ensure there is a tag in spec pointing to that image by its digest.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.hive.v1.SelectorSyncSetSpec": {
+ "description": "SelectorSyncSetSpec defines the SyncSetCommonSpec resources and patches to sync along with a ClusterDeploymentSelector indicating which clusters the SelectorSyncSet applies to in any namespace.",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "applyBehavior": {
+ "description": "ApplyBehavior indicates how resources in this syncset will be applied to the target cluster. The default value of \"Apply\" indicates that resources should be applied using the 'oc apply' command. If no value is set, \"Apply\" is assumed. A value of \"CreateOnly\" indicates that the resource will only be created if it does not already exist in the target cluster. Otherwise, it will be left alone. A value of \"CreateOrUpdate\" indicates that the resource will be created/updated without the use of the 'oc apply' command, allowing larger resources to be synced, but losing some functionality of the 'oc apply' command such as the ability to remove annotations, labels, and other map entries in general.",
"type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "clusterDeploymentSelector": {
+ "description": "ClusterDeploymentSelector is a LabelSelector indicating which clusters the SelectorSyncSet applies to in any namespace.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ },
+ "enableResourceTemplates": {
+ "description": "EnableResourceTemplates, if True, causes hive to honor golang text/templates in Resources. While the standard syntax is supported, it won't do you a whole lot of good as the parser does not pass a data object (i.e. there is no \"dot\" for you to use). This currently exists to expose a single function: {{ fromCDLabel \"some.label/key\" }} will be substituted with the string value of ClusterDeployment.Labels[\"some.label/key\"]. The empty string is interpolated if there are no labels, or if the indicated key does not exist. Note that this only works in values (not e.g. map keys) that are of type string.",
+ "type": "boolean"
+ },
+ "patches": {
+ "description": "Patches is the list of patches to apply.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.SyncObjectPatch"
+ }
+ },
+ "resourceApplyMode": {
+ "description": "ResourceApplyMode indicates if the Resource apply mode is \"Upsert\" (default) or \"Sync\". ApplyMode \"Upsert\" indicates create and update. ApplyMode \"Sync\" indicates create, update and delete.",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "resources": {
+ "description": "Resources is the list of objects to sync from RawExtension definitions.",
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ }
},
- "spec": {
- "description": "Spec describes the desired state of this stream",
+ "secretMappings": {
+ "description": "Secrets is the list of secrets to sync along with their respective destinations.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.SecretMapping"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "SelectorSyncSetSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.SelectorSyncSetStatus": {
+ "description": "SelectorSyncSetStatus defines the observed state of a SelectorSyncSet",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "SelectorSyncSetStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.ServiceProviderCredentials": {
+ "description": "ServiceProviderCredentials is used to configure credentials related to being a service provider on various cloud platforms.",
+ "type": "object",
+ "properties": {
+ "aws": {
+ "description": "AWS is used to configure credentials related to being a service provider on AWS.",
+ "$ref": "#/definitions/io.openshift.hive.v1.AWSServiceProviderCredentials"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "ServiceProviderCredentials",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.SpecificControllerConfig": {
+ "description": "SpecificControllerConfig contains the configuration for a specific controller",
+ "type": "object",
+ "required": [
+ "name",
+ "config"
+ ],
+ "properties": {
+ "config": {
+ "description": "ControllerConfig contains the configuration for the controller specified by Name field",
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageStreamSpec"
+ "$ref": "#/definitions/io.openshift.hive.v1.ControllerConfig"
},
- "status": {
- "description": "Status describes the current state of this stream",
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageStreamStatus"
+ "name": {
+ "description": "Name specifies the name of the controller",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "image.openshift.io",
+ "Type": "nested",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageStream",
+ "Kind": "SpecificControllerConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageStreamImage": {
- "description": "ImageStreamImage represents an Image that is retrieved by image name from an ImageStream. User interfaces and regular users can use this resource to access the metadata details of a tagged image in the image stream history for viewing, since Image resources are not directly accessible to end users. A not found error will be returned if no such image is referenced by a tag within the ImageStream. Images are created when spec tags are set on an image stream that represent an image in an external registry, when pushing to the integrated registry, or when tagging an existing image from one image stream to another. The name of an image stream image is in the form \"\u003cSTREAM\u003e@\u003cDIGEST\u003e\", where the digest is the content addressible identifier for the image (sha256:xxxxx...). You can use ImageStreamImages as the from.kind of an image stream spec tag to reference an image exactly. The only operations supported on the imagestreamimage endpoint are retrieving the image.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.hive.v1.SyncCondition": {
+ "description": "SyncCondition is a condition in a SyncStatus",
"type": "object",
"required": [
- "image"
+ "type",
+ "status"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "lastProbeTime": {
+ "description": "LastProbeTime is the last time we probed the condition.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "image": {
- "description": "Image associated with the ImageStream and image name.",
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.Image"
+ "lastTransitionTime": {
+ "description": "LastTransitionTime is the last time the condition transitioned from one status to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "message": {
+ "description": "Message is a human-readable message indicating details about last transition.",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "reason": {
+ "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.",
+ "type": "string"
+ },
+ "status": {
+ "description": "Status is the status of the condition.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "Type is the type of the condition.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "image.openshift.io",
+ "Type": "nested",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageStreamImage",
+ "Kind": "SyncCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageStreamImport": {
- "description": "The image stream import resource provides an easy way for a user to find and import container images from other container image registries into the server. Individual images or an entire image repository may be imported, and users may choose to see the results of the import prior to tagging the resulting images into the specified image stream.\n\nThis API is intended for end-user tools that need to see the metadata of the image prior to import (for instance, to generate an application from it). Clients that know the desired image can continue to create spec.tags directly into their image streams.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.hive.v1.SyncIdentityProvider": {
+ "description": "SyncIdentityProvider is the Schema for the SyncIdentityProvider API",
"type": "object",
- "required": [
- "spec",
- "status"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -87366,343 +88855,248 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "Spec is a description of the images that the user wishes to import",
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageStreamImportSpec"
+ "$ref": "#/definitions/io.openshift.hive.v1.SyncIdentityProviderSpec"
},
"status": {
- "description": "Status is the result of importing the image",
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageStreamImportStatus"
+ "$ref": "#/definitions/io.openshift.hive.v1.IdentityProviderStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageStreamImport",
+ "Kind": "SyncIdentityProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageStreamImportSpec": {
- "description": "ImageStreamImportSpec defines what images should be imported.",
+ "io.openshift.hive.v1.SyncIdentityProviderCommonSpec": {
+ "description": "SyncIdentityProviderCommonSpec defines the identity providers to sync",
"type": "object",
"required": [
- "import"
+ "identityProviders"
],
"properties": {
- "images": {
- "description": "Images are a list of individual images to import.",
+ "identityProviders": {
+ "description": "IdentityProviders is an ordered list of ways for a user to identify themselves",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageImportSpec"
+ "$ref": "#/definitions/io.openshift.config.v1.IdentityProvider"
}
- },
- "import": {
- "description": "Import indicates whether to perform an import - if so, the specified tags are set on the spec and status of the image stream defined by the type meta.",
- "type": "boolean",
- "default": false
- },
- "repository": {
- "description": "Repository is an optional import of an entire container image repository. A maximum limit on the number of tags imported this way is imposed by the server.",
- "$ref": "#/definitions/io.openshift.image.v1.RepositoryImportSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageStreamImportSpec",
+ "Kind": "SyncIdentityProviderCommonSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageStreamImportStatus": {
- "description": "ImageStreamImportStatus contains information about the status of an image stream import.",
+ "io.openshift.hive.v1.SyncIdentityProviderList": {
+ "description": "SyncIdentityProviderList contains a list of SyncIdentityProviders",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "images": {
- "description": "Images is set with the result of importing spec.images",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageImportStatus"
+ "$ref": "#/definitions/io.openshift.hive.v1.SyncIdentityProvider"
}
},
- "import": {
- "description": "Import is the image stream that was successfully updated or created when 'to' was set.",
- "$ref": "#/definitions/io.openshift.image.v1.ImageStream"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "repository": {
- "description": "Repository is set if spec.repository was set to the outcome of the import",
- "$ref": "#/definitions/io.openshift.image.v1.RepositoryImportStatus"
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "image.openshift.io",
+ "Type": "list",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageStreamImportStatus",
+ "Kind": "SyncIdentityProviderList",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageStreamLayers": {
- "description": "ImageStreamLayers describes information about the layers referenced by images in this image stream.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.hive.v1.SyncIdentityProviderSpec": {
+ "description": "SyncIdentityProviderSpec defines the SyncIdentityProviderCommonSpec identity providers to sync along with ClusterDeploymentRefs indicating which clusters the SyncIdentityProvider applies to in the SyncIdentityProvider's namespace.",
"type": "object",
"required": [
- "blobs",
- "images"
+ "identityProviders",
+ "clusterDeploymentRefs"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "blobs": {
- "description": "blobs is a map of blob name to metadata about the blob.",
- "type": "object",
- "additionalProperties": {
+ "clusterDeploymentRefs": {
+ "description": "ClusterDeploymentRefs is the list of LocalObjectReference indicating which clusters the SyncSet applies to in the SyncSet's namespace.",
+ "type": "array",
+ "items": {
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageLayerData"
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
}
},
- "images": {
- "description": "images is a map between an image name and the names of the blobs and config that comprise the image.",
- "type": "object",
- "additionalProperties": {
+ "identityProviders": {
+ "description": "IdentityProviders is an ordered list of ways for a user to identify themselves",
+ "type": "array",
+ "items": {
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageBlobReferences"
+ "$ref": "#/definitions/io.openshift.config.v1.IdentityProvider"
}
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "image.openshift.io",
+ "Type": "nested",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageStreamLayers",
+ "Kind": "SyncIdentityProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageStreamList": {
- "description": "ImageStreamList is a list of ImageStream objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.hive.v1.SyncObjectPatch": {
+ "description": "SyncObjectPatch represents a patch to be applied to a specific object",
"type": "object",
"required": [
- "items"
+ "apiVersion",
+ "kind",
+ "name",
+ "patch"
],
"properties": {
"apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "description": "Items is a list of imageStreams",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageStream"
- }
+ "description": "APIVersion is the Group and Version of the object to be patched.",
+ "type": "string",
+ "default": ""
},
"kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "description": "Kind is the Kind of the object to be patched.",
+ "type": "string",
+ "default": ""
+ },
+ "name": {
+ "description": "Name is the name of the object to be patched.",
+ "type": "string",
+ "default": ""
+ },
+ "namespace": {
+ "description": "Namespace is the Namespace in which the object to patch exists. Defaults to the SyncSet's Namespace.",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "patch": {
+ "description": "Patch is the patch to apply.",
+ "type": "string",
+ "default": ""
+ },
+ "patchType": {
+ "description": "PatchType indicates the PatchType as \"strategic\" (default), \"json\", or \"merge\".",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "image.openshift.io",
+ "Type": "nested",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageStreamList",
+ "Kind": "SyncObjectPatch",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageStreamMapping": {
- "description": "ImageStreamMapping represents a mapping from a single image stream tag to a container image as well as the reference to the container image stream the image came from. This resource is used by privileged integrators to create an image resource and to associate it with an image stream in the status tags field. Creating an ImageStreamMapping will allow any user who can view the image stream to tag or pull that image, so only create mappings where the user has proven they have access to the image contents directly. The only operation supported for this resource is create and the metadata name and namespace should be set to the image stream containing the tag that should be updated.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.hive.v1.SyncSet": {
+ "description": "SyncSet is the Schema for the SyncSet API",
"type": "object",
- "required": [
- "image",
- "tag"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "image": {
- "description": "Image is a container image.",
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.Image"
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "tag": {
- "description": "Tag is a string value this image can be located with inside the stream.",
- "type": "string",
- "default": ""
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.SyncSetSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.SyncSetStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageStreamMapping",
+ "Kind": "SyncSet",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageStreamSpec": {
- "description": "ImageStreamSpec represents options for ImageStreams.",
+ "io.openshift.hive.v1.SyncSetCommonSpec": {
+ "description": "SyncSetCommonSpec defines the resources and patches to sync",
"type": "object",
"properties": {
- "dockerImageRepository": {
- "description": "dockerImageRepository is optional, if specified this stream is backed by a container repository on this server Deprecated: This field is deprecated as of v3.7 and will be removed in a future release. Specify the source for the tags to be imported in each tag via the spec.tags.from reference instead.",
+ "applyBehavior": {
+ "description": "ApplyBehavior indicates how resources in this syncset will be applied to the target cluster. The default value of \"Apply\" indicates that resources should be applied using the 'oc apply' command. If no value is set, \"Apply\" is assumed. A value of \"CreateOnly\" indicates that the resource will only be created if it does not already exist in the target cluster. Otherwise, it will be left alone. A value of \"CreateOrUpdate\" indicates that the resource will be created/updated without the use of the 'oc apply' command, allowing larger resources to be synced, but losing some functionality of the 'oc apply' command such as the ability to remove annotations, labels, and other map entries in general.",
"type": "string"
},
- "lookupPolicy": {
- "description": "lookupPolicy controls how other resources reference images within this namespace.",
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageLookupPolicy"
+ "enableResourceTemplates": {
+ "description": "EnableResourceTemplates, if True, causes hive to honor golang text/templates in Resources. While the standard syntax is supported, it won't do you a whole lot of good as the parser does not pass a data object (i.e. there is no \"dot\" for you to use). This currently exists to expose a single function: {{ fromCDLabel \"some.label/key\" }} will be substituted with the string value of ClusterDeployment.Labels[\"some.label/key\"]. The empty string is interpolated if there are no labels, or if the indicated key does not exist. Note that this only works in values (not e.g. map keys) that are of type string.",
+ "type": "boolean"
},
- "tags": {
- "description": "tags map arbitrary string values to specific image locators",
+ "patches": {
+ "description": "Patches is the list of patches to apply.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.TagReference"
- },
- "x-kubernetes-patch-merge-key": "name",
- "x-kubernetes-patch-strategy": "merge"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "image.openshift.io",
- "Version": "v1",
- "Kind": "ImageStreamSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.image.v1.ImageStreamStatus": {
- "description": "ImageStreamStatus contains information about the state of this image stream.",
- "type": "object",
- "required": [
- "dockerImageRepository"
- ],
- "properties": {
- "dockerImageRepository": {
- "description": "DockerImageRepository represents the effective location this stream may be accessed at. May be empty until the server determines where the repository is located",
- "type": "string",
- "default": ""
+ "$ref": "#/definitions/io.openshift.hive.v1.SyncObjectPatch"
+ }
},
- "publicDockerImageRepository": {
- "description": "PublicDockerImageRepository represents the public location from where the image can be pulled outside the cluster. This field may be empty if the administrator has not exposed the integrated registry externally.",
+ "resourceApplyMode": {
+ "description": "ResourceApplyMode indicates if the Resource apply mode is \"Upsert\" (default) or \"Sync\". ApplyMode \"Upsert\" indicates create and update. ApplyMode \"Sync\" indicates create, update and delete.",
"type": "string"
},
- "tags": {
- "description": "Tags are a historical record of images associated with each tag. The first entry in the TagEvent array is the currently tagged image.",
+ "resources": {
+ "description": "Resources is the list of objects to sync from RawExtension definitions.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.NamedTagEventList"
- },
- "x-kubernetes-patch-merge-key": "tag",
- "x-kubernetes-patch-strategy": "merge"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "image.openshift.io",
- "Version": "v1",
- "Kind": "ImageStreamStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.image.v1.ImageStreamTag": {
- "description": "ImageStreamTag represents an Image that is retrieved by tag name from an ImageStream. Use this resource to interact with the tags and images in an image stream by tag, or to see the image details for a particular tag. The image associated with this resource is the most recently successfully tagged, imported, or pushed image (as described in the image stream status.tags.items list for this tag). If an import is in progress or has failed the previous image will be shown. Deleting an image stream tag clears both the status and spec fields of an image stream. If no image can be retrieved for a given tag, a not found error will be returned.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "required": [
- "tag",
- "generation",
- "lookupPolicy",
- "image"
- ],
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ }
},
- "conditions": {
- "description": "conditions is an array of conditions that apply to the image stream tag.",
+ "secretMappings": {
+ "description": "Secrets is the list of secrets to sync along with their respective destinations.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.TagEventCondition"
+ "$ref": "#/definitions/io.openshift.hive.v1.SecretMapping"
}
- },
- "generation": {
- "description": "generation is the current generation of the tagged image - if tag is provided and this value is not equal to the tag generation, a user has requested an import that has not completed, or conditions will be filled out indicating any error.",
- "type": "integer",
- "format": "int64",
- "default": 0
- },
- "image": {
- "description": "image associated with the ImageStream and tag.",
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.Image"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "lookupPolicy": {
- "description": "lookupPolicy indicates whether this tag will handle image references in this namespace.",
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageLookupPolicy"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "tag": {
- "description": "tag is the spec tag associated with this image stream tag, and it may be null if only pushes have occurred to this image stream.",
- "$ref": "#/definitions/io.openshift.image.v1.TagReference"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "image.openshift.io",
+ "Type": "nested",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageStreamTag",
+ "Kind": "SyncSetCommonSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageStreamTagList": {
- "description": "ImageStreamTagList is a list of ImageStreamTag objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.hive.v1.SyncSetList": {
+ "description": "SyncSetList contains a list of SyncSets",
"type": "object",
"required": [
"items"
@@ -87713,11 +89107,10 @@
"type": "string"
},
"items": {
- "description": "Items is the list of image stream tags",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageStreamTag"
+ "$ref": "#/definitions/io.openshift.hive.v1.SyncSet"
}
},
"kind": {
@@ -87725,345 +89118,316 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "ImageStreamTagList",
+ "Kind": "SyncSetList",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.ImageTag": {
- "description": "ImageTag represents a single tag within an image stream and includes the spec, the status history, and the currently referenced image (if any) of the provided tag. This type replaces the ImageStreamTag by providing a full view of the tag. ImageTags are returned for every spec or status tag present on the image stream. If no tag exists in either form a not found error will be returned by the API. A create operation will succeed if no spec tag has already been defined and the spec field is set. Delete will remove both spec and status elements from the image stream.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.hive.v1.SyncSetObjectStatus": {
+ "description": "SyncSetObjectStatus describes the status of resources created or patches that have been applied from a SyncSet or SelectorSyncSet.",
"type": "object",
"required": [
- "spec",
- "status",
- "image"
+ "name"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "image": {
- "description": "image is the details of the most recent image stream status tag, and it may be null if import has not completed or an administrator has deleted the image object. To verify this is the most recent image, you must verify the generation of the most recent status.items entry matches the spec tag (if a spec tag is set). This field will not be set when listing image tags.",
- "$ref": "#/definitions/io.openshift.image.v1.Image"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec is the spec tag associated with this image stream tag, and it may be null if only pushes have occurred to this image stream.",
- "$ref": "#/definitions/io.openshift.image.v1.TagReference"
+ "conditions": {
+ "description": "Conditions is the list of SyncConditions used to indicate UnknownObject when a resource type cannot be determined from a SyncSet resource.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.SyncCondition"
+ }
},
- "status": {
- "description": "status is the status tag details associated with this image stream tag, and it may be null if no push or import has been performed.",
- "$ref": "#/definitions/io.openshift.image.v1.NamedTagEventList"
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "image.openshift.io",
- "Version": "v1",
- "Kind": "ImageTag",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.image.v1.ImageTagList": {
- "description": "ImageTagList is a list of ImageTag objects. When listing image tags, the image field is not populated. Tags are returned in alphabetical order by image stream and then tag.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "required": [
- "items"
- ],
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "name": {
+ "description": "Name is the name of the SyncSet.",
+ "type": "string",
+ "default": ""
},
- "items": {
- "description": "Items is the list of image stream tags",
+ "patches": {
+ "description": "Patches is the list of SyncStatus for patches that have been applied.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageTag"
+ "$ref": "#/definitions/io.openshift.hive.v1.SyncStatus"
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "resourceApplyMode": {
+ "description": "ResourceApplyMode indicates if the Resource apply mode is \"Upsert\" (default) or \"Sync\". ApplyMode \"Upsert\" indicates create and update. ApplyMode \"Sync\" indicates create, update and delete.",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
- }
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "image.openshift.io",
- "Version": "v1",
- "Kind": "ImageTagList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.image.v1.NamedTagEventList": {
- "description": "NamedTagEventList relates a tag to its image history.",
- "type": "object",
- "required": [
- "tag",
- "items"
- ],
- "properties": {
- "conditions": {
- "description": "Conditions is an array of conditions that apply to the tag event list.",
+ "resources": {
+ "description": "Resources is the list of SyncStatus for objects that have been synced.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.TagEventCondition"
+ "$ref": "#/definitions/io.openshift.hive.v1.SyncStatus"
}
},
- "items": {
- "description": "Standard object's metadata.",
+ "secrets": {
+ "description": "Secrets is the list of SyncStatus for secrets that have been synced.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.TagEvent"
+ "$ref": "#/definitions/io.openshift.hive.v1.SyncStatus"
}
- },
- "tag": {
- "description": "Tag is the tag for which the history is recorded",
- "type": "string",
- "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "NamedTagEventList",
+ "Kind": "SyncSetObjectStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.RepositoryImportSpec": {
- "description": "RepositoryImportSpec describes a request to import images from a container image repository.",
+ "io.openshift.hive.v1.SyncSetSpec": {
+ "description": "SyncSetSpec defines the SyncSetCommonSpec resources and patches to sync along with ClusterDeploymentRefs indicating which clusters the SyncSet applies to in the SyncSet's namespace.",
"type": "object",
"required": [
- "from"
+ "clusterDeploymentRefs"
],
"properties": {
- "from": {
- "description": "From is the source for the image repository to import; only kind DockerImage and a name of a container image repository is allowed",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "applyBehavior": {
+ "description": "ApplyBehavior indicates how resources in this syncset will be applied to the target cluster. The default value of \"Apply\" indicates that resources should be applied using the 'oc apply' command. If no value is set, \"Apply\" is assumed. A value of \"CreateOnly\" indicates that the resource will only be created if it does not already exist in the target cluster. Otherwise, it will be left alone. A value of \"CreateOrUpdate\" indicates that the resource will be created/updated without the use of the 'oc apply' command, allowing larger resources to be synced, but losing some functionality of the 'oc apply' command such as the ability to remove annotations, labels, and other map entries in general.",
+ "type": "string"
},
- "importPolicy": {
- "description": "ImportPolicy is the policy controlling how the image is imported",
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.TagImportPolicy"
+ "clusterDeploymentRefs": {
+ "description": "ClusterDeploymentRefs is the list of LocalObjectReference indicating which clusters the SyncSet applies to in the SyncSet's namespace.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ }
},
- "includeManifest": {
- "description": "IncludeManifest determines if the manifest for each image is returned in the response",
+ "enableResourceTemplates": {
+ "description": "EnableResourceTemplates, if True, causes hive to honor golang text/templates in Resources. While the standard syntax is supported, it won't do you a whole lot of good as the parser does not pass a data object (i.e. there is no \"dot\" for you to use). This currently exists to expose a single function: {{ fromCDLabel \"some.label/key\" }} will be substituted with the string value of ClusterDeployment.Labels[\"some.label/key\"]. The empty string is interpolated if there are no labels, or if the indicated key does not exist. Note that this only works in values (not e.g. map keys) that are of type string.",
"type": "boolean"
},
- "referencePolicy": {
- "description": "ReferencePolicy defines how other components should consume the image",
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.TagReferencePolicy"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "image.openshift.io",
- "Version": "v1",
- "Kind": "RepositoryImportSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.image.v1.RepositoryImportStatus": {
- "description": "RepositoryImportStatus describes the result of an image repository import",
- "type": "object",
- "properties": {
- "additionalTags": {
- "description": "AdditionalTags are tags that exist in the repository but were not imported because a maximum limit of automatic imports was applied.",
+ "patches": {
+ "description": "Patches is the list of patches to apply.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.SyncObjectPatch"
}
},
- "images": {
- "description": "Images is a list of images successfully retrieved by the import of the repository.",
+ "resourceApplyMode": {
+ "description": "ResourceApplyMode indicates if the Resource apply mode is \"Upsert\" (default) or \"Sync\". ApplyMode \"Upsert\" indicates create and update. ApplyMode \"Sync\" indicates create, update and delete.",
+ "type": "string"
+ },
+ "resources": {
+ "description": "Resources is the list of objects to sync from RawExtension definitions.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.ImageImportStatus"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
- "status": {
- "description": "Status reflects whether any failure occurred during import",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status"
+ "secretMappings": {
+ "description": "Secrets is the list of secrets to sync along with their respective destinations.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.hive.v1.SecretMapping"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "RepositoryImportStatus",
+ "Kind": "SyncSetSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.SecretList": {
- "description": "SecretList is a list of Secret.",
+ "io.openshift.hive.v1.SyncSetStatus": {
+ "description": "SyncSetStatus defines the observed state of a SyncSet",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "hive.openshift.io",
+ "Version": "v1",
+ "Kind": "SyncSetStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.hive.v1.SyncStatus": {
+ "description": "SyncStatus describes objects that have been created or patches that have been applied using the unique md5 sum of the object or patch.",
"type": "object",
"required": [
- "items"
+ "apiVersion",
+ "kind",
+ "name",
+ "namespace",
+ "hash",
+ "conditions"
],
"properties": {
"apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "description": "APIVersion is the Group and Version of the object that was synced or patched.",
+ "type": "string",
+ "default": ""
},
- "items": {
- "description": "Items is a list of secret objects. More info: https://kubernetes.io/docs/concepts/configuration/secret",
+ "conditions": {
+ "description": "Conditions is the list of conditions indicating success or failure of object create, update and delete as well as patch application.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.Secret"
+ "$ref": "#/definitions/io.openshift.hive.v1.SyncCondition"
}
},
+ "hash": {
+ "description": "Hash is the unique md5 hash of the resource or patch.",
+ "type": "string",
+ "default": ""
+ },
"kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "description": "Kind is the Kind of the object that was synced or patched.",
+ "type": "string",
+ "default": ""
},
- "metadata": {
- "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "name": {
+ "description": "Name is the name of the object that was synced or patched.",
+ "type": "string",
+ "default": ""
+ },
+ "namespace": {
+ "description": "Namespace is the Namespace of the object that was synced or patched.",
+ "type": "string",
+ "default": ""
+ },
+ "resource": {
+ "description": "Resource is the resource name for the object that was synced. This will be populated for resources, but not patches",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "image.openshift.io",
+ "Type": "nested",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SecretList",
+ "Kind": "SyncStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.SignatureCondition": {
- "description": "SignatureCondition describes an image signature condition of particular kind at particular probe time.",
+ "io.openshift.hive.v1.TaintIdentifier": {
+ "description": "TaintIdentifier uniquely identifies a Taint. (It turns out taints are mutually exclusive by key+effect, not simply by key.)",
"type": "object",
- "required": [
- "type",
- "status"
- ],
"properties": {
- "lastProbeTime": {
- "description": "Last time the condition was checked.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "lastTransitionTime": {
- "description": "Last time the condition transit from one status to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "Human readable message indicating details about last transition.",
- "type": "string"
- },
- "reason": {
- "description": "(brief) reason for the condition's last transition.",
- "type": "string"
- },
- "status": {
- "description": "Status of the condition, one of True, False, Unknown.",
+ "effect": {
+ "description": "Effect matches corev1.Taint.Effect.\n\nPossible enum values:\n - `\"NoExecute\"` Evict any already-running pods that do not tolerate the taint. Currently enforced by NodeController.\n - `\"NoSchedule\"` Do not allow new pods to schedule onto the node unless they tolerate the taint, but allow all pods submitted to Kubelet without going through the scheduler to start, and allow all already-running pods to continue running. Enforced by the scheduler.\n - `\"PreferNoSchedule\"` Like TaintEffectNoSchedule, but the scheduler tries not to schedule new pods onto the node, rather than prohibiting new pods from scheduling onto the node entirely. Enforced by the scheduler.",
"type": "string",
- "default": ""
+ "enum": [
+ "NoExecute",
+ "NoSchedule",
+ "PreferNoSchedule"
+ ]
},
- "type": {
- "description": "Type of signature condition, Complete or Failed.",
- "type": "string",
- "default": ""
+ "key": {
+ "description": "Key matches corev1.Taint.Key.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SignatureCondition",
+ "Kind": "TaintIdentifier",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.SignatureGenericEntity": {
- "description": "SignatureGenericEntity holds a generic information about a person or entity who is an issuer or a subject of signing certificate or key.",
+ "io.openshift.hive.v1.VSphereClusterDeprovision": {
+ "description": "VSphereClusterDeprovision contains VMware vSphere-specific configuration for a ClusterDeprovision",
"type": "object",
+ "required": [
+ "credentialsSecretRef",
+ "certificatesSecretRef",
+ "vCenter"
+ ],
"properties": {
- "commonName": {
- "description": "Common name (e.g. openshift-signing-service).",
- "type": "string"
+ "certificatesSecretRef": {
+ "description": "CertificatesSecretRef refers to a secret that contains the vSphere CA certificates necessary for communicating with the VCenter.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "organization": {
- "description": "Organization name.",
- "type": "string"
+ "credentialsSecretRef": {
+ "description": "CredentialsSecretRef is the vSphere account credentials to use for deprovisioning the cluster",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "vCenter": {
+ "description": "VCenter is the vSphere vCenter hostname.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SignatureGenericEntity",
+ "Kind": "VSphereClusterDeprovision",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.SignatureIssuer": {
- "description": "SignatureIssuer holds information about an issuer of signing certificate or key.",
+ "io.openshift.hive.v1.VeleroBackupConfig": {
+ "description": "VeleroBackupConfig contains settings for the Velero backup integration.",
"type": "object",
"properties": {
- "commonName": {
- "description": "Common name (e.g. openshift-signing-service).",
- "type": "string"
+ "enabled": {
+ "description": "Enabled dictates if Velero backup integration is enabled. If not specified, the default is disabled.",
+ "type": "boolean"
},
- "organization": {
- "description": "Organization name.",
+ "namespace": {
+ "description": "Namespace specifies in which namespace velero backup objects should be created. If not specified, the default is a namespace named \"velero\".",
"type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "image.openshift.io",
+ "Group": "hive.openshift.io",
"Version": "v1",
- "Kind": "SignatureIssuer",
+ "Kind": "VeleroBackupConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.SignatureSubject": {
- "description": "SignatureSubject holds information about a person or entity who created the signature.",
+ "io.openshift.image.v1.DockerImageReference": {
+ "description": "DockerImageReference points to a container image.",
"type": "object",
"required": [
- "publicKeyID"
+ "Registry",
+ "Namespace",
+ "Name",
+ "Tag",
+ "ID"
],
"properties": {
- "commonName": {
- "description": "Common name (e.g. openshift-signing-service).",
- "type": "string"
+ "ID": {
+ "description": "ID is the identifier for the container image",
+ "type": "string",
+ "default": ""
},
- "organization": {
- "description": "Organization name.",
- "type": "string"
+ "Name": {
+ "description": "Name is the name of the container image",
+ "type": "string",
+ "default": ""
},
- "publicKeyID": {
- "description": "If present, it is a human readable key id of public key belonging to the subject used to verify image signature. It should contain at least 64 lowest bits of public key's fingerprint (e.g. 0x685ebe62bf278440).",
+ "Namespace": {
+ "description": "Namespace is the namespace that contains the container image",
+ "type": "string",
+ "default": ""
+ },
+ "Registry": {
+ "description": "Registry is the registry that contains the container image",
+ "type": "string",
+ "default": ""
+ },
+ "Tag": {
+ "description": "Tag is which tag of the container image is being referenced",
"type": "string",
"default": ""
}
@@ -88072,237 +89436,274 @@
"Type": "nested",
"Group": "image.openshift.io",
"Version": "v1",
- "Kind": "SignatureSubject",
+ "Kind": "DockerImageReference",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.TagEvent": {
- "description": "TagEvent is used by ImageStreamStatus to keep a historical record of images associated with a tag.",
+ "io.openshift.image.v1.Image": {
+ "description": "Image is an immutable representation of a container image and metadata at a point in time. Images are named by taking a hash of their contents (metadata and content) and any change in format, content, or metadata results in a new name. The images resource is primarily for use by cluster administrators and integrations like the cluster image registry - end users instead access images via the imagestreamtags or imagestreamimages resources. While image metadata is stored in the API, any integration that implements the container image registry API must provide its own storage for the raw manifest data, image config, and layer contents.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "created",
- "dockerImageReference",
- "image",
- "generation"
- ],
"properties": {
- "created": {
- "description": "Created holds the time the TagEvent was created",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "dockerImageConfig": {
+ "description": "DockerImageConfig is a JSON blob that the runtime uses to set up the container. This is a part of manifest schema v2. Will not be set when the image represents a manifest list.",
+ "type": "string"
+ },
+ "dockerImageLayers": {
+ "description": "DockerImageLayers represents the layers in the image. May not be set if the image does not define that data or if the image represents a manifest list.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageLayer"
+ }
+ },
+ "dockerImageManifest": {
+ "description": "DockerImageManifest is the raw JSON of the manifest",
+ "type": "string"
+ },
+ "dockerImageManifestMediaType": {
+ "description": "DockerImageManifestMediaType specifies the mediaType of manifest. This is a part of manifest schema v2.",
+ "type": "string"
+ },
+ "dockerImageManifests": {
+ "description": "DockerImageManifests holds information about sub-manifests when the image represents a manifest list. When this field is present, no DockerImageLayers should be specified.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageManifest"
+ }
+ },
+ "dockerImageMetadata": {
+ "description": "DockerImageMetadata contains metadata about this image",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension",
+ "x-kubernetes-patch-strategy": "replace"
+ },
+ "dockerImageMetadataVersion": {
+ "description": "DockerImageMetadataVersion conveys the version of the object, which if empty defaults to \"1.0\"",
+ "type": "string"
},
"dockerImageReference": {
- "description": "DockerImageReference is the string that can be used to pull this image",
- "type": "string",
- "default": ""
+ "description": "DockerImageReference is the string that can be used to pull this image.",
+ "type": "string"
},
- "generation": {
- "description": "Generation is the spec tag generation that resulted in this tag being updated",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "dockerImageSignatures": {
+ "description": "DockerImageSignatures provides the signatures as opaque blobs. This is a part of manifest schema v1.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "format": "byte"
+ }
},
- "image": {
- "description": "Image is the image",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "signatures": {
+ "description": "Signatures holds all signatures of the image.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageSignature"
+ },
+ "x-kubernetes-patch-merge-key": "name",
+ "x-kubernetes-patch-strategy": "merge"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "image.openshift.io",
"Version": "v1",
- "Kind": "TagEvent",
- "Scope": "Namespaced"
+ "Kind": "Image",
+ "Scope": "Clustered"
}
},
- "io.openshift.image.v1.TagEventCondition": {
- "description": "TagEventCondition contains condition information for a tag event.",
+ "io.openshift.image.v1.ImageBlobReferences": {
+ "description": "ImageBlobReferences describes the blob references within an image.",
"type": "object",
- "required": [
- "type",
- "status",
- "generation"
- ],
"properties": {
- "generation": {
- "description": "Generation is the spec tag generation that this status corresponds to",
- "type": "integer",
- "format": "int64",
- "default": 0
- },
- "lastTransitionTime": {
- "description": "LastTransitionTIme is the time the condition transitioned from one status to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "Message is a human readable description of the details about last transition, complementing reason.",
+ "config": {
+ "description": "config, if set, is the blob that contains the image config. Some images do not have separate config blobs and this field will be set to nil if so.",
"type": "string"
},
- "reason": {
- "description": "Reason is a brief machine readable explanation for the condition's last transition.",
- "type": "string"
+ "imageMissing": {
+ "description": "imageMissing is true if the image is referenced by the image stream but the image object has been deleted from the API by an administrator. When this field is set, layers and config fields may be empty and callers that depend on the image metadata should consider the image to be unavailable for download or viewing.",
+ "type": "boolean",
+ "default": false
},
- "status": {
- "description": "Status of the condition, one of True, False, Unknown.",
- "type": "string",
- "default": ""
+ "layers": {
+ "description": "layers is the list of blobs that compose this image, from base layer to top layer. All layers referenced by this array will be defined in the blobs map. Some images may have zero layers.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "type": {
- "description": "Type of tag event condition, currently only ImportSuccess",
- "type": "string",
- "default": ""
+ "manifests": {
+ "description": "manifests is the list of other image names that this image points to. For a single architecture image, it is empty. For a multi-arch image, it consists of the digests of single architecture images, such images shouldn't have layers nor config.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "image.openshift.io",
"Version": "v1",
- "Kind": "TagEventCondition",
+ "Kind": "ImageBlobReferences",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.TagImportPolicy": {
- "description": "TagImportPolicy controls how images related to this tag will be imported.",
+ "io.openshift.image.v1.ImageImportSpec": {
+ "description": "ImageImportSpec describes a request to import a specific image.",
"type": "object",
+ "required": [
+ "from"
+ ],
"properties": {
- "importMode": {
- "description": "ImportMode describes how to import an image manifest.",
- "type": "string"
+ "from": {
+ "description": "From is the source of an image to import; only kind DockerImage is allowed",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
},
- "insecure": {
- "description": "Insecure is true if the server may bypass certificate verification or connect directly over HTTP during image import.",
- "type": "boolean"
+ "importPolicy": {
+ "description": "ImportPolicy is the policy controlling how the image is imported",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.TagImportPolicy"
},
- "scheduled": {
- "description": "Scheduled indicates to the server that this tag should be periodically checked to ensure it is up to date, and imported",
+ "includeManifest": {
+ "description": "IncludeManifest determines if the manifest for each image is returned in the response",
"type": "boolean"
+ },
+ "referencePolicy": {
+ "description": "ReferencePolicy defines how other components should consume the image",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.TagReferencePolicy"
+ },
+ "to": {
+ "description": "To is a tag in the current image stream to assign the imported image to, if name is not specified the default tag from from.name will be used",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "image.openshift.io",
"Version": "v1",
- "Kind": "TagImportPolicy",
+ "Kind": "ImageImportSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.TagReference": {
- "description": "TagReference specifies optional annotations for images using this tag and an optional reference to an ImageStreamTag, ImageStreamImage, or DockerImage this tag should track.",
+ "io.openshift.image.v1.ImageImportStatus": {
+ "description": "ImageImportStatus describes the result of an image import.",
"type": "object",
"required": [
- "name"
+ "status"
],
"properties": {
- "annotations": {
- "description": "Optional; if specified, annotations that are applied to images retrieved via ImageStreamTags.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "from": {
- "description": "Optional; if specified, a reference to another image that this tag should point to. Valid values are ImageStreamTag, ImageStreamImage, and DockerImage. ImageStreamTag references can only reference a tag within this same ImageStream.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "image": {
+ "description": "Image is the metadata of that image, if the image was located",
+ "$ref": "#/definitions/io.openshift.image.v1.Image"
},
- "generation": {
- "description": "Generation is a counter that tracks mutations to the spec tag (user intent). When a tag reference is changed the generation is set to match the current stream generation (which is incremented every time spec is changed). Other processes in the system like the image importer observe that the generation of spec tag is newer than the generation recorded in the status and use that as a trigger to import the newest remote tag. To trigger a new import, clients may set this value to zero which will reset the generation to the latest stream generation. Legacy clients will send this value as nil which will be merged with the current tag generation.",
- "type": "integer",
- "format": "int64"
+ "manifests": {
+ "description": "Manifests holds sub-manifests metadata when importing a manifest list",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.Image"
+ }
},
- "importPolicy": {
- "description": "ImportPolicy is information that controls how images may be imported by the server.",
+ "status": {
+ "description": "Status is the status of the image import, including errors encountered while retrieving the image",
"default": {},
- "$ref": "#/definitions/io.openshift.image.v1.TagImportPolicy"
- },
- "name": {
- "description": "Name of the tag",
- "type": "string",
- "default": ""
- },
- "reference": {
- "description": "Reference states if the tag will be imported. Default value is false, which means the tag will be imported.",
- "type": "boolean"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status"
},
- "referencePolicy": {
- "description": "ReferencePolicy defines how other components should consume the image.",
- "default": {},
- "$ref": "#/definitions/io.openshift.image.v1.TagReferencePolicy"
+ "tag": {
+ "description": "Tag is the tag this image was located under, if any",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "image.openshift.io",
"Version": "v1",
- "Kind": "TagReference",
+ "Kind": "ImageImportStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.image.v1.TagReferencePolicy": {
- "description": "TagReferencePolicy describes how pull-specs for images in this image stream tag are generated when image change triggers in deployment configs or builds are resolved. This allows the image stream author to control how images are accessed.",
+ "io.openshift.image.v1.ImageLayer": {
+ "description": "ImageLayer represents a single layer of the image. Some images may have multiple layers. Some may have none.",
"type": "object",
"required": [
- "type"
+ "name",
+ "size",
+ "mediaType"
],
"properties": {
- "type": {
- "description": "Type determines how the image pull spec should be transformed when the image stream tag is used in deployment config triggers or new builds. The default value is `Source`, indicating the original location of the image should be used (if imported). The user may also specify `Local`, indicating that the pull spec should point to the integrated container image registry and leverage the registry's ability to proxy the pull to an upstream registry. `Local` allows the credentials used to pull this image to be managed from the image stream's namespace, so others on the platform can access a remote image but have no access to the remote secret. It also allows the image layers to be mirrored into the local registry which the images can still be pulled even if the upstream registry is unavailable.",
+ "mediaType": {
+ "description": "MediaType of the referenced object.",
+ "type": "string",
+ "default": ""
+ },
+ "name": {
+ "description": "Name of the layer as defined by the underlying store.",
"type": "string",
"default": ""
+ },
+ "size": {
+ "description": "Size of the layer in bytes as defined by the underlying store.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "image.openshift.io",
"Version": "v1",
- "Kind": "TagReferencePolicy",
+ "Kind": "ImageLayer",
"Scope": "Namespaced"
}
},
- "io.openshift.insights.v1alpha1.DataGather": {
- "description": "DataGather provides data gather configuration options and status for the particular Insights data gathering.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.image.v1.ImageLayerData": {
+ "description": "ImageLayerData contains metadata about an image layer.",
"type": "object",
"required": [
- "spec"
+ "size",
+ "mediaType"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec holds user settable values for configuration",
- "default": {},
- "$ref": "#/definitions/io.openshift.insights.v1alpha1.DataGatherSpec"
+ "mediaType": {
+ "description": "MediaType of the referenced object.",
+ "type": "string",
+ "default": ""
},
- "status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
- "default": {},
- "$ref": "#/definitions/io.openshift.insights.v1alpha1.DataGatherStatus"
+ "size": {
+ "description": "Size of the layer in bytes as defined by the underlying store. This field is optional if the necessary information about size is not available.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "insights.openshift.io",
- "Version": "v1alpha1",
- "Kind": "DataGather",
- "Scope": "Clustered"
+ "Type": "nested",
+ "Group": "image.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageLayerData",
+ "Scope": "Namespaced"
}
},
- "io.openshift.insights.v1alpha1.DataGatherList": {
- "description": "DataGatherList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.image.v1.ImageList": {
+ "description": "ImageList is a list of Image objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"items"
],
"properties": {
@@ -88311,11 +89712,11 @@
"type": "string"
},
"items": {
- "description": "items contains a list of DataGather resources.",
+ "description": "Items is a list of images",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.insights.v1alpha1.DataGather"
+ "$ref": "#/definitions/io.openshift.image.v1.Image"
}
},
"kind": {
@@ -88330,1210 +89731,1148 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "insights.openshift.io",
- "Version": "v1alpha1",
- "Kind": "DataGatherList",
+ "Group": "image.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageList",
"Scope": "Namespaced"
}
},
- "io.openshift.insights.v1alpha1.DataGatherSpec": {
- "description": "DataGatherSpec contains the configuration for the DataGather.",
+ "io.openshift.image.v1.ImageLookupPolicy": {
+ "description": "ImageLookupPolicy describes how an image stream can be used to override the image references used by pods, builds, and other resources in a namespace.",
"type": "object",
+ "required": [
+ "local"
+ ],
"properties": {
- "dataPolicy": {
- "description": "dataPolicy allows user to enable additional global obfuscation of the IP addresses and base domain in the Insights archive data. Valid values are \"ClearText\" and \"ObfuscateNetworking\". When set to ClearText the data is not obfuscated. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is ClearText.",
- "type": "string",
- "default": ""
- },
- "gatherers": {
- "description": "gatherers is a list of gatherers configurations. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.insights.v1alpha1.GathererConfig"
- }
+ "local": {
+ "description": "local will change the docker short image references (like \"mysql\" or \"php:latest\") on objects in this namespace to the image ID whenever they match this image stream, instead of reaching out to a remote registry. The name will be fully qualified to an image ID if found. The tag's referencePolicy is taken into account on the replaced value. Only works within the current namespace.",
+ "type": "boolean",
+ "default": false
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "insights.openshift.io",
- "Version": "v1alpha1",
- "Kind": "DataGatherSpec",
+ "Group": "image.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageLookupPolicy",
"Scope": "Namespaced"
}
},
- "io.openshift.insights.v1alpha1.DataGatherStatus": {
- "description": "DataGatherStatus contains information relating to the DataGather state.",
+ "io.openshift.image.v1.ImageManifest": {
+ "description": "ImageManifest represents sub-manifests of a manifest list. The Digest field points to a regular Image object.",
"type": "object",
+ "required": [
+ "digest",
+ "mediaType",
+ "manifestSize",
+ "architecture",
+ "os"
+ ],
"properties": {
- "conditions": {
- "description": "conditions provide details on the status of the gatherer job.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "dataGatherState": {
- "description": "dataGatherState reflects the current state of the data gathering process.",
- "type": "string"
- },
- "finishTime": {
- "description": "finishTime is the time when Insights data gathering finished.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "gatherers": {
- "description": "gatherers is a list of active gatherers (and their statuses) in the last gathering.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.insights.v1alpha1.GathererStatus"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "insightsReport": {
- "description": "insightsReport provides general Insights analysis results. When omitted, this means no data gathering has taken place yet or the corresponding Insights analysis (identified by \"insightsRequestID\") is not available.",
- "default": {},
- "$ref": "#/definitions/io.openshift.insights.v1alpha1.InsightsReport"
+ "architecture": {
+ "description": "Architecture specifies the supported CPU architecture, for example `amd64` or `ppc64le`.",
+ "type": "string",
+ "default": ""
},
- "insightsRequestID": {
- "description": "insightsRequestID is an Insights request ID to track the status of the Insights analysis (in console.redhat.com processing pipeline) for the corresponding Insights data archive.",
- "type": "string"
+ "digest": {
+ "description": "Digest is the unique identifier for the manifest. It refers to an Image object.",
+ "type": "string",
+ "default": ""
},
- "relatedObjects": {
- "description": "relatedObjects is a list of resources which are useful when debugging or inspecting the data gathering Pod",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.insights.v1alpha1.ObjectReference"
- }
+ "manifestSize": {
+ "description": "ManifestSize represents the size of the raw object contents, in bytes.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
},
- "startTime": {
- "description": "startTime is the time when Insights data gathering started.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "insights.openshift.io",
- "Version": "v1alpha1",
- "Kind": "DataGatherStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.insights.v1alpha1.GathererConfig": {
- "description": "gathererConfig allows to configure specific gatherers",
- "type": "object",
- "required": [
- "name"
- ],
- "properties": {
- "name": {
- "description": "name is the name of specific gatherer",
+ "mediaType": {
+ "description": "MediaType defines the type of the manifest, possible values are application/vnd.oci.image.manifest.v1+json, application/vnd.docker.distribution.manifest.v2+json or application/vnd.docker.distribution.manifest.v1+json.",
"type": "string",
"default": ""
},
- "state": {
- "description": "state allows you to configure specific gatherer. Valid values are \"Enabled\", \"Disabled\" and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default. The current default is Enabled.",
+ "os": {
+ "description": "OS specifies the operating system, for example `linux`.",
"type": "string",
"default": ""
+ },
+ "variant": {
+ "description": "Variant is an optional field repreenting a variant of the CPU, for example v6 to specify a particular CPU variant of the ARM CPU.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "insights.openshift.io",
- "Version": "v1alpha1",
- "Kind": "GathererConfig",
+ "Group": "image.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageManifest",
"Scope": "Namespaced"
}
},
- "io.openshift.insights.v1alpha1.GathererStatus": {
- "description": "gathererStatus represents information about a particular data gatherer.",
+ "io.openshift.image.v1.ImageSignature": {
+ "description": "ImageSignature holds a signature of an image. It allows to verify image identity and possibly other claims as long as the signature is trusted. Based on this information it is possible to restrict runnable images to those matching cluster-wide policy. Mandatory fields should be parsed by clients doing image verification. The others are parsed from signature's content by the server. They serve just an informative purpose.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "conditions",
- "name",
- "lastGatherDuration"
+ "type",
+ "content"
],
"properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
"conditions": {
- "description": "conditions provide details on the status of each gatherer.",
+ "description": "Conditions represent the latest available observations of a signature's current state.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ "$ref": "#/definitions/io.openshift.image.v1.SignatureCondition"
},
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
"x-kubernetes-patch-merge-key": "type",
"x-kubernetes-patch-strategy": "merge"
},
- "lastGatherDuration": {
- "description": "lastGatherDuration represents the time spent gathering.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "name": {
- "description": "name is the name of the gatherer.",
+ "content": {
+ "description": "Required: An opaque binary string which is an image's signature.",
"type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "insights.openshift.io",
- "Version": "v1alpha1",
- "Kind": "GathererStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.insights.v1alpha1.HealthCheck": {
- "description": "healthCheck represents an Insights health check attributes.",
- "type": "object",
- "required": [
- "description",
- "totalRisk",
- "advisorURI",
- "state"
- ],
- "properties": {
- "advisorURI": {
- "description": "advisorURI provides the URL link to the Insights Advisor.",
- "type": "string",
- "default": ""
+ "format": "byte"
},
- "description": {
- "description": "description provides basic description of the healtcheck.",
- "type": "string",
- "default": ""
+ "created": {
+ "description": "If specified, it is the time of signature's creation.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "state": {
- "description": "state determines what the current state of the health check is. Health check is enabled by default and can be disabled by the user in the Insights advisor user interface.",
+ "imageIdentity": {
+ "description": "A human readable string representing image's identity. It could be a product name and version, or an image pull spec (e.g. \"registry.access.redhat.com/rhel7/rhel:7.2\").",
+ "type": "string"
+ },
+ "issuedBy": {
+ "description": "If specified, it holds information about an issuer of signing certificate or key (a person or entity who signed the signing certificate or key).",
+ "$ref": "#/definitions/io.openshift.image.v1.SignatureIssuer"
+ },
+ "issuedTo": {
+ "description": "If specified, it holds information about a subject of signing certificate or key (a person or entity who signed the image).",
+ "$ref": "#/definitions/io.openshift.image.v1.SignatureSubject"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "signedClaims": {
+ "description": "Contains claims from the signature.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "type": {
+ "description": "Required: Describes a type of stored blob.",
"type": "string",
"default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "image.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageSignature",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.image.v1.ImageStream": {
+ "description": "An ImageStream stores a mapping of tags to images, metadata overrides that are applied when images are tagged in a stream, and an optional reference to a container image repository on a registry. Users typically update the spec.tags field to point to external images which are imported from container registries using credentials in your namespace with the pull secret type, or to existing image stream tags and images which are immediately accessible for tagging or pulling. The history of images applied to a tag is visible in the status.tags field and any user who can view an image stream is allowed to tag that image into their own image streams. Access to pull images from the integrated registry is granted by having the \"get imagestreams/layers\" permission on a given image stream. Users may remove a tag by deleting the imagestreamtag resource, which causes both spec and status for that tag to be removed. Image stream history is retained until an administrator runs the prune operation, which removes references that are no longer in use. To preserve a historical image, ensure there is a tag in spec pointing to that image by its digest.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "totalRisk": {
- "description": "totalRisk of the healthcheck. Indicator of the total risk posed by the detected issue; combination of impact and likelihood. The values can be from 1 to 4, and the higher the number, the more important the issue.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "Spec describes the desired state of this stream",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageStreamSpec"
+ },
+ "status": {
+ "description": "Status describes the current state of this stream",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageStreamStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "insights.openshift.io",
- "Version": "v1alpha1",
- "Kind": "HealthCheck",
+ "Type": "object",
+ "Group": "image.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageStream",
"Scope": "Namespaced"
}
},
- "io.openshift.insights.v1alpha1.InsightsReport": {
- "description": "insightsReport provides Insights health check report based on the most recently sent Insights data.",
+ "io.openshift.image.v1.ImageStreamImage": {
+ "description": "ImageStreamImage represents an Image that is retrieved by image name from an ImageStream. User interfaces and regular users can use this resource to access the metadata details of a tagged image in the image stream history for viewing, since Image resources are not directly accessible to end users. A not found error will be returned if no such image is referenced by a tag within the ImageStream. Images are created when spec tags are set on an image stream that represent an image in an external registry, when pushing to the integrated registry, or when tagging an existing image from one image stream to another. The name of an image stream image is in the form \"\u003cSTREAM\u003e@\u003cDIGEST\u003e\", where the digest is the content addressible identifier for the image (sha256:xxxxx...). You can use ImageStreamImages as the from.kind of an image stream spec tag to reference an image exactly. The only operations supported on the imagestreamimage endpoint are retrieving the image.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "image"
+ ],
"properties": {
- "downloadedAt": {
- "description": "downloadedAt is the time when the last Insights report was downloaded. An empty value means that there has not been any Insights report downloaded yet and it usually appears in disconnected clusters (or clusters when the Insights data gathering is disabled).",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "healthChecks": {
- "description": "healthChecks provides basic information about active Insights health checks in a cluster.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.insights.v1alpha1.HealthCheck"
- },
- "x-kubernetes-list-type": "atomic"
+ "image": {
+ "description": "Image associated with the ImageStream and image name.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.Image"
},
- "uri": {
- "description": "uri provides the URL link from which the report was downloaded.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "insights.openshift.io",
- "Version": "v1alpha1",
- "Kind": "InsightsReport",
+ "Type": "object",
+ "Group": "image.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageStreamImage",
"Scope": "Namespaced"
}
},
- "io.openshift.insights.v1alpha1.ObjectReference": {
- "description": "ObjectReference contains enough information to let you inspect or modify the referred object.",
+ "io.openshift.image.v1.ImageStreamImport": {
+ "description": "The image stream import resource provides an easy way for a user to find and import container images from other container image registries into the server. Individual images or an entire image repository may be imported, and users may choose to see the results of the import prior to tagging the resulting images into the specified image stream.\n\nThis API is intended for end-user tools that need to see the metadata of the image prior to import (for instance, to generate an application from it). Clients that know the desired image can continue to create spec.tags directly into their image streams.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "group",
- "resource",
- "name"
+ "spec",
+ "status"
],
"properties": {
- "group": {
- "description": "group is the API Group of the Resource. Enter empty string for the core group. This value should consist of only lowercase alphanumeric characters, hyphens and periods. Example: \"\", \"apps\", \"build.openshift.io\", etc.",
- "type": "string",
- "default": ""
- },
- "name": {
- "description": "name of the referent.",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "namespace": {
- "description": "namespace of the referent.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "resource": {
- "description": "resource is the type that is being referenced. It is normally the plural form of the resource kind in lowercase. This value should consist of only lowercase alphanumeric characters and hyphens. Example: \"deployments\", \"deploymentconfigs\", \"pods\", etc.",
- "type": "string",
- "default": ""
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "Spec is a description of the images that the user wishes to import",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageStreamImportSpec"
+ },
+ "status": {
+ "description": "Status is the result of importing the image",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageStreamImportStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "insights.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ObjectReference",
+ "Type": "object",
+ "Group": "image.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageStreamImport",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.BootstrapInPlace": {
- "description": "BootstrapInPlace defines the configuration for bootstrap-in-place installation",
+ "io.openshift.image.v1.ImageStreamImportSpec": {
+ "description": "ImageStreamImportSpec defines what images should be imported.",
"type": "object",
"required": [
- "installationDisk"
+ "import"
],
"properties": {
- "installationDisk": {
- "description": "InstallationDisk is the target disk drive for coreos-installer",
- "type": "string",
- "default": ""
+ "images": {
+ "description": "Images are a list of individual images to import.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageImportSpec"
+ }
+ },
+ "import": {
+ "description": "Import indicates whether to perform an import - if so, the specified tags are set on the spec and status of the image stream defined by the type meta.",
+ "type": "boolean",
+ "default": false
+ },
+ "repository": {
+ "description": "Repository is an optional import of an entire container image repository. A maximum limit on the number of tags imported this way is imposed by the server.",
+ "$ref": "#/definitions/io.openshift.image.v1.RepositoryImportSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "install.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "BootstrapInPlace",
+ "Kind": "ImageStreamImportSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.Capabilities": {
- "description": "Capabilities selects the managed set of optional, core cluster components.",
+ "io.openshift.image.v1.ImageStreamImportStatus": {
+ "description": "ImageStreamImportStatus contains information about the status of an image stream import.",
"type": "object",
"properties": {
- "additionalEnabledCapabilities": {
- "description": "additionalEnabledCapabilities extends the set of managed capabilities beyond the baseline defined in baselineCapabilitySet. The default is an empty set.",
+ "images": {
+ "description": "Images is set with the result of importing spec.images",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageImportStatus"
}
},
- "baselineCapabilitySet": {
- "description": "baselineCapabilitySet selects an initial set of optional capabilities to enable, which can be extended via additionalEnabledCapabilities. The default is vCurrent.",
- "type": "string"
+ "import": {
+ "description": "Import is the image stream that was successfully updated or created when 'to' was set.",
+ "$ref": "#/definitions/io.openshift.image.v1.ImageStream"
+ },
+ "repository": {
+ "description": "Repository is set if spec.repository was set to the outcome of the import",
+ "$ref": "#/definitions/io.openshift.image.v1.RepositoryImportStatus"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "install.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "Capabilities",
+ "Kind": "ImageStreamImportStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.ClusterMetadata": {
- "description": "ClusterMetadata contains information regarding the cluster that was created by installer.",
+ "io.openshift.image.v1.ImageStreamLayers": {
+ "description": "ImageStreamLayers describes information about the layers referenced by images in this image stream.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "clusterName",
- "clusterID",
- "infraID",
- "featureSet",
- "customFeatureSet"
+ "blobs",
+ "images"
],
"properties": {
- "aws": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.aws.Metadata"
- },
- "azure": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.azure.Metadata"
- },
- "baremetal": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.baremetal.Metadata"
- },
- "clusterID": {
- "description": "ClusterID is a globally unique ID that is used to identify an Openshift cluster.",
- "type": "string",
- "default": ""
- },
- "clusterName": {
- "description": "ClusterName is the name for the cluster.",
- "type": "string",
- "default": ""
- },
- "customFeatureSet": {
- "$ref": "#/definitions/io.openshift.config.v1.CustomFeatureGates"
- },
- "featureSet": {
- "type": "string",
- "default": ""
- },
- "gcp": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.gcp.Metadata"
- },
- "ibmcloud": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ibmcloud.Metadata"
- },
- "infraID": {
- "description": "InfraID is an ID that is used to identify cloud resources created by the installer.",
- "type": "string",
- "default": ""
- },
- "nutanix": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.nutanix.Metadata"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "openstack": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.openstack.Metadata"
+ "blobs": {
+ "description": "blobs is a map of blob name to metadata about the blob.",
+ "type": "object",
+ "additionalProperties": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageLayerData"
+ }
},
- "ovirt": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ovirt.Metadata"
+ "images": {
+ "description": "images is a map between an image name and the names of the blobs and config that comprise the image.",
+ "type": "object",
+ "additionalProperties": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageBlobReferences"
+ }
},
- "powervs": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.powervs.Metadata"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "vsphere": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.vsphere.Metadata"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "install.openshift.io",
+ "Type": "object",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "ClusterMetadata",
+ "Kind": "ImageStreamLayers",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.ClusterNetworkEntry": {
- "description": "ClusterNetworkEntry is a single IP address block for pod IP blocks. IP blocks are allocated with size 2^HostSubnetLength.",
+ "io.openshift.image.v1.ImageStreamList": {
+ "description": "ImageStreamList is a list of ImageStream objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "cidr"
+ "items"
],
"properties": {
- "cidr": {
- "description": "CIDR is the IP block address pool.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.ipnet.IPNet"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "hostPrefix": {
- "description": "HostPrefix is the prefix size to allocate to each node from the CIDR. For example, 24 would allocate 2^8=256 adresses to each node. If this field is not used by the plugin, it can be left unset.",
- "type": "integer",
- "format": "int32"
+ "items": {
+ "description": "Items is a list of imageStreams",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageStream"
+ }
},
- "hostSubnetLength": {
- "description": "The size of blocks to allocate from the larger pool. This is the length in bits - so a 9 here will allocate a /23.",
- "type": "integer",
- "format": "int32"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "install.openshift.io",
+ "Type": "list",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "ClusterNetworkEntry",
+ "Kind": "ImageStreamList",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.ClusterPlatformMetadata": {
- "description": "ClusterPlatformMetadata contains metadata for platfrom.",
+ "io.openshift.image.v1.ImageStreamMapping": {
+ "description": "ImageStreamMapping represents a mapping from a single image stream tag to a container image as well as the reference to the container image stream the image came from. This resource is used by privileged integrators to create an image resource and to associate it with an image stream in the status tags field. Creating an ImageStreamMapping will allow any user who can view the image stream to tag or pull that image, so only create mappings where the user has proven they have access to the image contents directly. The only operation supported for this resource is create and the metadata name and namespace should be set to the image stream containing the tag that should be updated.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "image",
+ "tag"
+ ],
"properties": {
- "aws": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.aws.Metadata"
- },
- "azure": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.azure.Metadata"
- },
- "baremetal": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.baremetal.Metadata"
- },
- "gcp": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.gcp.Metadata"
- },
- "ibmcloud": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ibmcloud.Metadata"
- },
- "nutanix": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.nutanix.Metadata"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "openstack": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.openstack.Metadata"
+ "image": {
+ "description": "Image is a container image.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.Image"
},
- "ovirt": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ovirt.Metadata"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "powervs": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.powervs.Metadata"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "vsphere": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.vsphere.Metadata"
+ "tag": {
+ "description": "Tag is a string value this image can be located with inside the stream.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "install.openshift.io",
+ "Type": "object",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "ClusterPlatformMetadata",
+ "Kind": "ImageStreamMapping",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.ClusterQuota": {
- "description": "ClusterQuota contains the size, in cloud quota, of the cluster that was created by installer.",
+ "io.openshift.image.v1.ImageStreamSpec": {
+ "description": "ImageStreamSpec represents options for ImageStreams.",
"type": "object",
"properties": {
- "gcp": {
+ "dockerImageRepository": {
+ "description": "dockerImageRepository is optional, if specified this stream is backed by a container repository on this server Deprecated: This field is deprecated as of v3.7 and will be removed in a future release. Specify the source for the tags to be imported in each tag via the spec.tags.from reference instead.",
+ "type": "string"
+ },
+ "lookupPolicy": {
+ "description": "lookupPolicy controls how other resources reference images within this namespace.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageLookupPolicy"
+ },
+ "tags": {
+ "description": "tags map arbitrary string values to specific image locators",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.gcp.QuotaUsage"
- }
+ "$ref": "#/definitions/io.openshift.image.v1.TagReference"
+ },
+ "x-kubernetes-patch-merge-key": "name",
+ "x-kubernetes-patch-strategy": "merge"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "install.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "ClusterQuota",
+ "Kind": "ImageStreamSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.ImageContentSource": {
- "description": "ImageContentSource defines a list of sources/repositories that can be used to pull content. The field is deprecated. Please use imageDigestSources.",
+ "io.openshift.image.v1.ImageStreamStatus": {
+ "description": "ImageStreamStatus contains information about the state of this image stream.",
"type": "object",
"required": [
- "source"
+ "dockerImageRepository"
],
"properties": {
- "mirrors": {
- "description": "Mirrors is one or more repositories that may also contain the same images.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "source": {
- "description": "Source is the repository that users refer to, e.g. in image pull specifications.",
+ "dockerImageRepository": {
+ "description": "DockerImageRepository represents the effective location this stream may be accessed at. May be empty until the server determines where the repository is located",
"type": "string",
"default": ""
+ },
+ "publicDockerImageRepository": {
+ "description": "PublicDockerImageRepository represents the public location from where the image can be pulled outside the cluster. This field may be empty if the administrator has not exposed the integrated registry externally.",
+ "type": "string"
+ },
+ "tags": {
+ "description": "Tags are a historical record of images associated with each tag. The first entry in the TagEvent array is the currently tagged image.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.NamedTagEventList"
+ },
+ "x-kubernetes-patch-merge-key": "tag",
+ "x-kubernetes-patch-strategy": "merge"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "install.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "ImageContentSource",
+ "Kind": "ImageStreamStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.ImageDigestSource": {
- "description": "ImageDigestSource defines a list of sources/repositories that can be used to pull content.",
+ "io.openshift.image.v1.ImageStreamTag": {
+ "description": "ImageStreamTag represents an Image that is retrieved by tag name from an ImageStream. Use this resource to interact with the tags and images in an image stream by tag, or to see the image details for a particular tag. The image associated with this resource is the most recently successfully tagged, imported, or pushed image (as described in the image stream status.tags.items list for this tag). If an import is in progress or has failed the previous image will be shown. Deleting an image stream tag clears both the status and spec fields of an image stream. If no image can be retrieved for a given tag, a not found error will be returned.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "source"
+ "tag",
+ "generation",
+ "lookupPolicy",
+ "image"
],
"properties": {
- "mirrors": {
- "description": "Mirrors is one or more repositories that may also contain the same images.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "conditions": {
+ "description": "conditions is an array of conditions that apply to the image stream tag.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.TagEventCondition"
}
},
- "source": {
- "description": "Source is the repository that users refer to, e.g. in image pull specifications.",
- "type": "string",
- "default": ""
+ "generation": {
+ "description": "generation is the current generation of the tagged image - if tag is provided and this value is not equal to the tag generation, a user has requested an import that has not completed, or conditions will be filled out indicating any error.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "image": {
+ "description": "image associated with the ImageStream and tag.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.Image"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "lookupPolicy": {
+ "description": "lookupPolicy indicates whether this tag will handle image references in this namespace.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageLookupPolicy"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "tag": {
+ "description": "tag is the spec tag associated with this image stream tag, and it may be null if only pushes have occurred to this image stream.",
+ "$ref": "#/definitions/io.openshift.image.v1.TagReference"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "install.openshift.io",
+ "Type": "object",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "ImageDigestSource",
+ "Kind": "ImageStreamTag",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.InstallConfig": {
- "description": "InstallConfig is the configuration for an OpenShift install.",
+ "io.openshift.image.v1.ImageStreamTagList": {
+ "description": "ImageStreamTagList is a list of ImageStreamTag objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
- "baseDomain",
- "platform",
- "pullSecret"
+ "items"
],
"properties": {
- "additionalTrustBundle": {
- "description": "AdditionalTrustBundle is a PEM-encoded X.509 certificate bundle that will be added to the nodes' trusted certificate store.",
- "type": "string"
- },
- "additionalTrustBundlePolicy": {
- "description": "AdditionalTrustBundlePolicy determines when to add the AdditionalTrustBundle to the nodes' trusted certificate store. \"Proxyonly\" is the default. The field can be set to following specified values. \"Proxyonly\" : adds the AdditionalTrustBundle to nodes when http/https proxy is configured. \"Always\" : always adds AdditionalTrustBundle.",
- "type": "string"
- },
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "baseDomain": {
- "description": "BaseDomain is the base domain to which the cluster should belong.",
- "type": "string",
- "default": ""
- },
- "bootstrapInPlace": {
- "description": "BootstrapInPlace is the configuration for installing a single node with bootstrap in place installation.",
- "$ref": "#/definitions/io.openshift.install.v1.BootstrapInPlace"
- },
- "capabilities": {
- "description": "Capabilities configures the installation of optional core cluster components.",
- "$ref": "#/definitions/io.openshift.install.v1.Capabilities"
- },
- "compute": {
- "description": "Compute is the configuration for the machines that comprise the compute nodes.",
+ "items": {
+ "description": "Items is the list of image stream tags",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.install.v1.MachinePool"
+ "$ref": "#/definitions/io.openshift.image.v1.ImageStreamTag"
}
},
- "controlPlane": {
- "description": "ControlPlane is the configuration for the machines that comprise the control plane.",
- "$ref": "#/definitions/io.openshift.install.v1.MachinePool"
- },
- "cpuPartitioningMode": {
- "description": "CPUPartitioning determines if a cluster should be setup for CPU workload partitioning at install time. When this field is set the cluster will be flagged for CPU Partitioning allowing users to segregate workloads to specific CPU Sets. This does not make any decisions on workloads it only configures the nodes to allow CPU Partitioning. The \"AllNodes\" value will setup all nodes for CPU Partitioning, the default is \"None\".",
- "type": "string"
- },
- "credentialsMode": {
- "description": "CredentialsMode is used to explicitly set the mode with which CredentialRequests are satisfied.\n\nIf this field is set, then the installer will not attempt to query the cloud permissions before attempting installation. If the field is not set or empty, then the installer will perform its normal verification that the credentials provided are sufficient to perform an installation.\n\nThere are three possible values for this field, but the valid values are dependent upon the platform being used. \"Mint\": create new credentials with a subset of the overall permissions for each CredentialsRequest \"Passthrough\": copy the credentials with all of the overall permissions for each CredentialsRequest \"Manual\": CredentialsRequests must be handled manually by the user\n\nFor each of the following platforms, the field can set to the specified values. For all other platforms, the field must not be set. AWS: \"Mint\", \"Passthrough\", \"Manual\" Azure: \"Passthrough\", \"Manual\" AzureStack: \"Manual\" GCP: \"Mint\", \"Passthrough\", \"Manual\" IBMCloud: \"Manual\" PowerVS: \"Manual\" Nutanix: \"Manual\"",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "featureGates": {
- "description": "FeatureGates enables a set of custom feature gates. May only be used in conjunction with FeatureSet \"CustomNoUpgrade\". Features may be enabled or disabled by providing a true or false value for the feature gate. E.g. \"featureGates\": [\"FeatureGate1=true\", \"FeatureGate2=false\"].",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "featureSet": {
- "description": "FeatureSet enables features that are not part of the default feature set. Valid values are \"Default\", \"TechPreviewNoUpgrade\" and \"CustomNoUpgrade\". When omitted, the \"Default\" feature set is used.",
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "image.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageStreamTagList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.image.v1.ImageTag": {
+ "description": "ImageTag represents a single tag within an image stream and includes the spec, the status history, and the currently referenced image (if any) of the provided tag. This type replaces the ImageStreamTag by providing a full view of the tag. ImageTags are returned for every spec or status tag present on the image stream. If no tag exists in either form a not found error will be returned by the API. A create operation will succeed if no spec tag has already been defined and the spec field is set. Delete will remove both spec and status elements from the image stream.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "spec",
+ "status",
+ "image"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "fips": {
- "description": "FIPS configures https://www.nist.gov/itl/fips-general-information",
- "type": "boolean"
- },
- "imageContentSources": {
- "description": "ImageContentSources lists sources/repositories for the release-image content. The field is deprecated. Please use imageDigestSources.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.install.v1.ImageContentSource"
- }
- },
- "imageDigestSources": {
- "description": "ImageDigestSources lists sources/repositories for the release-image content.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.install.v1.ImageDigestSource"
- }
+ "image": {
+ "description": "image is the details of the most recent image stream status tag, and it may be null if import has not completed or an administrator has deleted the image object. To verify this is the most recent image, you must verify the generation of the most recent status.items entry matches the spec tag (if a spec tag is set). This field will not be set when listing image tags.",
+ "$ref": "#/definitions/io.openshift.image.v1.Image"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "networking": {
- "description": "Networking is the configuration for the pod network provider in the cluster.",
- "$ref": "#/definitions/io.openshift.install.v1.Networking"
- },
- "operatorPublishingStrategy": {
- "description": "OperatorPublishingStrategy controls the visibility of ingress and apiserver. Defaults to public.",
- "$ref": "#/definitions/io.openshift.install.v1.OperatorPublishingStrategy"
- },
- "platform": {
- "description": "Platform is the configuration for the specific platform upon which to perform the installation.",
- "default": {},
- "$ref": "#/definitions/io.openshift.install.v1.Platform"
- },
- "proxy": {
- "description": "Proxy defines the proxy settings for the cluster. If unset, the cluster will not be configured to use a proxy.",
- "$ref": "#/definitions/io.openshift.install.v1.Proxy"
- },
- "publish": {
- "description": "Publish controls how the user facing endpoints of the cluster like the Kubernetes API, OpenShift routes etc. are exposed. When no strategy is specified, the strategy is \"External\".",
- "type": "string"
- },
- "pullSecret": {
- "description": "PullSecret is the secret to use when pulling images.",
- "type": "string",
- "default": ""
+ "spec": {
+ "description": "spec is the spec tag associated with this image stream tag, and it may be null if only pushes have occurred to this image stream.",
+ "$ref": "#/definitions/io.openshift.image.v1.TagReference"
},
- "sshKey": {
- "description": "SSHKey is the public Secure Shell (SSH) key to provide access to instances.",
- "type": "string"
+ "status": {
+ "description": "status is the status tag details associated with this image stream tag, and it may be null if no push or import has been performed.",
+ "$ref": "#/definitions/io.openshift.image.v1.NamedTagEventList"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "install.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "InstallConfig",
+ "Kind": "ImageTag",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.MachineNetworkEntry": {
- "description": "MachineNetworkEntry is a single IP address block for node IP blocks.",
+ "io.openshift.image.v1.ImageTagList": {
+ "description": "ImageTagList is a list of ImageTag objects. When listing image tags, the image field is not populated. Tags are returned in alphabetical order by image stream and then tag.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "cidr"
+ "items"
],
"properties": {
- "cidr": {
- "description": "CIDR is the IP block address pool for machines within the cluster.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.ipnet.IPNet"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items is the list of image stream tags",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.ImageTag"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "install.openshift.io",
+ "Type": "list",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "MachineNetworkEntry",
+ "Kind": "ImageTagList",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.MachinePool": {
- "description": "MachinePool is a pool of machines to be installed.",
+ "io.openshift.image.v1.NamedTagEventList": {
+ "description": "NamedTagEventList relates a tag to its image history.",
"type": "object",
"required": [
- "name",
- "platform"
+ "tag",
+ "items"
],
"properties": {
- "architecture": {
- "description": "Architecture is the instruction set architecture of the machine pool. Defaults to amd64.",
- "type": "string"
+ "conditions": {
+ "description": "Conditions is an array of conditions that apply to the tag event list.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.TagEventCondition"
+ }
},
- "hyperthreading": {
- "description": "Hyperthreading determines the mode of hyperthreading that machines in the pool will utilize. Default is for hyperthreading to be enabled.",
- "type": "string"
+ "items": {
+ "description": "Standard object's metadata.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.TagEvent"
+ }
},
- "name": {
- "description": "Name is the name of the machine pool. For the control plane machine pool, the name will always be \"master\". For the compute machine pools, the only valid name is \"worker\".",
+ "tag": {
+ "description": "Tag is the tag for which the history is recorded",
"type": "string",
"default": ""
- },
- "platform": {
- "description": "Platform is configuration for machine pool specific to the platform.",
- "default": {},
- "$ref": "#/definitions/io.openshift.install.v1.MachinePoolPlatform"
- },
- "replicas": {
- "description": "Replicas is the machine count for the machine pool.",
- "type": "integer",
- "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "install.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "MachinePool",
+ "Kind": "NamedTagEventList",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.MachinePoolPlatform": {
- "description": "MachinePoolPlatform is the platform-specific configuration for a machine pool. Only one of the platforms should be set.",
+ "io.openshift.image.v1.RepositoryImportSpec": {
+ "description": "RepositoryImportSpec describes a request to import images from a container image repository.",
"type": "object",
+ "required": [
+ "from"
+ ],
"properties": {
- "aws": {
- "description": "AWS is the configuration used when installing on AWS.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.aws.MachinePool"
- },
- "azure": {
- "description": "Azure is the configuration used when installing on Azure.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.azure.MachinePool"
- },
- "baremetal": {
- "description": "BareMetal is the configuration used when installing on bare metal.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.baremetal.MachinePool"
- },
- "gcp": {
- "description": "GCP is the configuration used when installing on GCP",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.gcp.MachinePool"
- },
- "ibmcloud": {
- "description": "IBMCloud is the configuration used when installing on IBM Cloud.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ibmcloud.MachinePool"
- },
- "nutanix": {
- "description": "Nutanix is the configuration used when installing on Nutanix.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.nutanix.MachinePool"
- },
- "openstack": {
- "description": "OpenStack is the configuration used when installing on OpenStack.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.openstack.MachinePool"
+ "from": {
+ "description": "From is the source for the image repository to import; only kind DockerImage and a name of a container image repository is allowed",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
},
- "ovirt": {
- "description": "Ovirt is the configuration used when installing on oVirt.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ovirt.MachinePool"
+ "importPolicy": {
+ "description": "ImportPolicy is the policy controlling how the image is imported",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.TagImportPolicy"
},
- "powervs": {
- "description": "PowerVS is the configuration used when installing on IBM Power VS.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.powervs.MachinePool"
+ "includeManifest": {
+ "description": "IncludeManifest determines if the manifest for each image is returned in the response",
+ "type": "boolean"
},
- "vsphere": {
- "description": "VSphere is the configuration used when installing on vSphere.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.vsphere.MachinePool"
+ "referencePolicy": {
+ "description": "ReferencePolicy defines how other components should consume the image",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.TagReferencePolicy"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "install.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "MachinePoolPlatform",
+ "Kind": "RepositoryImportSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.Networking": {
- "description": "Networking defines the pod network provider in the cluster.",
+ "io.openshift.image.v1.RepositoryImportStatus": {
+ "description": "RepositoryImportStatus describes the result of an image repository import",
"type": "object",
"properties": {
- "clusterNetwork": {
- "description": "ClusterNetwork is the list of IP address pools for pods. Default is 10.128.0.0/14 and a host prefix of /23.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.install.v1.ClusterNetworkEntry"
- }
- },
- "clusterNetworkMTU": {
- "description": "ClusterNetworkMTU is the Maximum Transmit (MTU) Unit size in bytes to allocate to the cluster network. For example, 1200 would set the MTU of the entire overlay network. If the deployment does not require changes in the network plugin, leave it unset and the MTU will be calculated automatically based on the host network MTU.",
- "type": "integer",
- "format": "int64"
- },
- "clusterNetworks": {
- "description": "Deprecated name for ClusterNetwork",
+ "additionalTags": {
+ "description": "AdditionalTags are tags that exist in the repository but were not imported because a maximum limit of automatic imports was applied.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.install.v1.ClusterNetworkEntry"
+ "type": "string",
+ "default": ""
}
},
- "machineCIDR": {
- "description": "Deprecated way to configure an IP address pool for machines. Replaced by MachineNetwork which allows for multiple pools.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.ipnet.IPNet"
- },
- "machineNetwork": {
- "description": "MachineNetwork is the list of IP address pools for machines. This field replaces MachineCIDR, and if set MachineCIDR must be empty or match the first entry in the list. Default is 10.0.0.0/16 for all platforms other than Power VS. For Power VS, the default is 192.168.0.0/24.",
+ "images": {
+ "description": "Images is a list of images successfully retrieved by the import of the repository.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.install.v1.MachineNetworkEntry"
- }
- },
- "networkType": {
- "description": "NetworkType is the type of network to install. The default value is OVNKubernetes.",
- "type": "string"
- },
- "serviceCIDR": {
- "description": "Deprecated way to configure an IP address pool for services. Replaced by ServiceNetwork which allows for multiple pools.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.ipnet.IPNet"
- },
- "serviceNetwork": {
- "description": "ServiceNetwork is the list of IP address pools for services. Default is 172.30.0.0/16. NOTE: currently only one entry is supported.",
- "type": "array",
- "items": {
- "$ref": "#/definitions/com.github.openshift.installer.pkg.ipnet.IPNet"
+ "$ref": "#/definitions/io.openshift.image.v1.ImageImportStatus"
}
},
- "type": {
- "description": "Deprecated name for NetworkType",
- "type": "string"
+ "status": {
+ "description": "Status reflects whether any failure occurred during import",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "install.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "Networking",
+ "Kind": "RepositoryImportStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.OperatorPublishingStrategy": {
- "description": "OperatorPublishingStrategy is used to control the visibility of the components which can be used to have a mix of public and private resources.",
+ "io.openshift.image.v1.SecretList": {
+ "description": "SecretList is a list of Secret.",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "apiserver": {
- "description": "APIServer sets the visibility of the load balancers servicing the APIserver.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "ingress": {
- "description": "Ingress sets the visibility of the created dns resources.",
+ "items": {
+ "description": "Items is a list of secret objects. More info: https://kubernetes.io/docs/concepts/configuration/secret",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.Secret"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "metadata": {
+ "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "install.openshift.io",
+ "Type": "list",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "OperatorPublishingStrategy",
+ "Kind": "SecretList",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.Platform": {
- "description": "Platform is the configuration for the specific platform upon which to perform the installation. Only one of the platform configuration should be set.",
+ "io.openshift.image.v1.SignatureCondition": {
+ "description": "SignatureCondition describes an image signature condition of particular kind at particular probe time.",
"type": "object",
+ "required": [
+ "type",
+ "status"
+ ],
"properties": {
- "aws": {
- "description": "AWS is the configuration used when installing on AWS.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.aws.Platform"
- },
- "azure": {
- "description": "Azure is the configuration used when installing on Azure.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.azure.Platform"
- },
- "baremetal": {
- "description": "BareMetal is the configuration used when installing on bare metal.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.baremetal.Platform"
- },
- "external": {
- "description": "External is the configuration used when installing on an external cloud provider.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.external.Platform"
- },
- "gcp": {
- "description": "GCP is the configuration used when installing on Google Cloud Platform.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.gcp.Platform"
- },
- "ibmcloud": {
- "description": "IBMCloud is the configuration used when installing on IBM Cloud.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ibmcloud.Platform"
- },
- "none": {
- "description": "None is the empty configuration used when installing on an unsupported platform.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.none.Platform"
+ "lastProbeTime": {
+ "description": "Last time the condition was checked.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "nutanix": {
- "description": "Nutanix is the configuration used when installing on Nutanix.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.nutanix.Platform"
+ "lastTransitionTime": {
+ "description": "Last time the condition transit from one status to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "openstack": {
- "description": "OpenStack is the configuration used when installing on OpenStack.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.openstack.Platform"
+ "message": {
+ "description": "Human readable message indicating details about last transition.",
+ "type": "string"
},
- "ovirt": {
- "description": "Ovirt is the configuration used when installing on oVirt.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ovirt.Platform"
+ "reason": {
+ "description": "(brief) reason for the condition's last transition.",
+ "type": "string"
},
- "powervs": {
- "description": "PowerVS is the configuration used when installing on Power VS.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.powervs.Platform"
+ "status": {
+ "description": "Status of the condition, one of True, False, Unknown.",
+ "type": "string",
+ "default": ""
},
- "vsphere": {
- "description": "VSphere is the configuration used when installing on vSphere.",
- "$ref": "#/definitions/com.github.openshift.installer.pkg.types.vsphere.Platform"
+ "type": {
+ "description": "Type of signature condition, Complete or Failed.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "install.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "Platform",
+ "Kind": "SignatureCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.install.v1.Proxy": {
- "description": "Proxy defines the proxy settings for the cluster. At least one of HTTPProxy or HTTPSProxy is required.",
+ "io.openshift.image.v1.SignatureGenericEntity": {
+ "description": "SignatureGenericEntity holds a generic information about a person or entity who is an issuer or a subject of signing certificate or key.",
"type": "object",
"properties": {
- "httpProxy": {
- "description": "HTTPProxy is the URL of the proxy for HTTP requests.",
- "type": "string"
- },
- "httpsProxy": {
- "description": "HTTPSProxy is the URL of the proxy for HTTPS requests.",
+ "commonName": {
+ "description": "Common name (e.g. openshift-signing-service).",
"type": "string"
},
- "noProxy": {
- "description": "NoProxy is a comma-separated list of domains and CIDRs for which the proxy should not be used.",
+ "organization": {
+ "description": "Organization name.",
"type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "install.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "Proxy",
+ "Kind": "SignatureGenericEntity",
"Scope": "Namespaced"
}
},
- "io.openshift.internal.security.v1.RangeAllocation": {
- "description": "RangeAllocation is used so we can easily expose a RangeAllocation typed for security group This is an internal API, not intended for external consumption.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.image.v1.SignatureIssuer": {
+ "description": "SignatureIssuer holds information about an issuer of signing certificate or key.",
"type": "object",
- "required": [
- "range",
- "data"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "commonName": {
+ "description": "Common name (e.g. openshift-signing-service).",
"type": "string"
},
- "data": {
- "description": "data is a byte array representing the serialized state of a range allocation. It is a bitmap with each bit set to one to represent a range is taken.",
- "type": "string",
- "format": "byte"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "organization": {
+ "description": "Organization name.",
"type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "range": {
- "description": "range is a string representing a unique label for a range of uids, \"1000000000-2000000000/10000\".",
- "type": "string",
- "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "security.internal.openshift.io",
+ "Type": "nested",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "RangeAllocation",
- "Scope": "Clustered"
+ "Kind": "SignatureIssuer",
+ "Scope": "Namespaced"
}
},
- "io.openshift.internal.security.v1.RangeAllocationList": {
- "description": "RangeAllocationList is a list of RangeAllocations objects This is an internal API, not intended for external consumption.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.image.v1.SignatureSubject": {
+ "description": "SignatureSubject holds information about a person or entity who created the signature.",
"type": "object",
"required": [
- "items"
+ "publicKeyID"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "commonName": {
+ "description": "Common name (e.g. openshift-signing-service).",
"type": "string"
},
- "items": {
- "description": "List of RangeAllocations.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.internal.security.v1.RangeAllocation"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "organization": {
+ "description": "Organization name.",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "publicKeyID": {
+ "description": "If present, it is a human readable key id of public key belonging to the subject used to verify image signature. It should contain at least 64 lowest bits of public key's fingerprint (e.g. 0x685ebe62bf278440).",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "security.internal.openshift.io",
+ "Type": "nested",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "RangeAllocationList",
+ "Kind": "SignatureSubject",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.AWSFailureDomain": {
- "description": "AWSFailureDomain configures failure domain information for the AWS platform.",
+ "io.openshift.image.v1.TagEvent": {
+ "description": "TagEvent is used by ImageStreamStatus to keep a historical record of images associated with a tag.",
"type": "object",
+ "required": [
+ "created",
+ "dockerImageReference",
+ "image",
+ "generation"
+ ],
"properties": {
- "placement": {
- "description": "Placement configures the placement information for this instance.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.AWSFailureDomainPlacement"
+ "created": {
+ "description": "Created holds the time the TagEvent was created",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "subnet": {
- "description": "Subnet is a reference to the subnet to use for this instance.",
- "$ref": "#/definitions/io.openshift.machine.v1.AWSResourceReference"
+ "dockerImageReference": {
+ "description": "DockerImageReference is the string that can be used to pull this image",
+ "type": "string",
+ "default": ""
+ },
+ "generation": {
+ "description": "Generation is the spec tag generation that resulted in this tag being updated",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "image": {
+ "description": "Image is the image",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "AWSFailureDomain",
+ "Kind": "TagEvent",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.AWSFailureDomainPlacement": {
- "description": "AWSFailureDomainPlacement configures the placement information for the AWSFailureDomain.",
+ "io.openshift.image.v1.TagEventCondition": {
+ "description": "TagEventCondition contains condition information for a tag event.",
"type": "object",
"required": [
- "availabilityZone"
+ "type",
+ "status",
+ "generation"
],
"properties": {
- "availabilityZone": {
- "description": "AvailabilityZone is the availability zone of the instance.",
+ "generation": {
+ "description": "Generation is the spec tag generation that this status corresponds to",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "lastTransitionTime": {
+ "description": "LastTransitionTIme is the time the condition transitioned from one status to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "description": "Message is a human readable description of the details about last transition, complementing reason.",
+ "type": "string"
+ },
+ "reason": {
+ "description": "Reason is a brief machine readable explanation for the condition's last transition.",
+ "type": "string"
+ },
+ "status": {
+ "description": "Status of the condition, one of True, False, Unknown.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "Type of tag event condition, currently only ImportSuccess",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "AWSFailureDomainPlacement",
+ "Kind": "TagEventCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.AWSResourceFilter": {
- "description": "AWSResourceFilter is a filter used to identify an AWS resource",
+ "io.openshift.image.v1.TagImportPolicy": {
+ "description": "TagImportPolicy controls how images related to this tag will be imported.",
+ "type": "object",
+ "properties": {
+ "importMode": {
+ "description": "ImportMode describes how to import an image manifest.",
+ "type": "string"
+ },
+ "insecure": {
+ "description": "Insecure is true if the server may bypass certificate verification or connect directly over HTTP during image import.",
+ "type": "boolean"
+ },
+ "scheduled": {
+ "description": "Scheduled indicates to the server that this tag should be periodically checked to ensure it is up to date, and imported",
+ "type": "boolean"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "image.openshift.io",
+ "Version": "v1",
+ "Kind": "TagImportPolicy",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.image.v1.TagReference": {
+ "description": "TagReference specifies optional annotations for images using this tag and an optional reference to an ImageStreamTag, ImageStreamImage, or DockerImage this tag should track.",
"type": "object",
"required": [
"name"
],
"properties": {
+ "annotations": {
+ "description": "Optional; if specified, annotations that are applied to images retrieved via ImageStreamTags.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "from": {
+ "description": "Optional; if specified, a reference to another image that this tag should point to. Valid values are ImageStreamTag, ImageStreamImage, and DockerImage. ImageStreamTag references can only reference a tag within this same ImageStream.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "generation": {
+ "description": "Generation is a counter that tracks mutations to the spec tag (user intent). When a tag reference is changed the generation is set to match the current stream generation (which is incremented every time spec is changed). Other processes in the system like the image importer observe that the generation of spec tag is newer than the generation recorded in the status and use that as a trigger to import the newest remote tag. To trigger a new import, clients may set this value to zero which will reset the generation to the latest stream generation. Legacy clients will send this value as nil which will be merged with the current tag generation.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "importPolicy": {
+ "description": "ImportPolicy is information that controls how images may be imported by the server.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.TagImportPolicy"
+ },
"name": {
- "description": "Name of the filter. Filter names are case-sensitive.",
+ "description": "Name of the tag",
"type": "string",
"default": ""
},
- "values": {
- "description": "Values includes one or more filter values. Filter values are case-sensitive.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "reference": {
+ "description": "Reference states if the tag will be imported. Default value is false, which means the tag will be imported.",
+ "type": "boolean"
+ },
+ "referencePolicy": {
+ "description": "ReferencePolicy defines how other components should consume the image.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.image.v1.TagReferencePolicy"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "AWSResourceFilter",
+ "Kind": "TagReference",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.AWSResourceReference": {
- "description": "AWSResourceReference is a reference to a specific AWS resource by ID, ARN, or filters. Only one of ID, ARN or Filters may be specified. Specifying more than one will result in a validation error.",
+ "io.openshift.image.v1.TagReferencePolicy": {
+ "description": "TagReferencePolicy describes how pull-specs for images in this image stream tag are generated when image change triggers in deployment configs or builds are resolved. This allows the image stream author to control how images are accessed.",
"type": "object",
"required": [
"type"
],
"properties": {
- "arn": {
- "description": "ARN of resource.",
- "type": "string"
- },
- "filters": {
- "description": "Filters is a set of filters used to identify a resource.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.AWSResourceFilter"
- },
- "x-kubernetes-list-type": "atomic"
- },
- "id": {
- "description": "ID of resource.",
- "type": "string"
- },
"type": {
- "description": "Type determines how the reference will fetch the AWS resource.",
+ "description": "Type determines how the image pull spec should be transformed when the image stream tag is used in deployment config triggers or new builds. The default value is `Source`, indicating the original location of the image should be used (if imported). The user may also specify `Local`, indicating that the pull spec should point to the integrated container image registry and leverage the registry's ability to proxy the pull to an upstream registry. `Local` allows the credentials used to pull this image to be managed from the image stream's namespace, so others on the platform can access a remote image but have no access to the remote secret. It also allows the image layers to be mirrored into the local registry which the images can still be pulled even if the upstream registry is unavailable.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "image.openshift.io",
"Version": "v1",
- "Kind": "AWSResourceReference",
+ "Kind": "TagReferencePolicy",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "arn": "ARN",
- "filters": "Filters",
- "id": "ID"
- }
- }
- ]
+ }
},
- "io.openshift.machine.v1.AlibabaCloudMachineProviderConfig": {
- "description": "AlibabaCloudMachineProviderConfig is the Schema for the alibabacloudmachineproviderconfig API Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.insights.v1alpha1.DataGather": {
+ "description": "DataGather provides data gather configuration options and status for the particular Insights data gathering.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "instanceType",
- "vpcId",
- "regionId",
- "zoneId",
- "imageId",
- "vSwitch",
- "resourceGroup"
+ "spec"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "bandwidth": {
- "description": "Bandwidth describes the internet bandwidth strategy for the instance",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.BandwidthProperties"
- },
- "credentialsSecret": {
- "description": "CredentialsSecret is a reference to the secret with alibabacloud credentials. Otherwise, defaults to permissions provided by attached RAM role where the actuator is running.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "dataDisk": {
- "description": "DataDisks holds information regarding the extra disks attached to the instance",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.DataDiskProperties"
- }
- },
- "imageId": {
- "description": "The ID of the image used to create the instance.",
- "type": "string",
- "default": ""
- },
- "instanceType": {
- "description": "The instance type of the instance.",
- "type": "string",
- "default": ""
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
@@ -89543,77 +90882,30 @@
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "ramRoleName": {
- "description": "RAMRoleName is the name of the instance Resource Access Management (RAM) role. This allows the instance to perform API calls as this specified RAM role.",
- "type": "string"
- },
- "regionId": {
- "description": "The ID of the region in which to create the instance. You can call the DescribeRegions operation to query the most recent region list.",
- "type": "string",
- "default": ""
- },
- "resourceGroup": {
- "description": "ResourceGroup references the resource group to which to assign the instance. A reference holds either the resource group ID, the resource name, or the required tags to search. When more than one resource group are returned for a search, an error will be produced and the Machine will not be created. Resource Groups do not support searching by tags.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.AlibabaResourceReference"
- },
- "securityGroups": {
- "description": "SecurityGroups is a list of security group references to assign to the instance. A reference holds either the security group ID, the resource name, or the required tags to search. When more than one security group is returned for a tag search, all the groups are associated with the instance up to the maximum number of security groups to which an instance can belong. For more information, see the \"Security group limits\" section in Limits. https://www.alibabacloud.com/help/en/doc-detail/25412.htm",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.AlibabaResourceReference"
- }
- },
- "systemDisk": {
- "description": "SystemDisk holds the properties regarding the system disk for the instance",
+ "spec": {
+ "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.SystemDiskProperties"
- },
- "tag": {
- "description": "Tags are the set of metadata to add to an instance.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.Tag"
- }
- },
- "tenancy": {
- "description": "Tenancy specifies whether to create the instance on a dedicated host. Valid values:\n\ndefault: creates the instance on a non-dedicated host. host: creates the instance on a dedicated host. If you do not specify the DedicatedHostID parameter, Alibaba Cloud automatically selects a dedicated host for the instance. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `default`.",
- "type": "string"
- },
- "userDataSecret": {
- "description": "UserDataSecret contains a local reference to a secret that contains the UserData to apply to the instance",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "$ref": "#/definitions/io.openshift.insights.v1alpha1.DataGatherSpec"
},
- "vSwitch": {
- "description": "VSwitch is a reference to the vswitch to use for this instance. A reference holds either the vSwitch ID, the resource name, or the required tags to search. When more than one vSwitch is returned for a tag search, only the first vSwitch returned will be used. This parameter is required when you create an instance of the VPC type. You can call the DescribeVSwitches operation to query the created vSwitches.",
+ "status": {
+ "description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.AlibabaResourceReference"
- },
- "vpcId": {
- "description": "The ID of the vpc",
- "type": "string",
- "default": ""
- },
- "zoneId": {
- "description": "The ID of the zone in which to create the instance. You can call the DescribeZones operation to query the most recent region list.",
- "type": "string",
- "default": ""
+ "$ref": "#/definitions/io.openshift.insights.v1alpha1.DataGatherStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "AlibabaCloudMachineProviderConfig",
- "Scope": "Namespaced"
+ "Group": "insights.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "DataGather",
+ "Scope": "Clustered"
}
},
- "io.openshift.machine.v1.AlibabaCloudMachineProviderConfigList": {
- "description": "AlibabaCloudMachineProviderConfigList contains a list of AlibabaCloudMachineProviderConfig Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.insights.v1alpha1.DataGatherList": {
+ "description": "DataGatherList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -89622,10 +90914,11 @@
"type": "string"
},
"items": {
+ "description": "items contains a list of DataGather resources.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.AlibabaCloudMachineProviderConfig"
+ "$ref": "#/definitions/io.openshift.insights.v1alpha1.DataGather"
}
},
"kind": {
@@ -89640,1314 +90933,1076 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "AlibabaCloudMachineProviderConfigList",
+ "Group": "insights.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "DataGatherList",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.AlibabaCloudMachineProviderStatus": {
- "description": "AlibabaCloudMachineProviderStatus is the Schema for the alibabacloudmachineproviderconfig API Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.insights.v1alpha1.DataGatherSpec": {
+ "description": "DataGatherSpec contains the configuration for the DataGather.",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "dataPolicy": {
+ "description": "dataPolicy allows user to enable additional global obfuscation of the IP addresses and base domain in the Insights archive data. Valid values are \"ClearText\" and \"ObfuscateNetworking\". When set to ClearText the data is not obfuscated. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is ClearText.",
+ "type": "string",
+ "default": ""
},
- "conditions": {
- "description": "Conditions is a set of conditions associated with the Machine to indicate errors or other status",
+ "gatherers": {
+ "description": "gatherers is a list of gatherers configurations. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ "$ref": "#/definitions/io.openshift.insights.v1alpha1.GathererConfig"
}
- },
- "instanceId": {
- "description": "InstanceID is the instance ID of the machine created in alibabacloud",
- "type": "string"
- },
- "instanceState": {
- "description": "InstanceState is the state of the alibabacloud instance for this machine",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "AlibabaCloudMachineProviderStatus",
+ "Type": "nested",
+ "Group": "insights.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "DataGatherSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.AlibabaResourceReference": {
- "description": "ResourceTagReference is a reference to a specific AlibabaCloud resource by ID, or tags. Only one of ID or Tags may be specified. Specifying more than one will result in a validation error.",
+ "io.openshift.insights.v1alpha1.DataGatherStatus": {
+ "description": "DataGatherStatus contains information relating to the DataGather state.",
"type": "object",
- "required": [
- "type"
- ],
"properties": {
- "id": {
- "description": "ID of resource",
+ "conditions": {
+ "description": "conditions provide details on the status of the gatherer job.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
+ },
+ "dataGatherState": {
+ "description": "dataGatherState reflects the current state of the data gathering process.",
"type": "string"
},
- "name": {
- "description": "Name of the resource",
+ "finishTime": {
+ "description": "finishTime is the time when Insights data gathering finished.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "gatherers": {
+ "description": "gatherers is a list of active gatherers (and their statuses) in the last gathering.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.insights.v1alpha1.GathererStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "insightsReport": {
+ "description": "insightsReport provides general Insights analysis results. When omitted, this means no data gathering has taken place yet or the corresponding Insights analysis (identified by \"insightsRequestID\") is not available.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.insights.v1alpha1.InsightsReport"
+ },
+ "insightsRequestID": {
+ "description": "insightsRequestID is an Insights request ID to track the status of the Insights analysis (in console.redhat.com processing pipeline) for the corresponding Insights data archive.",
"type": "string"
},
- "tags": {
- "description": "Tags is a set of metadata based upon ECS object tags used to identify a resource. For details about usage when multiple resources are found, please see the owning parent field documentation.",
+ "relatedObjects": {
+ "description": "relatedObjects is a list of resources which are useful when debugging or inspecting the data gathering Pod",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.Tag"
+ "$ref": "#/definitions/io.openshift.insights.v1alpha1.ObjectReference"
}
},
- "type": {
- "description": "type identifies the resource reference type for this entry.",
- "type": "string",
- "default": ""
+ "startTime": {
+ "description": "startTime is the time when Insights data gathering started.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "AlibabaResourceReference",
+ "Group": "insights.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "DataGatherStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.AzureFailureDomain": {
- "description": "AzureFailureDomain configures failure domain information for the Azure platform.",
+ "io.openshift.insights.v1alpha1.GathererConfig": {
+ "description": "gathererConfig allows to configure specific gatherers",
"type": "object",
"required": [
- "zone"
+ "name"
],
"properties": {
- "subnet": {
- "description": "subnet is the name of the network subnet in which the VM will be created. When omitted, the subnet value from the machine providerSpec template will be used.",
- "type": "string"
- },
- "zone": {
- "description": "Availability Zone for the virtual machine. If nil, the virtual machine should be deployed to no zone.",
+ "name": {
+ "description": "name is the name of specific gatherer",
"type": "string",
"default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "AzureFailureDomain",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1.BandwidthProperties": {
- "description": "Bandwidth describes the bandwidth strategy for the network of the instance",
- "type": "object",
- "properties": {
- "internetMaxBandwidthIn": {
- "description": "InternetMaxBandwidthIn is the maximum inbound public bandwidth. Unit: Mbit/s. Valid values: When the purchased outbound public bandwidth is less than or equal to 10 Mbit/s, the valid values of this parameter are 1 to 10. Currently the default is `10` when outbound bandwidth is less than or equal to 10 Mbit/s. When the purchased outbound public bandwidth is greater than 10, the valid values are 1 to the InternetMaxBandwidthOut value. Currently the default is the value used for `InternetMaxBandwidthOut` when outbound public bandwidth is greater than 10.",
- "type": "integer",
- "format": "int64"
},
- "internetMaxBandwidthOut": {
- "description": "InternetMaxBandwidthOut is the maximum outbound public bandwidth. Unit: Mbit/s. Valid values: 0 to 100. When a value greater than 0 is used then a public IP address is assigned to the instance. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `0`",
- "type": "integer",
- "format": "int64"
+ "state": {
+ "description": "state allows you to configure specific gatherer. Valid values are \"Enabled\", \"Disabled\" and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default. The current default is Enabled.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "BandwidthProperties",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1.ControlPlaneMachineSet": {
- "description": "ControlPlaneMachineSet ensures that a specified number of control plane machine replicas are running at any given time. Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.ControlPlaneMachineSetSpec"
- },
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.ControlPlaneMachineSetStatus"
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "ControlPlaneMachineSet",
+ "Group": "insights.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "GathererConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.ControlPlaneMachineSetList": {
- "description": "ControlPlaneMachineSetList contains a list of ControlPlaneMachineSet Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.insights.v1alpha1.GathererStatus": {
+ "description": "gathererStatus represents information about a particular data gatherer.",
"type": "object",
"required": [
- "items"
+ "conditions",
+ "name",
+ "lastGatherDuration"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
+ "conditions": {
+ "description": "conditions provide details on the status of each gatherer.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.ControlPlaneMachineSet"
- }
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "lastGatherDuration": {
+ "description": "lastGatherDuration represents the time spent gathering.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "name": {
+ "description": "name is the name of the gatherer.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "ControlPlaneMachineSetList",
+ "Type": "nested",
+ "Group": "insights.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "GathererStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.ControlPlaneMachineSetSpec": {
- "description": "ControlPlaneMachineSet represents the configuration of the ControlPlaneMachineSet.",
+ "io.openshift.insights.v1alpha1.HealthCheck": {
+ "description": "healthCheck represents an Insights health check attributes.",
"type": "object",
"required": [
- "replicas",
- "selector",
- "template"
+ "description",
+ "totalRisk",
+ "advisorURI",
+ "state"
],
"properties": {
- "replicas": {
- "description": "Replicas defines how many Control Plane Machines should be created by this ControlPlaneMachineSet. This field is immutable and cannot be changed after cluster installation. The ControlPlaneMachineSet only operates with 3 or 5 node control planes, 3 and 5 are the only valid values for this field.",
- "type": "integer",
- "format": "int32"
+ "advisorURI": {
+ "description": "advisorURI provides the URL link to the Insights Advisor.",
+ "type": "string",
+ "default": ""
},
- "selector": {
- "description": "Label selector for Machines. Existing Machines selected by this selector will be the ones affected by this ControlPlaneMachineSet. It must match the template's labels. This field is considered immutable after creation of the resource.",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ "description": {
+ "description": "description provides basic description of the healtcheck.",
+ "type": "string",
+ "default": ""
},
"state": {
- "description": "State defines whether the ControlPlaneMachineSet is Active or Inactive. When Inactive, the ControlPlaneMachineSet will not take any action on the state of the Machines within the cluster. When Active, the ControlPlaneMachineSet will reconcile the Machines and will update the Machines as necessary. Once Active, a ControlPlaneMachineSet cannot be made Inactive. To prevent further action please remove the ControlPlaneMachineSet.",
+ "description": "state determines what the current state of the health check is. Health check is enabled by default and can be disabled by the user in the Insights advisor user interface.",
"type": "string",
- "default": "Inactive"
- },
- "strategy": {
- "description": "Strategy defines how the ControlPlaneMachineSet will update Machines when it detects a change to the ProviderSpec.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.ControlPlaneMachineSetStrategy"
+ "default": ""
},
- "template": {
- "description": "Template describes the Control Plane Machines that will be created by this ControlPlaneMachineSet.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.ControlPlaneMachineSetTemplate"
+ "totalRisk": {
+ "description": "totalRisk of the healthcheck. Indicator of the total risk posed by the detected issue; combination of impact and likelihood. The values can be from 1 to 4, and the higher the number, the more important the issue.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "ControlPlaneMachineSetSpec",
+ "Group": "insights.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "HealthCheck",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.ControlPlaneMachineSetStatus": {
- "description": "ControlPlaneMachineSetStatus represents the status of the ControlPlaneMachineSet CRD.",
+ "io.openshift.insights.v1alpha1.InsightsReport": {
+ "description": "insightsReport provides Insights health check report based on the most recently sent Insights data.",
"type": "object",
"properties": {
- "conditions": {
- "description": "Conditions represents the observations of the ControlPlaneMachineSet's current state. Known .status.conditions.type are: Available, Degraded and Progressing.",
+ "downloadedAt": {
+ "description": "downloadedAt is the time when the last Insights report was downloaded. An empty value means that there has not been any Insights report downloaded yet and it usually appears in disconnected clusters (or clusters when the Insights data gathering is disabled).",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "healthChecks": {
+ "description": "healthChecks provides basic information about active Insights health checks in a cluster.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ "$ref": "#/definitions/io.openshift.insights.v1alpha1.HealthCheck"
},
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "observedGeneration": {
- "description": "ObservedGeneration is the most recent generation observed for this ControlPlaneMachineSet. It corresponds to the ControlPlaneMachineSets's generation, which is updated on mutation by the API Server.",
- "type": "integer",
- "format": "int64"
- },
- "readyReplicas": {
- "description": "ReadyReplicas is the number of Control Plane Machines created by the ControlPlaneMachineSet controller which are ready. Note that this value may be higher than the desired number of replicas while rolling updates are in-progress.",
- "type": "integer",
- "format": "int32"
- },
- "replicas": {
- "description": "Replicas is the number of Control Plane Machines created by the ControlPlaneMachineSet controller. Note that during update operations this value may differ from the desired replica count.",
- "type": "integer",
- "format": "int32"
- },
- "unavailableReplicas": {
- "description": "UnavailableReplicas is the number of Control Plane Machines that are still required before the ControlPlaneMachineSet reaches the desired available capacity. When this value is non-zero, the number of ReadyReplicas is less than the desired Replicas.",
- "type": "integer",
- "format": "int32"
+ "x-kubernetes-list-type": "atomic"
},
- "updatedReplicas": {
- "description": "UpdatedReplicas is the number of non-terminated Control Plane Machines created by the ControlPlaneMachineSet controller that have the desired provider spec and are ready. This value is set to 0 when a change is detected to the desired spec. When the update strategy is RollingUpdate, this will also coincide with starting the process of updating the Machines. When the update strategy is OnDelete, this value will remain at 0 until a user deletes an existing replica and its replacement has become ready.",
- "type": "integer",
- "format": "int32"
+ "uri": {
+ "description": "uri provides the URL link from which the report was downloaded.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "ControlPlaneMachineSetStatus",
+ "Group": "insights.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "InsightsReport",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.ControlPlaneMachineSetStrategy": {
- "description": "ControlPlaneMachineSetStrategy defines the strategy for applying updates to the Control Plane Machines managed by the ControlPlaneMachineSet.",
+ "io.openshift.insights.v1alpha1.ObjectReference": {
+ "description": "ObjectReference contains enough information to let you inspect or modify the referred object.",
"type": "object",
+ "required": [
+ "group",
+ "resource",
+ "name"
+ ],
"properties": {
- "type": {
- "description": "Type defines the type of update strategy that should be used when updating Machines owned by the ControlPlaneMachineSet. Valid values are \"RollingUpdate\" and \"OnDelete\". The current default value is \"RollingUpdate\".",
+ "group": {
+ "description": "group is the API Group of the Resource. Enter empty string for the core group. This value should consist of only lowercase alphanumeric characters, hyphens and periods. Example: \"\", \"apps\", \"build.openshift.io\", etc.",
"type": "string",
- "default": "RollingUpdate"
+ "default": ""
+ },
+ "name": {
+ "description": "name of the referent.",
+ "type": "string",
+ "default": ""
+ },
+ "namespace": {
+ "description": "namespace of the referent.",
+ "type": "string"
+ },
+ "resource": {
+ "description": "resource is the type that is being referenced. It is normally the plural form of the resource kind in lowercase. This value should consist of only lowercase alphanumeric characters and hyphens. Example: \"deployments\", \"deploymentconfigs\", \"pods\", etc.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "ControlPlaneMachineSetStrategy",
+ "Group": "insights.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ObjectReference",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.ControlPlaneMachineSetTemplate": {
- "description": "ControlPlaneMachineSetTemplate is a template used by the ControlPlaneMachineSet to create the Machines that it will manage in the future.",
+ "io.openshift.install.v1.BootstrapInPlace": {
+ "description": "BootstrapInPlace defines the configuration for bootstrap-in-place installation",
"type": "object",
+ "required": [
+ "installationDisk"
+ ],
"properties": {
- "machineType": {
- "description": "MachineType determines the type of Machines that should be managed by the ControlPlaneMachineSet. Currently, the only valid value is machines_v1beta1_machine_openshift_io.",
- "type": "string"
- },
- "machines_v1beta1_machine_openshift_io": {
- "description": "OpenShiftMachineV1Beta1Machine defines the template for creating Machines from the v1beta1.machine.openshift.io API group.",
- "$ref": "#/definitions/io.openshift.machine.v1.OpenShiftMachineV1Beta1MachineTemplate"
+ "installationDisk": {
+ "description": "InstallationDisk is the target disk drive for coreos-installer",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "ControlPlaneMachineSetTemplate",
+ "Kind": "BootstrapInPlace",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "machineType",
- "fields-to-discriminateBy": {
- "machines_v1beta1_machine_openshift_io": "OpenShiftMachineV1Beta1Machine"
- }
- }
- ]
+ }
},
- "io.openshift.machine.v1.ControlPlaneMachineSetTemplateObjectMeta": {
- "description": "ControlPlaneMachineSetTemplateObjectMeta is a subset of the metav1.ObjectMeta struct. It allows users to specify labels and annotations that will be copied onto Machines created from this template.",
+ "io.openshift.install.v1.Capabilities": {
+ "description": "Capabilities selects the managed set of optional, core cluster components.",
"type": "object",
- "required": [
- "labels"
- ],
"properties": {
- "annotations": {
- "description": "Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations",
- "type": "object",
- "additionalProperties": {
+ "additionalEnabledCapabilities": {
+ "description": "additionalEnabledCapabilities extends the set of managed capabilities beyond the baseline defined in baselineCapabilitySet. The default is an empty set.",
+ "type": "array",
+ "items": {
"type": "string",
"default": ""
}
},
- "labels": {
- "description": "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels. This field must contain both the 'machine.openshift.io/cluster-api-machine-role' and 'machine.openshift.io/cluster-api-machine-type' labels, both with a value of 'master'. It must also contain a label with the key 'machine.openshift.io/cluster-api-cluster'.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
+ "baselineCapabilitySet": {
+ "description": "baselineCapabilitySet selects an initial set of optional capabilities to enable, which can be extended via additionalEnabledCapabilities. The default is vCurrent.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "ControlPlaneMachineSetTemplateObjectMeta",
+ "Kind": "Capabilities",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.DataDiskProperties": {
- "description": "DataDisk contains the information regarding the datadisk attached to an instance",
+ "io.openshift.install.v1.ClusterMetadata": {
+ "description": "ClusterMetadata contains information regarding the cluster that was created by installer.",
"type": "object",
+ "required": [
+ "clusterName",
+ "clusterID",
+ "infraID",
+ "featureSet",
+ "customFeatureSet"
+ ],
"properties": {
- "Category": {
- "description": "Category describes the type of data disk N. Valid values: cloud_efficiency: ultra disk cloud_ssd: standard SSD cloud_essd: ESSD cloud: basic disk Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently for non-I/O optimized instances of retired instance types, the default is `cloud`. Currently for other instances, the default is `cloud_efficiency`.",
- "type": "string",
- "default": ""
+ "aws": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.aws.Metadata"
},
- "DiskEncryption": {
- "description": "DiskEncryption specifies whether to encrypt data disk N.\n\nEmpty value means the platform chooses a default, which is subject to change over time. Currently the default is `disabled`.",
- "type": "string",
- "default": ""
+ "azure": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.azure.Metadata"
},
- "DiskPreservation": {
- "description": "DiskPreservation specifies whether to release data disk N along with the instance. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `DeleteWithInstance`",
- "type": "string",
- "default": ""
+ "baremetal": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.baremetal.Metadata"
},
- "KMSKeyID": {
- "description": "KMSKeyID is the ID of the Key Management Service (KMS) key to be used by data disk N. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `\"\"` which is interpreted as do not use KMSKey encryption.",
+ "clusterID": {
+ "description": "ClusterID is a globally unique ID that is used to identify an Openshift cluster.",
"type": "string",
"default": ""
},
- "Name": {
- "description": "Name is the name of data disk N. If the name is specified the name must be 2 to 128 characters in length. It must start with a letter and cannot start with http:// or https://. It can contain letters, digits, colons (:), underscores (_), and hyphens (-).\n\nEmpty value means the platform chooses a default, which is subject to change over time. Currently the default is `\"\"`.",
+ "clusterName": {
+ "description": "ClusterName is the name for the cluster.",
"type": "string",
"default": ""
},
- "PerformanceLevel": {
- "description": "PerformanceLevel is the performance level of the ESSD used as as data disk N. The N value must be the same as that in DataDisk.N.Category when DataDisk.N.Category is set to cloud_essd. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is `PL1`. Valid values:\n\nPL0: A single ESSD can deliver up to 10,000 random read/write IOPS. PL1: A single ESSD can deliver up to 50,000 random read/write IOPS. PL2: A single ESSD can deliver up to 100,000 random read/write IOPS. PL3: A single ESSD can deliver up to 1,000,000 random read/write IOPS. For more information about ESSD performance levels, see ESSDs.",
+ "customFeatureSet": {
+ "$ref": "#/definitions/io.openshift.config.v1.CustomFeatureGates"
+ },
+ "featureSet": {
"type": "string",
"default": ""
},
- "Size": {
- "description": "Size of the data disk N. Valid values of N: 1 to 16. Unit: GiB. Valid values:\n\nValid values when DataDisk.N.Category is set to cloud_efficiency: 20 to 32768 Valid values when DataDisk.N.Category is set to cloud_ssd: 20 to 32768 Valid values when DataDisk.N.Category is set to cloud_essd: 20 to 32768 Valid values when DataDisk.N.Category is set to cloud: 5 to 2000 The value of this parameter must be greater than or equal to the size of the snapshot specified by the SnapshotID parameter.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "gcp": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.gcp.Metadata"
},
- "SnapshotID": {
- "description": "SnapshotID is the ID of the snapshot used to create data disk N. Valid values of N: 1 to 16.\n\nWhen the DataDisk.N.SnapshotID parameter is specified, the DataDisk.N.Size parameter is ignored. The data disk is created based on the size of the specified snapshot. Use snapshots created after July 15, 2013. Otherwise, an error is returned and your request is rejected.",
+ "ibmcloud": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ibmcloud.Metadata"
+ },
+ "infraID": {
+ "description": "InfraID is an ID that is used to identify cloud resources created by the installer.",
"type": "string",
"default": ""
+ },
+ "nutanix": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.nutanix.Metadata"
+ },
+ "openstack": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.openstack.Metadata"
+ },
+ "ovirt": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ovirt.Metadata"
+ },
+ "powervs": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.powervs.Metadata"
+ },
+ "vsphere": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.vsphere.Metadata"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "DataDiskProperties",
+ "Kind": "ClusterMetadata",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.FailureDomains": {
- "description": "FailureDomain represents the different configurations required to spread Machines across failure domains on different platforms.",
+ "io.openshift.install.v1.ClusterNetworkEntry": {
+ "description": "ClusterNetworkEntry is a single IP address block for pod IP blocks. IP blocks are allocated with size 2^HostSubnetLength.",
"type": "object",
"required": [
- "platform"
+ "cidr"
],
+ "properties": {
+ "cidr": {
+ "description": "CIDR is the IP block address pool.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.ipnet.IPNet"
+ },
+ "hostPrefix": {
+ "description": "HostPrefix is the prefix size to allocate to each node from the CIDR. For example, 24 would allocate 2^8=256 adresses to each node. If this field is not used by the plugin, it can be left unset.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "hostSubnetLength": {
+ "description": "The size of blocks to allocate from the larger pool. This is the length in bits - so a 9 here will allocate a /23.",
+ "type": "integer",
+ "format": "int32"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "install.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterNetworkEntry",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.install.v1.ClusterPlatformMetadata": {
+ "description": "ClusterPlatformMetadata contains metadata for platfrom.",
+ "type": "object",
"properties": {
"aws": {
- "description": "AWS configures failure domain information for the AWS platform.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.AWSFailureDomain"
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.aws.Metadata"
},
"azure": {
- "description": "Azure configures failure domain information for the Azure platform.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.AzureFailureDomain"
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.azure.Metadata"
+ },
+ "baremetal": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.baremetal.Metadata"
},
"gcp": {
- "description": "GCP configures failure domain information for the GCP platform.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.GCPFailureDomain"
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.gcp.Metadata"
+ },
+ "ibmcloud": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ibmcloud.Metadata"
},
"nutanix": {
- "description": "nutanix configures failure domain information for the Nutanix platform.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.NutanixFailureDomainReference"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.nutanix.Metadata"
},
"openstack": {
- "description": "OpenStack configures failure domain information for the OpenStack platform.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.OpenStackFailureDomain"
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.openstack.Metadata"
},
- "platform": {
- "description": "Platform identifies the platform for which the FailureDomain represents. Currently supported values are AWS, Azure, GCP, OpenStack, VSphere and Nutanix.",
- "type": "string",
- "default": ""
+ "ovirt": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ovirt.Metadata"
+ },
+ "powervs": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.powervs.Metadata"
},
"vsphere": {
- "description": "vsphere configures failure domain information for the VSphere platform.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.vsphere.Metadata"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "install.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterPlatformMetadata",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.install.v1.ClusterQuota": {
+ "description": "ClusterQuota contains the size, in cloud quota, of the cluster that was created by installer.",
+ "type": "object",
+ "properties": {
+ "gcp": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.VSphereFailureDomain"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.gcp.QuotaUsage"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "FailureDomains",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "platform",
- "fields-to-discriminateBy": {
- "aws": "AWS",
- "azure": "Azure",
- "gcp": "GCP",
- "nutanix": "Nutanix",
- "openstack": "OpenStack",
- "vsphere": "VSphere"
- }
- }
- ]
- },
- "io.openshift.machine.v1.GCPFailureDomain": {
- "description": "GCPFailureDomain configures failure domain information for the GCP platform",
- "type": "object",
- "required": [
- "zone"
- ],
- "properties": {
- "zone": {
- "description": "Zone is the zone in which the GCP machine provider will create the VM.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "GCPFailureDomain",
+ "Kind": "ClusterQuota",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.LoadBalancerReference": {
- "description": "LoadBalancerReference is a reference to a load balancer on IBM Cloud virtual private cloud(VPC).",
+ "io.openshift.install.v1.ImageContentSource": {
+ "description": "ImageContentSource defines a list of sources/repositories that can be used to pull content. The field is deprecated. Please use imageDigestSources.",
"type": "object",
"required": [
- "name",
- "type"
+ "source"
],
"properties": {
- "name": {
- "description": "name of the LoadBalancer in IBM Cloud VPC. The name should be between 1 and 63 characters long and may consist of lowercase alphanumeric characters and hyphens only. The value must not end with a hyphen. It is a reference to existing LoadBalancer created by openshift installer component.",
- "type": "string",
- "default": ""
+ "mirrors": {
+ "description": "Mirrors is one or more repositories that may also contain the same images.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "type": {
- "description": "type of the LoadBalancer service supported by IBM Cloud VPC. Currently, only Application LoadBalancer is supported. More details about Application LoadBalancer https://cloud.ibm.com/docs/vpc?topic=vpc-load-balancers-about\u0026interface=ui Supported values are Application.",
+ "source": {
+ "description": "Source is the repository that users refer to, e.g. in image pull specifications.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "LoadBalancerReference",
+ "Kind": "ImageContentSource",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.NutanixCategory": {
- "description": "NutanixCategory identifies a pair of prism category key and value",
+ "io.openshift.install.v1.ImageDigestSource": {
+ "description": "ImageDigestSource defines a list of sources/repositories that can be used to pull content.",
"type": "object",
"required": [
- "key",
- "value"
+ "source"
],
"properties": {
- "key": {
- "description": "key is the prism category key name",
- "type": "string",
- "default": ""
+ "mirrors": {
+ "description": "Mirrors is one or more repositories that may also contain the same images.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "value": {
- "description": "value is the prism category value associated with the key",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "NutanixCategory",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1.NutanixFailureDomainReference": {
- "description": "NutanixFailureDomainReference refers to the failure domain of the Nutanix platform.",
- "type": "object",
- "required": [
- "name"
- ],
- "properties": {
- "name": {
- "description": "name of the failure domain in which the nutanix machine provider will create the VM. Failure domains are defined in a cluster's config.openshift.io/Infrastructure resource.",
+ "source": {
+ "description": "Source is the repository that users refer to, e.g. in image pull specifications.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "NutanixFailureDomainReference",
+ "Kind": "ImageDigestSource",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.NutanixGPU": {
- "description": "NutanixGPU holds the identity of a Nutanix GPU resource in the Prism Central",
+ "io.openshift.install.v1.InstallConfig": {
+ "description": "InstallConfig is the configuration for an OpenShift install.",
"type": "object",
"required": [
- "type"
+ "metadata",
+ "baseDomain",
+ "platform",
+ "pullSecret"
],
"properties": {
- "deviceID": {
- "description": "deviceID is the GPU device ID with the integer value.",
- "type": "integer",
- "format": "int32"
+ "additionalTrustBundle": {
+ "description": "AdditionalTrustBundle is a PEM-encoded X.509 certificate bundle that will be added to the nodes' trusted certificate store.",
+ "type": "string"
},
- "name": {
- "description": "name is the GPU device name",
+ "additionalTrustBundlePolicy": {
+ "description": "AdditionalTrustBundlePolicy determines when to add the AdditionalTrustBundle to the nodes' trusted certificate store. \"Proxyonly\" is the default. The field can be set to following specified values. \"Proxyonly\" : adds the AdditionalTrustBundle to nodes when http/https proxy is configured. \"Always\" : always adds AdditionalTrustBundle.",
"type": "string"
},
- "type": {
- "description": "type is the identifier type of the GPU device. Valid values are Name and DeviceID.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "NutanixGPU",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "deviceID": "DeviceID",
- "name": "Name"
- }
- }
- ]
- },
- "io.openshift.machine.v1.NutanixMachineProviderConfig": {
- "description": "NutanixMachineProviderConfig is the Schema for the nutanixmachineproviderconfigs API Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "required": [
- "cluster",
- "image",
- "subnets",
- "vcpusPerSocket",
- "vcpuSockets",
- "memorySize",
- "systemDiskSize",
- "credentialsSecret"
- ],
- "properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "bootType": {
- "description": "bootType indicates the boot type (Legacy, UEFI or SecureBoot) the Machine's VM uses to boot. If this field is empty or omitted, the VM will use the default boot type \"Legacy\" to boot. \"SecureBoot\" depends on \"UEFI\" boot, i.e., enabling \"SecureBoot\" means that \"UEFI\" boot is also enabled.",
+ "baseDomain": {
+ "description": "BaseDomain is the base domain to which the cluster should belong.",
"type": "string",
"default": ""
},
- "categories": {
- "description": "categories optionally adds one or more prism categories (each with key and value) for the Machine's VM to associate with. All the category key and value pairs specified must already exist in the prism central.",
+ "bootstrapInPlace": {
+ "description": "BootstrapInPlace is the configuration for installing a single node with bootstrap in place installation.",
+ "$ref": "#/definitions/io.openshift.install.v1.BootstrapInPlace"
+ },
+ "capabilities": {
+ "description": "Capabilities configures the installation of optional core cluster components.",
+ "$ref": "#/definitions/io.openshift.install.v1.Capabilities"
+ },
+ "compute": {
+ "description": "Compute is the configuration for the machines that comprise the compute nodes.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.NutanixCategory"
- },
- "x-kubernetes-list-map-keys": [
- "key"
- ],
- "x-kubernetes-list-type": "map"
+ "$ref": "#/definitions/io.openshift.install.v1.MachinePool"
+ }
},
- "cluster": {
- "description": "cluster is to identify the cluster (the Prism Element under management of the Prism Central), in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.NutanixResourceIdentifier"
+ "controlPlane": {
+ "description": "ControlPlane is the configuration for the machines that comprise the control plane.",
+ "$ref": "#/definitions/io.openshift.install.v1.MachinePool"
},
- "credentialsSecret": {
- "description": "credentialsSecret is a local reference to a secret that contains the credentials data to access Nutanix PC client",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "cpuPartitioningMode": {
+ "description": "CPUPartitioning determines if a cluster should be setup for CPU workload partitioning at install time. When this field is set the cluster will be flagged for CPU Partitioning allowing users to segregate workloads to specific CPU Sets. This does not make any decisions on workloads it only configures the nodes to allow CPU Partitioning. The \"AllNodes\" value will setup all nodes for CPU Partitioning, the default is \"None\".",
+ "type": "string"
},
- "dataDisks": {
- "description": "dataDisks holds information of the data disks to attach to the Machine's VM",
+ "credentialsMode": {
+ "description": "CredentialsMode is used to explicitly set the mode with which CredentialRequests are satisfied.\n\nIf this field is set, then the installer will not attempt to query the cloud permissions before attempting installation. If the field is not set or empty, then the installer will perform its normal verification that the credentials provided are sufficient to perform an installation.\n\nThere are three possible values for this field, but the valid values are dependent upon the platform being used. \"Mint\": create new credentials with a subset of the overall permissions for each CredentialsRequest \"Passthrough\": copy the credentials with all of the overall permissions for each CredentialsRequest \"Manual\": CredentialsRequests must be handled manually by the user\n\nFor each of the following platforms, the field can set to the specified values. For all other platforms, the field must not be set. AWS: \"Mint\", \"Passthrough\", \"Manual\" Azure: \"Passthrough\", \"Manual\" AzureStack: \"Manual\" GCP: \"Mint\", \"Passthrough\", \"Manual\" IBMCloud: \"Manual\" PowerVS: \"Manual\" Nutanix: \"Manual\"",
+ "type": "string"
+ },
+ "featureGates": {
+ "description": "FeatureGates enables a set of custom feature gates. May only be used in conjunction with FeatureSet \"CustomNoUpgrade\". Features may be enabled or disabled by providing a true or false value for the feature gate. E.g. \"featureGates\": [\"FeatureGate1=true\", \"FeatureGate2=false\"].",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.NutanixVMDisk"
- },
- "x-kubernetes-list-type": "set"
+ "type": "string",
+ "default": ""
+ }
},
- "failureDomain": {
- "description": "failureDomain refers to the name of the FailureDomain with which this Machine is associated. If this is configured, the Nutanix machine controller will use the prism_central endpoint and credentials defined in the referenced FailureDomain to communicate to the prism_central. It will also verify that the 'cluster' and subnets' configuration in the NutanixMachineProviderConfig is consistent with that in the referenced failureDomain.",
- "$ref": "#/definitions/io.openshift.machine.v1.NutanixFailureDomainReference"
+ "featureSet": {
+ "description": "FeatureSet enables features that are not part of the default feature set. Valid values are \"Default\", \"TechPreviewNoUpgrade\" and \"CustomNoUpgrade\". When omitted, the \"Default\" feature set is used.",
+ "type": "string"
},
- "gpus": {
- "description": "gpus is a list of GPU devices to attach to the machine's VM. The GPU devices should already exist in Prism Central and associated with one of the Prism Element's hosts and available for the VM to attach (in \"UNUSED\" status).",
+ "fips": {
+ "description": "FIPS configures https://www.nist.gov/itl/fips-general-information",
+ "type": "boolean"
+ },
+ "imageContentSources": {
+ "description": "ImageContentSources lists sources/repositories for the release-image content. The field is deprecated. Please use imageDigestSources.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.NutanixGPU"
- },
- "x-kubernetes-list-type": "set"
+ "$ref": "#/definitions/io.openshift.install.v1.ImageContentSource"
+ }
},
- "image": {
- "description": "image is to identify the rhcos image uploaded to the Prism Central (PC) The image identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.NutanixResourceIdentifier"
+ "imageDigestSources": {
+ "description": "ImageDigestSources lists sources/repositories for the release-image content.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.install.v1.ImageDigestSource"
+ }
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "memorySize": {
- "description": "memorySize is the memory size (in Quantity format) of the VM The minimum memorySize is 2Gi bytes",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
- },
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "project": {
- "description": "project optionally identifies a Prism project for the Machine's VM to associate with.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.NutanixResourceIdentifier"
- },
- "subnets": {
- "description": "subnets holds a list of identifiers (one or more) of the cluster's network subnets for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.NutanixResourceIdentifier"
- }
+ "networking": {
+ "description": "Networking is the configuration for the pod network provider in the cluster.",
+ "$ref": "#/definitions/io.openshift.install.v1.Networking"
},
- "systemDiskSize": {
- "description": "systemDiskSize is size (in Quantity format) of the system disk of the VM The minimum systemDiskSize is 20Gi bytes",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
+ "operatorPublishingStrategy": {
+ "description": "OperatorPublishingStrategy controls the visibility of ingress and apiserver. Defaults to public.",
+ "$ref": "#/definitions/io.openshift.install.v1.OperatorPublishingStrategy"
},
- "userDataSecret": {
- "description": "userDataSecret is a local reference to a secret that contains the UserData to apply to the VM",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "platform": {
+ "description": "Platform is the configuration for the specific platform upon which to perform the installation.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.install.v1.Platform"
},
- "vcpuSockets": {
- "description": "vcpuSockets is the number of vCPU sockets of the VM",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "proxy": {
+ "description": "Proxy defines the proxy settings for the cluster. If unset, the cluster will not be configured to use a proxy.",
+ "$ref": "#/definitions/io.openshift.install.v1.Proxy"
},
- "vcpusPerSocket": {
- "description": "vcpusPerSocket is the number of vCPUs per socket of the VM",
- "type": "integer",
- "format": "int32",
- "default": 0
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "NutanixMachineProviderConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1.NutanixMachineProviderStatus": {
- "description": "NutanixMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains nutanix-specific status information. Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "publish": {
+ "description": "Publish controls how the user facing endpoints of the cluster like the Kubernetes API, OpenShift routes etc. are exposed. When no strategy is specified, the strategy is \"External\".",
"type": "string"
},
- "conditions": {
- "description": "conditions is a set of conditions associated with the Machine to indicate errors or other status",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "pullSecret": {
+ "description": "PullSecret is the secret to use when pulling images.",
+ "type": "string",
+ "default": ""
},
- "vmUUID": {
- "description": "vmUUID is the Machine associated VM's UUID The field is missing before the VM is created. Once the VM is created, the field is filled with the VM's UUID and it will not change. The vmUUID is used to find the VM when updating the Machine status, and to delete the VM when the Machine is deleted.",
+ "sshKey": {
+ "description": "SSHKey is the public Secure Shell (SSH) key to provide access to instances.",
"type": "string"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "machine.openshift.io",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "NutanixMachineProviderStatus",
+ "Kind": "InstallConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.NutanixResourceIdentifier": {
- "description": "NutanixResourceIdentifier holds the identity of a Nutanix PC resource (cluster, image, subnet, etc.)",
+ "io.openshift.install.v1.MachineNetworkEntry": {
+ "description": "MachineNetworkEntry is a single IP address block for node IP blocks.",
"type": "object",
"required": [
- "type"
+ "cidr"
],
"properties": {
- "name": {
- "description": "name is the resource name in the PC",
- "type": "string"
- },
- "type": {
- "description": "Type is the identifier type to use for this resource.",
- "type": "string",
- "default": ""
- },
- "uuid": {
- "description": "uuid is the UUID of the resource in the PC.",
- "type": "string"
+ "cidr": {
+ "description": "CIDR is the IP block address pool for machines within the cluster.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.ipnet.IPNet"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "NutanixResourceIdentifier",
+ "Kind": "MachineNetworkEntry",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "name": "Name",
- "uuid": "UUID"
- }
- }
- ]
+ }
},
- "io.openshift.machine.v1.NutanixStorageResourceIdentifier": {
- "description": "NutanixStorageResourceIdentifier holds the identity of a Nutanix storage resource (storage_container, etc.)",
+ "io.openshift.install.v1.MachinePool": {
+ "description": "MachinePool is a pool of machines to be installed.",
"type": "object",
"required": [
- "type"
+ "name",
+ "platform"
],
"properties": {
- "type": {
- "description": "type is the identifier type to use for this resource. The valid value is \"uuid\".",
+ "architecture": {
+ "description": "Architecture is the instruction set architecture of the machine pool. Defaults to amd64.",
+ "type": "string"
+ },
+ "hyperthreading": {
+ "description": "Hyperthreading determines the mode of hyperthreading that machines in the pool will utilize. Default is for hyperthreading to be enabled.",
+ "type": "string"
+ },
+ "name": {
+ "description": "Name is the name of the machine pool. For the control plane machine pool, the name will always be \"master\". For the compute machine pools, the only valid name is \"worker\".",
"type": "string",
"default": ""
},
- "uuid": {
- "description": "uuid is the UUID of the storage resource in the PC.",
- "type": "string"
+ "platform": {
+ "description": "Platform is configuration for machine pool specific to the platform.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.install.v1.MachinePoolPlatform"
+ },
+ "replicas": {
+ "description": "Replicas is the machine count for the machine pool.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "NutanixStorageResourceIdentifier",
+ "Kind": "MachinePool",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "uuid": "UUID"
- }
- }
- ]
+ }
},
- "io.openshift.machine.v1.NutanixVMDisk": {
- "description": "NutanixDataDisk specifies the VM data disk configuration parameters.",
+ "io.openshift.install.v1.MachinePoolPlatform": {
+ "description": "MachinePoolPlatform is the platform-specific configuration for a machine pool. Only one of the platforms should be set.",
"type": "object",
- "required": [
- "diskSize"
- ],
"properties": {
- "dataSource": {
- "description": "dataSource refers to a data source image for the VM disk.",
- "$ref": "#/definitions/io.openshift.machine.v1.NutanixResourceIdentifier"
+ "aws": {
+ "description": "AWS is the configuration used when installing on AWS.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.aws.MachinePool"
},
- "deviceProperties": {
- "description": "deviceProperties are the properties of the disk device.",
- "$ref": "#/definitions/io.openshift.machine.v1.NutanixVMDiskDeviceProperties"
+ "azure": {
+ "description": "Azure is the configuration used when installing on Azure.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.azure.MachinePool"
},
- "diskSize": {
- "description": "diskSize is size (in Quantity format) of the disk attached to the VM. See https://pkg.go.dev/k8s.io/apimachinery/pkg/api/resource#Format for the Quantity format and example documentation. The minimum diskSize is 1GB.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
+ "baremetal": {
+ "description": "BareMetal is the configuration used when installing on bare metal.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.baremetal.MachinePool"
},
- "storageConfig": {
- "description": "storageConfig are the storage configuration parameters of the VM disks.",
- "$ref": "#/definitions/io.openshift.machine.v1.NutanixVMStorageConfig"
+ "gcp": {
+ "description": "GCP is the configuration used when installing on GCP",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.gcp.MachinePool"
+ },
+ "ibmcloud": {
+ "description": "IBMCloud is the configuration used when installing on IBM Cloud.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ibmcloud.MachinePool"
+ },
+ "nutanix": {
+ "description": "Nutanix is the configuration used when installing on Nutanix.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.nutanix.MachinePool"
+ },
+ "openstack": {
+ "description": "OpenStack is the configuration used when installing on OpenStack.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.openstack.MachinePool"
+ },
+ "ovirt": {
+ "description": "Ovirt is the configuration used when installing on oVirt.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ovirt.MachinePool"
+ },
+ "powervs": {
+ "description": "PowerVS is the configuration used when installing on IBM Power VS.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.powervs.MachinePool"
+ },
+ "vsphere": {
+ "description": "VSphere is the configuration used when installing on vSphere.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.vsphere.MachinePool"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "NutanixVMDisk",
+ "Kind": "MachinePoolPlatform",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.NutanixVMDiskDeviceProperties": {
- "description": "NutanixVMDiskDeviceProperties specifies the disk device properties.",
+ "io.openshift.install.v1.Networking": {
+ "description": "Networking defines the pod network provider in the cluster.",
"type": "object",
- "required": [
- "deviceType"
- ],
"properties": {
- "adapterType": {
- "description": "adapterType is the adapter type of the disk address. If the deviceType is \"Disk\", the valid adapterType can be \"SCSI\", \"IDE\", \"PCI\", \"SATA\" or \"SPAPR\". If the deviceType is \"CDRom\", the valid adapterType can be \"IDE\" or \"SATA\".",
- "type": "string"
+ "clusterNetwork": {
+ "description": "ClusterNetwork is the list of IP address pools for pods. Default is 10.128.0.0/14 and a host prefix of /23.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.install.v1.ClusterNetworkEntry"
+ }
},
- "deviceIndex": {
- "description": "deviceIndex is the index of the disk address. The valid values are non-negative integers, with the default value 0. For a Machine VM, the deviceIndex for the disks with the same deviceType.adapterType combination should start from 0 and increase consecutively afterwards. Note that for each Machine VM, the Disk.SCSI.0 and CDRom.IDE.0 are reserved to be used by the VM's system. So for dataDisks of Disk.SCSI and CDRom.IDE, the deviceIndex should start from 1.",
+ "clusterNetworkMTU": {
+ "description": "ClusterNetworkMTU is the Maximum Transmit (MTU) Unit size in bytes to allocate to the cluster network. For example, 1200 would set the MTU of the entire overlay network. If the deployment does not require changes in the network plugin, leave it unset and the MTU will be calculated automatically based on the host network MTU.",
"type": "integer",
- "format": "int32"
+ "format": "int64"
},
- "deviceType": {
- "description": "deviceType specifies the disk device type. The valid values are \"Disk\" and \"CDRom\", and the default is \"Disk\".",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "NutanixVMDiskDeviceProperties",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1.NutanixVMStorageConfig": {
- "description": "NutanixVMStorageConfig specifies the storage configuration parameters for VM disks.",
- "type": "object",
- "required": [
- "diskMode"
- ],
- "properties": {
- "diskMode": {
- "description": "diskMode specifies the disk mode. The valid values are Standard and Flash, and the default is Standard.",
- "type": "string",
- "default": ""
+ "clusterNetworks": {
+ "description": "Deprecated name for ClusterNetwork",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.install.v1.ClusterNetworkEntry"
+ }
},
- "storageContainer": {
- "description": "storageContainer refers to the storage_container used by the VM disk.",
- "$ref": "#/definitions/io.openshift.machine.v1.NutanixStorageResourceIdentifier"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "NutanixVMStorageConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1.OpenShiftMachineV1Beta1MachineTemplate": {
- "description": "OpenShiftMachineV1Beta1MachineTemplate is a template for the ControlPlaneMachineSet to create Machines from the v1beta1.machine.openshift.io API group.",
- "type": "object",
- "required": [
- "metadata",
- "spec"
- ],
- "properties": {
- "failureDomains": {
- "description": "FailureDomains is the list of failure domains (sometimes called availability zones) in which the ControlPlaneMachineSet should balance the Control Plane Machines. This will be merged into the ProviderSpec given in the template. This field is optional on platforms that do not require placement information.",
- "$ref": "#/definitions/io.openshift.machine.v1.FailureDomains"
+ "machineCIDR": {
+ "description": "Deprecated way to configure an IP address pool for machines. Replaced by MachineNetwork which allows for multiple pools.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.ipnet.IPNet"
},
- "metadata": {
- "description": "ObjectMeta is the standard object metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata Labels are required to match the ControlPlaneMachineSet selector.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.ControlPlaneMachineSetTemplateObjectMeta"
+ "machineNetwork": {
+ "description": "MachineNetwork is the list of IP address pools for machines. This field replaces MachineCIDR, and if set MachineCIDR must be empty or match the first entry in the list. Default is 10.0.0.0/16 for all platforms other than Power VS. For Power VS, the default is 192.168.0.0/24.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.install.v1.MachineNetworkEntry"
+ }
},
- "spec": {
- "description": "Spec contains the desired configuration of the Control Plane Machines. The ProviderSpec within contains platform specific details for creating the Control Plane Machines. The ProviderSe should be complete apart from the platform specific failure domain field. This will be overriden when the Machines are created based on the FailureDomains field.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineSpec"
+ "networkType": {
+ "description": "NetworkType is the type of network to install. The default value is OVNKubernetes.",
+ "type": "string"
+ },
+ "serviceCIDR": {
+ "description": "Deprecated way to configure an IP address pool for services. Replaced by ServiceNetwork which allows for multiple pools.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.ipnet.IPNet"
+ },
+ "serviceNetwork": {
+ "description": "ServiceNetwork is the list of IP address pools for services. Default is 172.30.0.0/16. NOTE: currently only one entry is supported.",
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.ipnet.IPNet"
+ }
+ },
+ "type": {
+ "description": "Deprecated name for NetworkType",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "OpenShiftMachineV1Beta1MachineTemplate",
+ "Kind": "Networking",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.OpenStackFailureDomain": {
- "description": "OpenStackFailureDomain configures failure domain information for the OpenStack platform.",
+ "io.openshift.install.v1.OperatorPublishingStrategy": {
+ "description": "OperatorPublishingStrategy is used to control the visibility of the components which can be used to have a mix of public and private resources.",
"type": "object",
"properties": {
- "availabilityZone": {
- "description": "availabilityZone is the nova availability zone in which the OpenStack machine provider will create the VM. If not specified, the VM will be created in the default availability zone specified in the nova configuration. Availability zone names must NOT contain : since it is used by admin users to specify hosts where instances are launched in server creation. Also, it must not contain spaces otherwise it will lead to node that belongs to this availability zone register failure, see kubernetes/cloud-provider-openstack#1379 for further information. The maximum length of availability zone name is 63 as per labels limits.",
+ "apiserver": {
+ "description": "APIServer sets the visibility of the load balancers servicing the APIserver.",
"type": "string"
},
- "rootVolume": {
- "description": "rootVolume contains settings that will be used by the OpenStack machine provider to create the root volume attached to the VM. If not specified, no root volume will be created.",
- "$ref": "#/definitions/io.openshift.machine.v1.RootVolume"
+ "ingress": {
+ "description": "Ingress sets the visibility of the created dns resources.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machine.openshift.io",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "OpenStackFailureDomain",
+ "Kind": "OperatorPublishingStrategy",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.PowerVSMachineProviderConfig": {
- "description": "PowerVSMachineProviderConfig is the type that will be embedded in a Machine.Spec.ProviderSpec field for a PowerVS virtual machine. It is used by the PowerVS machine actuator to create a single Machine.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.install.v1.Platform": {
+ "description": "Platform is the configuration for the specific platform upon which to perform the installation. Only one of the platform configuration should be set.",
"type": "object",
- "required": [
- "serviceInstance",
- "image",
- "network",
- "keyPairName"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "credentialsSecret": {
- "description": "credentialsSecret is a reference to the secret with IBM Cloud credentials.",
- "$ref": "#/definitions/io.openshift.machine.v1.PowerVSSecretReference"
- },
- "image": {
- "description": "image is to identify the rhcos image uploaded to IBM COS bucket which is used to create the instance. supported image identifier in PowerVSResource are Name and ID and that can be obtained from IBM Cloud UI or IBM Cloud cli.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.PowerVSResource"
+ "aws": {
+ "description": "AWS is the configuration used when installing on AWS.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.aws.Platform"
},
- "keyPairName": {
- "description": "keyPairName is the name of the KeyPair to use for SSH. The key pair will be exposed to the instance via the instance metadata service. On boot, the OS will copy the public keypair into the authorized keys for the core user.",
- "type": "string",
- "default": ""
+ "azure": {
+ "description": "Azure is the configuration used when installing on Azure.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.azure.Platform"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "baremetal": {
+ "description": "BareMetal is the configuration used when installing on bare metal.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.baremetal.Platform"
},
- "loadBalancers": {
- "description": "loadBalancers is the set of load balancers to which the new control plane instance should be added once it is created.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.LoadBalancerReference"
- }
+ "external": {
+ "description": "External is the configuration used when installing on an external cloud provider.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.external.Platform"
},
- "memoryGiB": {
- "description": "memoryGiB is the size of a virtual machine's memory, in GiB. maximum value for the MemoryGiB depends on the selected SystemType. when SystemType is set to e880 maximum MemoryGiB value is 7463 GiB. when SystemType is set to e980 maximum MemoryGiB value is 15307 GiB. when SystemType is set to s922 maximum MemoryGiB value is 942 GiB. The minimum memory is 32 GiB. When omitted, this means the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 32.",
- "type": "integer",
- "format": "int32"
+ "gcp": {
+ "description": "GCP is the configuration used when installing on Google Cloud Platform.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.gcp.Platform"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "ibmcloud": {
+ "description": "IBMCloud is the configuration used when installing on IBM Cloud.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ibmcloud.Platform"
},
- "network": {
- "description": "network is the reference to the Network to use for this instance. supported network identifier in PowerVSResource are Name, ID and RegEx and that can be obtained from IBM Cloud UI or IBM Cloud cli.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.PowerVSResource"
+ "none": {
+ "description": "None is the empty configuration used when installing on an unsupported platform.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.none.Platform"
},
- "processorType": {
- "description": "processorType is the VM instance processor type. It must be set to one of the following values: Dedicated, Capped or Shared. Dedicated: resources are allocated for a specific client, The hypervisor makes a 1:1 binding of a partition’s processor to a physical processor core. Shared: Shared among other clients. Capped: Shared, but resources do not expand beyond those that are requested, the amount of CPU time is Capped to the value specified for the entitlement. if the processorType is selected as Dedicated, then processors value cannot be fractional. When omitted, this means that the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Shared.",
- "type": "string"
+ "nutanix": {
+ "description": "Nutanix is the configuration used when installing on Nutanix.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.nutanix.Platform"
},
- "processors": {
- "description": "processors is the number of virtual processors in a virtual machine. when the processorType is selected as Dedicated the processors value cannot be fractional. maximum value for the Processors depends on the selected SystemType. when SystemType is set to e880 or e980 maximum Processors value is 143. when SystemType is set to s922 maximum Processors value is 15. minimum value for Processors depends on the selected ProcessorType. when ProcessorType is set as Shared or Capped, The minimum processors is 0.5. when ProcessorType is set as Dedicated, The minimum processors is 1. When omitted, this means that the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default is set based on the selected ProcessorType. when ProcessorType selected as Dedicated, the default is set to 1. when ProcessorType selected as Shared or Capped, the default is set to 0.5.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
+ "openstack": {
+ "description": "OpenStack is the configuration used when installing on OpenStack.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.openstack.Platform"
},
- "serviceInstance": {
- "description": "serviceInstance is the reference to the Power VS service on which the server instance(VM) will be created. Power VS service is a container for all Power VS instances at a specific geographic region. serviceInstance can be created via IBM Cloud catalog or CLI. supported serviceInstance identifier in PowerVSResource are Name and ID and that can be obtained from IBM Cloud UI or IBM Cloud cli. More detail about Power VS service instance. https://cloud.ibm.com/docs/power-iaas?topic=power-iaas-creating-power-virtual-server",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1.PowerVSResource"
+ "ovirt": {
+ "description": "Ovirt is the configuration used when installing on oVirt.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.ovirt.Platform"
},
- "systemType": {
- "description": "systemType is the System type used to host the instance. systemType determines the number of cores and memory that is available. Few of the supported SystemTypes are s922,e880,e980. e880 systemType available only in Dallas Datacenters. e980 systemType available in Datacenters except Dallas and Washington. When omitted, this means that the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is s922 which is generally available.",
- "type": "string"
+ "powervs": {
+ "description": "PowerVS is the configuration used when installing on Power VS.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.powervs.Platform"
},
- "userDataSecret": {
- "description": "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance.",
- "$ref": "#/definitions/io.openshift.machine.v1.PowerVSSecretReference"
+ "vsphere": {
+ "description": "VSphere is the configuration used when installing on vSphere.",
+ "$ref": "#/definitions/com.github.openshift.installer.pkg.types.vsphere.Platform"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "machine.openshift.io",
+ "Type": "nested",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "PowerVSMachineProviderConfig",
+ "Kind": "Platform",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.PowerVSMachineProviderStatus": {
- "description": "PowerVSMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains PowerVS-specific status information.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.install.v1.Proxy": {
+ "description": "Proxy defines the proxy settings for the cluster. At least one of HTTPProxy or HTTPSProxy is required.",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "conditions": {
- "description": "conditions is a set of conditions associated with the Machine to indicate errors or other status",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "instanceId": {
- "description": "instanceId is the instance ID of the machine created in PowerVS instanceId uniquely identifies a Power VS server instance(VM) under a Power VS service. This will help in updating or deleting a VM in Power VS Cloud",
- "type": "string"
- },
- "instanceState": {
- "description": "instanceState is the state of the PowerVS instance for this machine Possible instance states are Active, Build, ShutOff, Reboot This is used to display additional information to user regarding instance current state",
+ "httpProxy": {
+ "description": "HTTPProxy is the URL of the proxy for HTTP requests.",
"type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "httpsProxy": {
+ "description": "HTTPSProxy is the URL of the proxy for HTTPS requests.",
"type": "string"
},
- "serviceInstanceID": {
- "description": "serviceInstanceID is the reference to the Power VS ServiceInstance on which the machine instance will be created. serviceInstanceID uniquely identifies the Power VS service By setting serviceInstanceID it will become easy and efficient to fetch a server instance(VM) within Power VS Cloud.",
+ "noProxy": {
+ "description": "NoProxy is a comma-separated list of domains and CIDRs for which the proxy should not be used.",
"type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "machine.openshift.io",
+ "Type": "nested",
+ "Group": "install.openshift.io",
"Version": "v1",
- "Kind": "PowerVSMachineProviderStatus",
+ "Kind": "Proxy",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.PowerVSResource": {
- "description": "PowerVSResource is a reference to a specific PowerVS resource by ID, Name or RegEx Only one of ID, Name or RegEx may be specified. Specifying more than one will result in a validation error.",
+ "io.openshift.internal.security.v1.RangeAllocation": {
+ "description": "RangeAllocation is used so we can easily expose a RangeAllocation typed for security group This is an internal API, not intended for external consumption.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "range",
+ "data"
+ ],
"properties": {
- "id": {
- "description": "ID of resource",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "name": {
- "description": "Name of resource",
- "type": "string"
+ "data": {
+ "description": "data is a byte array representing the serialized state of a range allocation. It is a bitmap with each bit set to one to represent a range is taken.",
+ "type": "string",
+ "format": "byte"
},
- "regex": {
- "description": "Regex to find resource Regex contains the pattern to match to find a resource",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "type": {
- "description": "Type identifies the resource type for this entry. Valid values are ID, Name and RegEx",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "PowerVSResource",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "fields-to-discriminateBy": {
- "id": "ID",
- "name": "Name",
- "regex": "RegEx",
- "type": "Type"
- }
- }
- ]
- },
- "io.openshift.machine.v1.PowerVSSecretReference": {
- "description": "PowerVSSecretReference contains enough information to locate the referenced secret inside the same namespace.",
- "type": "object",
- "properties": {
- "name": {
- "description": "Name of the secret.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1",
- "Kind": "PowerVSSecretReference",
- "Scope": "Namespaced"
- },
- "x-kubernetes-map-type": "atomic"
- },
- "io.openshift.machine.v1.RootVolume": {
- "description": "RootVolume represents the volume metadata to boot from. The original RootVolume struct is defined in the v1alpha1 but it's not best practice to use it directly here so we define a new one that should stay in sync with the original one.",
- "type": "object",
- "required": [
- "volumeType"
- ],
- "properties": {
- "availabilityZone": {
- "description": "availabilityZone specifies the Cinder availability zone where the root volume will be created. If not specifified, the root volume will be created in the availability zone specified by the volume type in the cinder configuration. If the volume type (configured in the OpenStack cluster) does not specify an availability zone, the root volume will be created in the default availability zone specified in the cinder configuration. See https://docs.openstack.org/cinder/latest/admin/availability-zone-type.html for more details. If the OpenStack cluster is deployed with the cross_az_attach configuration option set to false, the root volume will have to be in the same availability zone as the VM (defined by OpenStackFailureDomain.AvailabilityZone). Availability zone names must NOT contain spaces otherwise it will lead to volume that belongs to this availability zone register failure, see kubernetes/cloud-provider-openstack#1379 for further information. The maximum length of availability zone name is 63 as per labels limits.",
- "type": "string"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "volumeType": {
- "description": "volumeType specifies the type of the root volume that will be provisioned. The maximum length of a volume type name is 255 characters, as per the OpenStack limit.",
+ "range": {
+ "description": "range is a string representing a unique label for a range of uids, \"1000000000-2000000000/10000\".",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
+ "Type": "object",
+ "Group": "security.internal.openshift.io",
"Version": "v1",
- "Kind": "RootVolume",
- "Scope": "Namespaced"
+ "Kind": "RangeAllocation",
+ "Scope": "Clustered"
}
},
- "io.openshift.machine.v1.SystemDiskProperties": {
- "description": "SystemDiskProperties contains the information regarding the system disk including performance, size, name, and category",
+ "io.openshift.internal.security.v1.RangeAllocationList": {
+ "description": "RangeAllocationList is a list of RangeAllocations objects This is an internal API, not intended for external consumption.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "category": {
- "description": "Category is the category of the system disk. Valid values: cloud_essd: ESSD. When the parameter is set to this value, you can use the SystemDisk.PerformanceLevel parameter to specify the performance level of the disk. cloud_efficiency: ultra disk. cloud_ssd: standard SSD. cloud: basic disk. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently for non-I/O optimized instances of retired instance types, the default is `cloud`. Currently for other instances, the default is `cloud_efficiency`.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "name": {
- "description": "Name is the name of the system disk. If the name is specified the name must be 2 to 128 characters in length. It must start with a letter and cannot start with http:// or https://. It can contain letters, digits, colons (:), underscores (_), and hyphens (-). Empty value means the platform chooses a default, which is subject to change over time. Currently the default is `\"\"`.",
- "type": "string"
+ "items": {
+ "description": "List of RangeAllocations.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.internal.security.v1.RangeAllocation"
+ }
},
- "performanceLevel": {
- "description": "PerformanceLevel is the performance level of the ESSD used as the system disk. Valid values:\n\nPL0: A single ESSD can deliver up to 10,000 random read/write IOPS. PL1: A single ESSD can deliver up to 50,000 random read/write IOPS. PL2: A single ESSD can deliver up to 100,000 random read/write IOPS. PL3: A single ESSD can deliver up to 1,000,000 random read/write IOPS. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is `PL1`. For more information about ESSD performance levels, see ESSDs.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "size": {
- "description": "Size is the size of the system disk. Unit: GiB. Valid values: 20 to 500. The value must be at least 20 and greater than or equal to the size of the image. Empty value means the platform chooses a default, which is subject to change over time. Currently the default is `40` or the size of the image depending on whichever is greater.",
- "type": "integer",
- "format": "int64"
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
+ "Type": "list",
+ "Group": "security.internal.openshift.io",
"Version": "v1",
- "Kind": "SystemDiskProperties",
+ "Kind": "RangeAllocationList",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.Tag": {
- "description": "Tag The tags of ECS Instance",
+ "io.openshift.machine.v1.AWSFailureDomain": {
+ "description": "AWSFailureDomain configures failure domain information for the AWS platform.",
"type": "object",
- "required": [
- "Key",
- "Value"
- ],
"properties": {
- "Key": {
- "description": "Key is the name of the key pair",
- "type": "string",
- "default": ""
+ "placement": {
+ "description": "Placement configures the placement information for this instance.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.AWSFailureDomainPlacement"
},
- "Value": {
- "description": "Value is the value or data of the key pair",
- "type": "string",
- "default": ""
+ "subnet": {
+ "description": "Subnet is a reference to the subnet to use for this instance.",
+ "$ref": "#/definitions/io.openshift.machine.v1.AWSResourceReference"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
"Version": "v1",
- "Kind": "Tag",
+ "Kind": "AWSFailureDomain",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1.VSphereFailureDomain": {
- "description": "VSphereFailureDomain configures failure domain information for the vSphere platform",
+ "io.openshift.machine.v1.AWSFailureDomainPlacement": {
+ "description": "AWSFailureDomainPlacement configures the placement information for the AWSFailureDomain.",
"type": "object",
"required": [
- "name"
+ "availabilityZone"
],
"properties": {
- "name": {
- "description": "name of the failure domain in which the vSphere machine provider will create the VM. Failure domains are defined in a cluster's config.openshift.io/Infrastructure resource. When balancing machines across failure domains, the control plane machine set will inject configuration from the Infrastructure resource into the machine providerSpec to allocate the machine to a failure domain.",
+ "availabilityZone": {
+ "description": "AvailabilityZone is the availability zone of the instance.",
"type": "string",
"default": ""
}
@@ -90956,337 +92011,266 @@
"Type": "nested",
"Group": "machine.openshift.io",
"Version": "v1",
- "Kind": "VSphereFailureDomain",
+ "Kind": "AWSFailureDomainPlacement",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1alpha1.AdditionalBlockDevice": {
- "description": "additionalBlockDevice is a block device to attach to the server.",
+ "io.openshift.machine.v1.AWSResourceFilter": {
+ "description": "AWSResourceFilter is a filter used to identify an AWS resource",
"type": "object",
"required": [
- "name",
- "sizeGiB",
- "storage"
+ "name"
],
"properties": {
"name": {
- "description": "name of the block device in the context of a machine. If the block device is a volume, the Cinder volume will be named as a combination of the machine name and this name. Also, this name will be used for tagging the block device. Information about the block device tag can be obtained from the OpenStack metadata API or the config drive.",
+ "description": "Name of the filter. Filter names are case-sensitive.",
"type": "string",
"default": ""
},
- "sizeGiB": {
- "description": "sizeGiB is the size of the block device in gibibytes (GiB).",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "storage": {
- "description": "storage specifies the storage type of the block device and additional storage options.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1alpha1.BlockDeviceStorage"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "AdditionalBlockDevice",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1alpha1.AddressPair": {
- "type": "object",
- "properties": {
- "ipAddress": {
- "type": "string"
- },
- "macAddress": {
- "type": "string"
+ "values": {
+ "description": "Values includes one or more filter values. Filter values are case-sensitive.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "AddressPair",
+ "Version": "v1",
+ "Kind": "AWSResourceFilter",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1alpha1.BlockDeviceStorage": {
- "description": "blockDeviceStorage is the storage type of a block device to create and contains additional storage options.",
+ "io.openshift.machine.v1.AWSResourceReference": {
+ "description": "AWSResourceReference is a reference to a specific AWS resource by ID, ARN, or filters. Only one of ID, ARN or Filters may be specified. Specifying more than one will result in a validation error.",
"type": "object",
"required": [
"type"
],
"properties": {
+ "arn": {
+ "description": "ARN of resource.",
+ "type": "string"
+ },
+ "filters": {
+ "description": "Filters is a set of filters used to identify a resource.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.AWSResourceFilter"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "id": {
+ "description": "ID of resource.",
+ "type": "string"
+ },
"type": {
- "description": "type is the type of block device to create. This can be either \"Volume\" or \"Local\".",
+ "description": "Type determines how the reference will fetch the AWS resource.",
"type": "string",
"default": ""
- },
- "volume": {
- "description": "volume contains additional storage options for a volume block device.",
- "$ref": "#/definitions/io.openshift.machine.v1alpha1.BlockDeviceVolume"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "BlockDeviceStorage",
+ "Version": "v1",
+ "Kind": "AWSResourceReference",
"Scope": "Namespaced"
},
"x-kubernetes-unions": [
{
"discriminator": "type",
"fields-to-discriminateBy": {
- "volume": "Volume"
+ "arn": "ARN",
+ "filters": "Filters",
+ "id": "ID"
}
}
]
},
- "io.openshift.machine.v1alpha1.BlockDeviceVolume": {
- "description": "blockDeviceVolume contains additional storage options for a volume block device.",
+ "io.openshift.machine.v1.AlibabaCloudMachineProviderConfig": {
+ "description": "AlibabaCloudMachineProviderConfig is the Schema for the alibabacloudmachineproviderconfig API Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "instanceType",
+ "vpcId",
+ "regionId",
+ "zoneId",
+ "imageId",
+ "vSwitch",
+ "resourceGroup"
+ ],
"properties": {
- "availabilityZone": {
- "description": "availabilityZone is the volume availability zone to create the volume in. If omitted, the availability zone of the server will be used. The availability zone must NOT contain spaces otherwise it will lead to volume that belongs to this availability zone register failure, see kubernetes/cloud-provider-openstack#1379 for further information.",
- "type": "string"
- },
- "type": {
- "description": "type is the Cinder volume type of the volume. If omitted, the default Cinder volume type that is configured in the OpenStack cloud will be used.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "BlockDeviceVolume",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1alpha1.Filter": {
- "type": "object",
- "properties": {
- "adminStateUp": {
- "description": "Deprecated: adminStateUp is silently ignored. It has no replacement.",
- "type": "boolean"
},
- "description": {
- "description": "description filters networks by description.",
- "type": "string"
+ "bandwidth": {
+ "description": "Bandwidth describes the internet bandwidth strategy for the instance",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.BandwidthProperties"
},
- "id": {
- "description": "Deprecated: use NetworkParam.uuid instead. Ignored if NetworkParam.uuid is set.",
- "type": "string"
+ "credentialsSecret": {
+ "description": "CredentialsSecret is a reference to the secret with alibabacloud credentials. Otherwise, defaults to permissions provided by attached RAM role where the actuator is running.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "limit": {
- "description": "Deprecated: limit is silently ignored. It has no replacement.",
- "type": "integer",
- "format": "int32"
+ "dataDisk": {
+ "description": "DataDisks holds information regarding the extra disks attached to the instance",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.DataDiskProperties"
+ }
},
- "marker": {
- "description": "Deprecated: marker is silently ignored. It has no replacement.",
- "type": "string"
+ "imageId": {
+ "description": "The ID of the image used to create the instance.",
+ "type": "string",
+ "default": ""
},
- "name": {
- "description": "name filters networks by name.",
- "type": "string"
+ "instanceType": {
+ "description": "The instance type of the instance.",
+ "type": "string",
+ "default": ""
},
- "notTags": {
- "description": "notTags filters by networks which don't match all specified tags. NOT (t1 AND t2...) Multiple tags are comma separated.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "notTagsAny": {
- "description": "notTagsAny filters by networks which don't match any specified tags. NOT (t1 OR t2...) Multiple tags are comma separated.",
- "type": "string"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "projectId": {
- "description": "projectId filters networks by project ID.",
+ "ramRoleName": {
+ "description": "RAMRoleName is the name of the instance Resource Access Management (RAM) role. This allows the instance to perform API calls as this specified RAM role.",
"type": "string"
},
- "shared": {
- "description": "Deprecated: shared is silently ignored. It has no replacement.",
- "type": "boolean"
+ "regionId": {
+ "description": "The ID of the region in which to create the instance. You can call the DescribeRegions operation to query the most recent region list.",
+ "type": "string",
+ "default": ""
},
- "sortDir": {
- "description": "Deprecated: sortDir is silently ignored. It has no replacement.",
- "type": "string"
+ "resourceGroup": {
+ "description": "ResourceGroup references the resource group to which to assign the instance. A reference holds either the resource group ID, the resource name, or the required tags to search. When more than one resource group are returned for a search, an error will be produced and the Machine will not be created. Resource Groups do not support searching by tags.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.AlibabaResourceReference"
},
- "sortKey": {
- "description": "Deprecated: sortKey is silently ignored. It has no replacement.",
- "type": "string"
+ "securityGroups": {
+ "description": "SecurityGroups is a list of security group references to assign to the instance. A reference holds either the security group ID, the resource name, or the required tags to search. When more than one security group is returned for a tag search, all the groups are associated with the instance up to the maximum number of security groups to which an instance can belong. For more information, see the \"Security group limits\" section in Limits. https://www.alibabacloud.com/help/en/doc-detail/25412.htm",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.AlibabaResourceReference"
+ }
},
- "status": {
- "description": "Deprecated: status is silently ignored. It has no replacement.",
- "type": "string"
+ "systemDisk": {
+ "description": "SystemDisk holds the properties regarding the system disk for the instance",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.SystemDiskProperties"
},
- "tags": {
- "description": "tags filters by networks containing all specified tags. Multiple tags are comma separated.",
- "type": "string"
+ "tag": {
+ "description": "Tags are the set of metadata to add to an instance.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.Tag"
+ }
},
- "tagsAny": {
- "description": "tagsAny filters by networks containing any specified tags. Multiple tags are comma separated.",
+ "tenancy": {
+ "description": "Tenancy specifies whether to create the instance on a dedicated host. Valid values:\n\ndefault: creates the instance on a non-dedicated host. host: creates the instance on a dedicated host. If you do not specify the DedicatedHostID parameter, Alibaba Cloud automatically selects a dedicated host for the instance. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `default`.",
"type": "string"
},
- "tenantId": {
- "description": "tenantId filters networks by tenant ID. Deprecated: use projectId instead. tenantId will be ignored if projectId is set.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "Filter",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1alpha1.FixedIPs": {
- "type": "object",
- "required": [
- "subnetID"
- ],
- "properties": {
- "ipAddress": {
- "description": "ipAddress is a specific IP address to use in the given subnet. Port creation will fail if the address is not available. If not specified, an available IP from the given subnet will be selected automatically.",
- "type": "string"
+ "userDataSecret": {
+ "description": "UserDataSecret contains a local reference to a secret that contains the UserData to apply to the instance",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "subnetID": {
- "description": "subnetID specifies the ID of the subnet where the fixed IP will be allocated.",
+ "vSwitch": {
+ "description": "VSwitch is a reference to the vswitch to use for this instance. A reference holds either the vSwitch ID, the resource name, or the required tags to search. When more than one vSwitch is returned for a tag search, only the first vSwitch returned will be used. This parameter is required when you create an instance of the VPC type. You can call the DescribeVSwitches operation to query the created vSwitches.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.AlibabaResourceReference"
+ },
+ "vpcId": {
+ "description": "The ID of the vpc",
+ "type": "string",
+ "default": ""
+ },
+ "zoneId": {
+ "description": "The ID of the zone in which to create the instance. You can call the DescribeZones operation to query the most recent region list.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "FixedIPs",
+ "Version": "v1",
+ "Kind": "AlibabaCloudMachineProviderConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1alpha1.NetworkParam": {
+ "io.openshift.machine.v1.AlibabaCloudMachineProviderConfigList": {
+ "description": "AlibabaCloudMachineProviderConfigList contains a list of AlibabaCloudMachineProviderConfig Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "filter": {
- "description": "Filters for optional network query",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1alpha1.Filter"
- },
- "fixedIp": {
- "description": "A fixed IPv4 address for the NIC.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "noAllowedAddressPairs": {
- "description": "NoAllowedAddressPairs disables creation of allowed address pairs for the network ports",
- "type": "boolean"
- },
- "portSecurity": {
- "description": "PortSecurity optionally enables or disables security on ports managed by OpenStack",
- "type": "boolean"
- },
- "portTags": {
- "description": "PortTags allows users to specify a list of tags to add to ports created in a given network",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "profile": {
- "description": "A dictionary that enables the application running on the specified host to pass and receive virtual network interface (VIF) port-specific information to the plug-in.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "subnets": {
- "description": "Subnet within a network to use",
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1alpha1.SubnetParam"
+ "$ref": "#/definitions/io.openshift.machine.v1.AlibabaCloudMachineProviderConfig"
}
},
- "uuid": {
- "description": "The UUID of the network. Required if you omit the port attribute.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "vnicType": {
- "description": "The virtual network interface card (vNIC) type that is bound to the neutron port.",
- "type": "string"
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "NetworkParam",
+ "Version": "v1",
+ "Kind": "AlibabaCloudMachineProviderConfigList",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1alpha1.OpenstackProviderSpec": {
- "description": "OpenstackProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an OpenStack Instance. It is used by the Openstack machine actuator to create a single machine instance. Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.machine.v1.AlibabaCloudMachineProviderStatus": {
+ "description": "AlibabaCloudMachineProviderStatus is the Schema for the alibabacloudmachineproviderconfig API Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "cloudsSecret",
- "cloudName",
- "flavor",
- "image"
- ],
"properties": {
- "additionalBlockDevices": {
- "description": "additionalBlockDevices is a list of specifications for additional block devices to attach to the server instance",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1alpha1.AdditionalBlockDevice"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "availabilityZone": {
- "description": "The availability zone from which to launch the server.",
- "type": "string"
- },
- "cloudName": {
- "description": "The name of the cloud to use from the clouds secret",
- "type": "string",
- "default": ""
- },
- "cloudsSecret": {
- "description": "The name of the secret containing the openstack credentials",
- "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
- },
- "configDrive": {
- "description": "Config Drive support",
- "type": "boolean"
- },
- "flavor": {
- "description": "The flavor reference for the flavor for your server instance.",
- "type": "string",
- "default": ""
+ "conditions": {
+ "description": "Conditions is a set of conditions associated with the Machine to indicate errors or other status",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ }
},
- "floatingIP": {
- "description": "floatingIP specifies a floating IP to be associated with the machine. Note that it is not safe to use this parameter in a MachineSet, as only one Machine may be assigned the same floating IP.\n\nDeprecated: floatingIP will be removed in a future release as it cannot be implemented correctly.",
+ "instanceId": {
+ "description": "InstanceID is the instance ID of the machine created in alibabacloud",
"type": "string"
},
- "image": {
- "description": "The name of the image to use for your server instance. If the RootVolume is specified, this will be ignored and use rootVolume directly.",
- "type": "string",
- "default": ""
- },
- "keyName": {
- "description": "The ssh key to inject in the instance",
+ "instanceState": {
+ "description": "InstanceState is the state of the alibabacloud instance for this machine",
"type": "string"
},
"kind": {
@@ -91297,581 +92281,137 @@
"description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "networks": {
- "description": "A networks object. Required parameter when there are multiple networks defined for the tenant. When you do not specify the networks parameter, the server attaches to the only network created for the current tenant.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1alpha1.NetworkParam"
- }
- },
- "ports": {
- "description": "Create and assign additional ports to instances",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1alpha1.PortOpts"
- }
- },
- "primarySubnet": {
- "description": "The subnet that a set of machines will get ingress/egress traffic from",
- "type": "string"
- },
- "rootVolume": {
- "description": "The volume metadata to boot from",
- "$ref": "#/definitions/io.openshift.machine.v1alpha1.RootVolume"
- },
- "securityGroups": {
- "description": "The names of the security groups to assign to the instance",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1alpha1.SecurityGroupParam"
- }
- },
- "serverGroupID": {
- "description": "The server group to assign the machine to.",
- "type": "string"
- },
- "serverGroupName": {
- "description": "The server group to assign the machine to. A server group with that name will be created if it does not exist. If both ServerGroupID and ServerGroupName are non-empty, they must refer to the same OpenStack resource.",
- "type": "string"
- },
- "serverMetadata": {
- "description": "Metadata mapping. Allows you to create a map of key value pairs to add to the server instance.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "sshUserName": {
- "description": "The machine ssh username",
- "type": "string"
- },
- "tags": {
- "description": "Machine tags Requires Nova api 2.52 minimum!",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "trunk": {
- "description": "Whether the server instance is created on a trunk port or not.",
- "type": "boolean"
- },
- "userDataSecret": {
- "description": "The name of the secret containing the user data (startup script in most cases)",
- "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "OpenstackProviderSpec",
+ "Version": "v1",
+ "Kind": "AlibabaCloudMachineProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1alpha1.PortOpts": {
+ "io.openshift.machine.v1.AlibabaResourceReference": {
+ "description": "ResourceTagReference is a reference to a specific AlibabaCloud resource by ID, or tags. Only one of ID or Tags may be specified. Specifying more than one will result in a validation error.",
"type": "object",
"required": [
- "networkID"
+ "type"
],
"properties": {
- "adminStateUp": {
- "description": "adminStateUp sets the administrative state of the created port to up (true), or down (false).",
- "type": "boolean"
- },
- "allowedAddressPairs": {
- "description": "allowedAddressPairs specifies a set of allowed address pairs to add to the port.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1alpha1.AddressPair"
- }
+ "id": {
+ "description": "ID of resource",
+ "type": "string"
},
- "description": {
- "description": "description specifies the description of the created port.",
+ "name": {
+ "description": "Name of the resource",
"type": "string"
},
- "fixedIPs": {
- "description": "fixedIPs specifies a set of fixed IPs to assign to the port. They must all be valid for the port's network.",
+ "tags": {
+ "description": "Tags is a set of metadata based upon ECS object tags used to identify a resource. For details about usage when multiple resources are found, please see the owning parent field documentation.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1alpha1.FixedIPs"
+ "$ref": "#/definitions/io.openshift.machine.v1.Tag"
}
},
- "hostID": {
- "description": "The ID of the host where the port is allocated. Do not use this field: it cannot be used correctly. Deprecated: hostID is silently ignored. It will be removed with no replacement.",
- "type": "string"
- },
- "macAddress": {
- "description": "macAddress specifies the MAC address of the created port.",
- "type": "string"
- },
- "nameSuffix": {
- "description": "If nameSuffix is specified the created port will be named \u003cmachine name\u003e-\u003cnameSuffix\u003e. If not specified the port will be named \u003cmachine-name\u003e-\u003cindex of this port\u003e.",
- "type": "string"
- },
- "networkID": {
- "description": "networkID is the ID of the network the port will be created in. It is required.",
+ "type": {
+ "description": "type identifies the resource reference type for this entry.",
"type": "string",
"default": ""
- },
- "portSecurity": {
- "description": "enable or disable security on a given port incompatible with securityGroups and allowedAddressPairs",
- "type": "boolean"
- },
- "profile": {
- "description": "A dictionary that enables the application running on the specified host to pass and receive virtual network interface (VIF) port-specific information to the plug-in.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "projectID": {
- "description": "projectID specifies the project ID of the created port. Note that this requires OpenShift to have administrative permissions, which is typically not the case. Use of this field is not recommended.",
- "type": "string"
- },
- "securityGroups": {
- "description": "securityGroups specifies a set of security group UUIDs to use instead of the machine's default security groups. The default security groups will be used if this is left empty or not specified.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "tags": {
- "description": "tags species a set of tags to add to the port.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "tenantID": {
- "description": "tenantID specifies the tenant ID of the created port. Note that this requires OpenShift to have administrative permissions, which is typically not the case. Use of this field is not recommended. Deprecated: use projectID instead. It will be ignored if projectID is set.",
- "type": "string"
- },
- "trunk": {
- "description": "Enables and disables trunk at port level. If not provided, openStackMachine.Spec.Trunk is inherited.",
- "type": "boolean"
- },
- "vnicType": {
- "description": "The virtual network interface card (vNIC) type that is bound to the neutron port.",
- "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PortOpts",
+ "Version": "v1",
+ "Kind": "AlibabaResourceReference",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1alpha1.RootVolume": {
+ "io.openshift.machine.v1.AzureFailureDomain": {
+ "description": "AzureFailureDomain configures failure domain information for the Azure platform.",
"type": "object",
+ "required": [
+ "zone"
+ ],
"properties": {
- "availabilityZone": {
- "description": "availabilityZone specifies the Cinder availability where the root volume will be created.",
- "type": "string"
- },
- "deviceType": {
- "description": "Deprecated: deviceType will be silently ignored. There is no replacement.",
- "type": "string"
- },
- "diskSize": {
- "description": "diskSize specifies the size, in GB, of the created root volume.",
- "type": "integer",
- "format": "int32"
- },
- "sourceType": {
- "description": "Deprecated: sourceType will be silently ignored. There is no replacement.",
- "type": "string"
- },
- "sourceUUID": {
- "description": "sourceUUID specifies the UUID of a glance image used to populate the root volume. Deprecated: set image in the platform spec instead. This will be ignored if image is set in the platform spec.",
+ "subnet": {
+ "description": "subnet is the name of the network subnet in which the VM will be created. When omitted, the subnet value from the machine providerSpec template will be used.",
"type": "string"
},
- "volumeType": {
- "description": "volumeType specifies a volume type to use when creating the root volume. If not specified the default volume type will be used.",
- "type": "string"
+ "zone": {
+ "description": "Availability Zone for the virtual machine. If nil, the virtual machine should be deployed to no zone.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "RootVolume",
+ "Version": "v1",
+ "Kind": "AzureFailureDomain",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1alpha1.SecurityGroupFilter": {
+ "io.openshift.machine.v1.BandwidthProperties": {
+ "description": "Bandwidth describes the bandwidth strategy for the network of the instance",
"type": "object",
"properties": {
- "description": {
- "description": "description filters security groups by description.",
- "type": "string"
- },
- "id": {
- "description": "id specifies the ID of a security group to use. If set, id will not be validated before use. An invalid id will result in failure to create a server with an appropriate error message.",
- "type": "string"
- },
- "limit": {
- "description": "Deprecated: limit is silently ignored. It has no replacement.",
+ "internetMaxBandwidthIn": {
+ "description": "InternetMaxBandwidthIn is the maximum inbound public bandwidth. Unit: Mbit/s. Valid values: When the purchased outbound public bandwidth is less than or equal to 10 Mbit/s, the valid values of this parameter are 1 to 10. Currently the default is `10` when outbound bandwidth is less than or equal to 10 Mbit/s. When the purchased outbound public bandwidth is greater than 10, the valid values are 1 to the InternetMaxBandwidthOut value. Currently the default is the value used for `InternetMaxBandwidthOut` when outbound public bandwidth is greater than 10.",
"type": "integer",
- "format": "int32"
- },
- "marker": {
- "description": "Deprecated: marker is silently ignored. It has no replacement.",
- "type": "string"
+ "format": "int64"
},
- "name": {
- "description": "name filters security groups by name.",
- "type": "string"
- },
- "notTags": {
- "description": "notTags filters by security groups which don't match all specified tags. NOT (t1 AND t2...) Multiple tags are comma separated.",
- "type": "string"
- },
- "notTagsAny": {
- "description": "notTagsAny filters by security groups which don't match any specified tags. NOT (t1 OR t2...) Multiple tags are comma separated.",
- "type": "string"
- },
- "projectId": {
- "description": "projectId filters security groups by project ID.",
- "type": "string"
- },
- "sortDir": {
- "description": "Deprecated: sortDir is silently ignored. It has no replacement.",
- "type": "string"
- },
- "sortKey": {
- "description": "Deprecated: sortKey is silently ignored. It has no replacement.",
- "type": "string"
- },
- "tags": {
- "description": "tags filters by security groups containing all specified tags. Multiple tags are comma separated.",
- "type": "string"
- },
- "tagsAny": {
- "description": "tagsAny filters by security groups containing any specified tags. Multiple tags are comma separated.",
- "type": "string"
- },
- "tenantId": {
- "description": "tenantId filters security groups by tenant ID. Deprecated: use projectId instead. tenantId will be ignored if projectId is set.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SecurityGroupFilter",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1alpha1.SecurityGroupParam": {
- "type": "object",
- "properties": {
- "filter": {
- "description": "Filters used to query security groups in openstack",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1alpha1.SecurityGroupFilter"
- },
- "name": {
- "description": "Security Group name",
- "type": "string"
- },
- "uuid": {
- "description": "Security Group UUID",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SecurityGroupParam",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1alpha1.SubnetFilter": {
- "type": "object",
- "properties": {
- "cidr": {
- "description": "cidr filters subnets by CIDR.",
- "type": "string"
- },
- "description": {
- "description": "description filters subnets by description.",
- "type": "string"
- },
- "enableDhcp": {
- "description": "Deprecated: enableDhcp is silently ignored. It has no replacement.",
- "type": "boolean"
- },
- "gateway_ip": {
- "description": "gateway_ip filters subnets by gateway IP.",
- "type": "string"
- },
- "id": {
- "description": "id is the uuid of a specific subnet to use. If specified, id will not be validated. Instead server creation will fail with an appropriate error.",
- "type": "string"
- },
- "ipVersion": {
- "description": "ipVersion filters subnets by IP version.",
- "type": "integer",
- "format": "int32"
- },
- "ipv6AddressMode": {
- "description": "ipv6AddressMode filters subnets by IPv6 address mode.",
- "type": "string"
- },
- "ipv6RaMode": {
- "description": "ipv6RaMode filters subnets by IPv6 router adversiement mode.",
- "type": "string"
- },
- "limit": {
- "description": "Deprecated: limit is silently ignored. It has no replacement.",
+ "internetMaxBandwidthOut": {
+ "description": "InternetMaxBandwidthOut is the maximum outbound public bandwidth. Unit: Mbit/s. Valid values: 0 to 100. When a value greater than 0 is used then a public IP address is assigned to the instance. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `0`",
"type": "integer",
- "format": "int32"
- },
- "marker": {
- "description": "Deprecated: marker is silently ignored. It has no replacement.",
- "type": "string"
- },
- "name": {
- "description": "name filters subnets by name.",
- "type": "string"
- },
- "networkId": {
- "description": "Deprecated: networkId is silently ignored. Set uuid on the containing network definition instead.",
- "type": "string"
- },
- "notTags": {
- "description": "notTags filters by subnets which don't match all specified tags. NOT (t1 AND t2...) Multiple tags are comma separated.",
- "type": "string"
- },
- "notTagsAny": {
- "description": "notTagsAny filters by subnets which don't match any specified tags. NOT (t1 OR t2...) Multiple tags are comma separated.",
- "type": "string"
- },
- "projectId": {
- "description": "projectId filters subnets by project ID.",
- "type": "string"
- },
- "sortDir": {
- "description": "Deprecated: sortDir is silently ignored. It has no replacement.",
- "type": "string"
- },
- "sortKey": {
- "description": "Deprecated: sortKey is silently ignored. It has no replacement.",
- "type": "string"
- },
- "subnetpoolId": {
- "description": "subnetpoolId filters subnets by subnet pool ID.",
- "type": "string"
- },
- "tags": {
- "description": "tags filters by subnets containing all specified tags. Multiple tags are comma separated.",
- "type": "string"
- },
- "tagsAny": {
- "description": "tagsAny filters by subnets containing any specified tags. Multiple tags are comma separated.",
- "type": "string"
- },
- "tenantId": {
- "description": "tenantId filters subnets by tenant ID. Deprecated: use projectId instead. tenantId will be ignored if projectId is set.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SubnetFilter",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1alpha1.SubnetParam": {
- "type": "object",
- "properties": {
- "filter": {
- "description": "Filters for optional network query",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1alpha1.SubnetFilter"
- },
- "portSecurity": {
- "description": "PortSecurity optionally enables or disables security on ports managed by OpenStack",
- "type": "boolean"
- },
- "portTags": {
- "description": "PortTags are tags that are added to ports created on this subnet",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "uuid": {
- "description": "The UUID of the network. Required if you omit the port attribute.",
- "type": "string"
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SubnetParam",
+ "Version": "v1",
+ "Kind": "BandwidthProperties",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.AWSMachineProviderConfig": {
- "description": "AWSMachineProviderConfig is the Schema for the awsmachineproviderconfigs API Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1.ControlPlaneMachineSet": {
+ "description": "ControlPlaneMachineSet ensures that a specified number of control plane machine replicas are running at any given time. Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "ami",
- "instanceType",
- "deviceIndex",
- "subnet",
- "placement"
- ],
"properties": {
- "ami": {
- "description": "AMI is the reference to the AMI from which to create the machine instance.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.AWSResourceReference"
- },
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "blockDevices": {
- "description": "BlockDevices is the set of block device mapping associated to this instance, block device without a name will be used as a root device and only one device without a name is allowed https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/block-device-mapping-concepts.html",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.BlockDeviceMappingSpec"
- }
- },
- "capacityReservationId": {
- "description": "capacityReservationId specifies the target Capacity Reservation into which the instance should be launched. The field size should be greater than 0 and the field input must start with cr-***",
- "type": "string",
- "default": ""
- },
- "credentialsSecret": {
- "description": "CredentialsSecret is a reference to the secret with AWS credentials. Otherwise, defaults to permissions provided by attached IAM role where the actuator is running.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "deviceIndex": {
- "description": "DeviceIndex is the index of the device on the instance for the network interface attachment. Defaults to 0.",
- "type": "integer",
- "format": "int64",
- "default": 0
- },
- "iamInstanceProfile": {
- "description": "IAMInstanceProfile is a reference to an IAM role to assign to the instance",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.AWSResourceReference"
- },
- "instanceType": {
- "description": "InstanceType is the type of instance to create. Example: m4.xlarge",
- "type": "string",
- "default": ""
- },
- "keyName": {
- "description": "KeyName is the name of the KeyPair to use for SSH",
- "type": "string"
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "loadBalancers": {
- "description": "LoadBalancers is the set of load balancers to which the new instance should be added once it is created.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.LoadBalancerReference"
- }
- },
"metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "metadataServiceOptions": {
- "description": "MetadataServiceOptions allows users to configure instance metadata service interaction options. If nothing specified, default AWS IMDS settings will be applied. https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_InstanceMetadataOptionsRequest.html",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.MetadataServiceOptions"
- },
- "networkInterfaceType": {
- "description": "NetworkInterfaceType specifies the type of network interface to be used for the primary network interface. Valid values are \"ENA\", \"EFA\", and omitted, which means no opinion and the platform chooses a good default which may change over time. The current default value is \"ENA\". Please visit https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html to learn more about the AWS Elastic Fabric Adapter interface option.",
- "type": "string"
- },
- "placement": {
- "description": "Placement specifies where to create the instance in AWS",
+ "spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.Placement"
- },
- "placementGroupName": {
- "description": "PlacementGroupName specifies the name of the placement group in which to launch the instance. The placement group must already be created and may use any placement strategy. When omitted, no placement group is used when creating the EC2 instance.",
- "type": "string"
- },
- "placementGroupPartition": {
- "description": "placementGroupPartition is the partition number within the placement group in which to launch the instance. This must be an integer value between 1 and 7. It is only valid if the placement group, referred in `PlacementGroupName` was created with strategy set to partition.",
- "type": "integer",
- "format": "int32"
- },
- "publicIp": {
- "description": "PublicIP specifies whether the instance should get a public IP. If not present, it should use the default of its subnet.",
- "type": "boolean"
- },
- "securityGroups": {
- "description": "SecurityGroups is an array of references to security groups that should be applied to the instance.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.AWSResourceReference"
- }
- },
- "spotMarketOptions": {
- "description": "SpotMarketOptions allows users to configure instances to be run using AWS Spot instances.",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.SpotMarketOptions"
+ "$ref": "#/definitions/io.openshift.machine.v1.ControlPlaneMachineSetSpec"
},
- "subnet": {
- "description": "Subnet is a reference to the subnet to use for this instance",
+ "status": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.AWSResourceReference"
- },
- "tags": {
- "description": "Tags is the set of tags to add to apply to an instance, in addition to the ones added by default by the actuator. These tags are additive. The actuator will ensure these tags are present, but will not remove any other tags that may exist on the instance.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.TagSpecification"
- }
- },
- "userDataSecret": {
- "description": "UserDataSecret contains a local reference to a secret that contains the UserData to apply to the instance",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "$ref": "#/definitions/io.openshift.machine.v1.ControlPlaneMachineSetStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "AWSMachineProviderConfig",
+ "Version": "v1",
+ "Kind": "ControlPlaneMachineSet",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.AWSMachineProviderConfigList": {
- "description": "AWSMachineProviderConfigList contains a list of AWSMachineProviderConfig Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1.ControlPlaneMachineSetList": {
+ "description": "ControlPlaneMachineSetList contains a list of ControlPlaneMachineSet Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"items"
@@ -91885,7 +92425,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.AWSMachineProviderConfig"
+ "$ref": "#/definitions/io.openshift.machine.v1.ControlPlaneMachineSet"
}
},
"kind": {
@@ -91893,6 +92433,7 @@
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
@@ -91900,444 +92441,369 @@
"x-fabric8-info": {
"Type": "list",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "AWSMachineProviderConfigList",
+ "Version": "v1",
+ "Kind": "ControlPlaneMachineSetList",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.AWSMachineProviderStatus": {
- "description": "AWSMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains AWS-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1.ControlPlaneMachineSetSpec": {
+ "description": "ControlPlaneMachineSet represents the configuration of the ControlPlaneMachineSet.",
"type": "object",
+ "required": [
+ "replicas",
+ "selector",
+ "template"
+ ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "replicas": {
+ "description": "Replicas defines how many Control Plane Machines should be created by this ControlPlaneMachineSet. This field is immutable and cannot be changed after cluster installation. The ControlPlaneMachineSet only operates with 3 or 5 node control planes, 3 and 5 are the only valid values for this field.",
+ "type": "integer",
+ "format": "int32"
},
- "conditions": {
- "description": "Conditions is a set of conditions associated with the Machine to indicate errors or other status",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- }
+ "selector": {
+ "description": "Label selector for Machines. Existing Machines selected by this selector will be the ones affected by this ControlPlaneMachineSet. It must match the template's labels. This field is considered immutable after creation of the resource.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
},
- "instanceId": {
- "description": "InstanceID is the instance ID of the machine created in AWS",
- "type": "string"
+ "state": {
+ "description": "State defines whether the ControlPlaneMachineSet is Active or Inactive. When Inactive, the ControlPlaneMachineSet will not take any action on the state of the Machines within the cluster. When Active, the ControlPlaneMachineSet will reconcile the Machines and will update the Machines as necessary. Once Active, a ControlPlaneMachineSet cannot be made Inactive. To prevent further action please remove the ControlPlaneMachineSet.",
+ "type": "string",
+ "default": "Inactive"
},
- "instanceState": {
- "description": "InstanceState is the state of the AWS instance for this machine",
- "type": "string"
+ "strategy": {
+ "description": "Strategy defines how the ControlPlaneMachineSet will update Machines when it detects a change to the ProviderSpec.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.ControlPlaneMachineSetStrategy"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "template": {
+ "description": "Template describes the Control Plane Machines that will be created by this ControlPlaneMachineSet.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.ControlPlaneMachineSetTemplate"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "AWSMachineProviderStatus",
+ "Version": "v1",
+ "Kind": "ControlPlaneMachineSetSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.AWSResourceReference": {
- "description": "AWSResourceReference is a reference to a specific AWS resource by ID, ARN, or filters. Only one of ID, ARN or Filters may be specified. Specifying more than one will result in a validation error.",
+ "io.openshift.machine.v1.ControlPlaneMachineSetStatus": {
+ "description": "ControlPlaneMachineSetStatus represents the status of the ControlPlaneMachineSet CRD.",
"type": "object",
"properties": {
- "arn": {
- "description": "ARN of resource",
- "type": "string"
- },
- "filters": {
- "description": "Filters is a set of filters used to identify a resource",
+ "conditions": {
+ "description": "Conditions represents the observations of the ControlPlaneMachineSet's current state. Known .status.conditions.type are: Available, Degraded and Progressing.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.Filter"
- }
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "id": {
- "description": "ID of resource",
- "type": "string"
+ "observedGeneration": {
+ "description": "ObservedGeneration is the most recent generation observed for this ControlPlaneMachineSet. It corresponds to the ControlPlaneMachineSets's generation, which is updated on mutation by the API Server.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "readyReplicas": {
+ "description": "ReadyReplicas is the number of Control Plane Machines created by the ControlPlaneMachineSet controller which are ready. Note that this value may be higher than the desired number of replicas while rolling updates are in-progress.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "replicas": {
+ "description": "Replicas is the number of Control Plane Machines created by the ControlPlaneMachineSet controller. Note that during update operations this value may differ from the desired replica count.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "unavailableReplicas": {
+ "description": "UnavailableReplicas is the number of Control Plane Machines that are still required before the ControlPlaneMachineSet reaches the desired available capacity. When this value is non-zero, the number of ReadyReplicas is less than the desired Replicas.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "updatedReplicas": {
+ "description": "UpdatedReplicas is the number of non-terminated Control Plane Machines created by the ControlPlaneMachineSet controller that have the desired provider spec and are ready. This value is set to 0 when a change is detected to the desired spec. When the update strategy is RollingUpdate, this will also coincide with starting the process of updating the Machines. When the update strategy is OnDelete, this value will remain at 0 until a user deletes an existing replica and its replacement has become ready.",
+ "type": "integer",
+ "format": "int32"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "AWSResourceReference",
+ "Version": "v1",
+ "Kind": "ControlPlaneMachineSetStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.AddressesFromPool": {
- "description": "AddressesFromPool is an IPAddressPool that will be used to create IPAddressClaims for fulfillment by an external controller.",
+ "io.openshift.machine.v1.ControlPlaneMachineSetStrategy": {
+ "description": "ControlPlaneMachineSetStrategy defines the strategy for applying updates to the Control Plane Machines managed by the ControlPlaneMachineSet.",
"type": "object",
- "required": [
- "group",
- "resource",
- "name"
- ],
"properties": {
- "group": {
- "description": "group of the IP address pool type known to an external IPAM controller. This should be a fully qualified domain name, for example, externalipam.controller.io.",
- "type": "string",
- "default": ""
- },
- "name": {
- "description": "name of an IP address pool, for example, pool-config-1.",
- "type": "string",
- "default": ""
- },
- "resource": {
- "description": "resource of the IP address pool type known to an external IPAM controller. It is normally the plural form of the resource kind in lowercase, for example, ippools.",
+ "type": {
+ "description": "Type defines the type of update strategy that should be used when updating Machines owned by the ControlPlaneMachineSet. Valid values are \"RollingUpdate\" and \"OnDelete\". The current default value is \"RollingUpdate\".",
"type": "string",
- "default": ""
+ "default": "RollingUpdate"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "AddressesFromPool",
+ "Version": "v1",
+ "Kind": "ControlPlaneMachineSetStrategy",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.AzureBootDiagnostics": {
- "description": "AzureBootDiagnostics configures the boot diagnostics settings for the virtual machine. This allows you to configure capturing serial output from the virtual machine on boot. This is useful for debugging software based launch issues.",
+ "io.openshift.machine.v1.ControlPlaneMachineSetTemplate": {
+ "description": "ControlPlaneMachineSetTemplate is a template used by the ControlPlaneMachineSet to create the Machines that it will manage in the future.",
"type": "object",
- "required": [
- "storageAccountType"
- ],
"properties": {
- "customerManaged": {
- "description": "CustomerManaged provides reference to the customer manager storage account.",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.AzureCustomerManagedBootDiagnostics"
+ "machineType": {
+ "description": "MachineType determines the type of Machines that should be managed by the ControlPlaneMachineSet. Currently, the only valid value is machines_v1beta1_machine_openshift_io.",
+ "type": "string"
},
- "storageAccountType": {
- "description": "StorageAccountType determines if the storage account for storing the diagnostics data should be provisioned by Azure (AzureManaged) or by the customer (CustomerManaged).",
- "type": "string",
- "default": ""
+ "machines_v1beta1_machine_openshift_io": {
+ "description": "OpenShiftMachineV1Beta1Machine defines the template for creating Machines from the v1beta1.machine.openshift.io API group.",
+ "$ref": "#/definitions/io.openshift.machine.v1.OpenShiftMachineV1Beta1MachineTemplate"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "AzureBootDiagnostics",
+ "Version": "v1",
+ "Kind": "ControlPlaneMachineSetTemplate",
"Scope": "Namespaced"
},
"x-kubernetes-unions": [
{
- "discriminator": "storageAccountType",
+ "discriminator": "machineType",
"fields-to-discriminateBy": {
- "customerManaged": "CustomerManaged"
+ "machines_v1beta1_machine_openshift_io": "OpenShiftMachineV1Beta1Machine"
}
}
]
},
- "io.openshift.machine.v1beta1.AzureCustomerManagedBootDiagnostics": {
- "description": "AzureCustomerManagedBootDiagnostics provides reference to a customer managed storage account.",
+ "io.openshift.machine.v1.ControlPlaneMachineSetTemplateObjectMeta": {
+ "description": "ControlPlaneMachineSetTemplateObjectMeta is a subset of the metav1.ObjectMeta struct. It allows users to specify labels and annotations that will be copied onto Machines created from this template.",
"type": "object",
"required": [
- "storageAccountURI"
+ "labels"
],
"properties": {
- "storageAccountURI": {
- "description": "StorageAccountURI is the URI of the customer managed storage account. The URI typically will be `https://\u003cmystorageaccountname\u003e.blob.core.windows.net/` but may differ if you are using Azure DNS zone endpoints. You can find the correct endpoint by looking for the Blob Primary Endpoint in the endpoints tab in the Azure console.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "AzureCustomerManagedBootDiagnostics",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.AzureDiagnostics": {
- "description": "AzureDiagnostics is used to configure the diagnostic settings of the virtual machine.",
- "type": "object",
- "properties": {
- "boot": {
- "description": "AzureBootDiagnostics configures the boot diagnostics settings for the virtual machine. This allows you to configure capturing serial output from the virtual machine on boot. This is useful for debugging software based launch issues.",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.AzureBootDiagnostics"
+ "annotations": {
+ "description": "Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "labels": {
+ "description": "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels. This field must contain both the 'machine.openshift.io/cluster-api-machine-role' and 'machine.openshift.io/cluster-api-machine-type' labels, both with a value of 'master'. It must also contain a label with the key 'machine.openshift.io/cluster-api-cluster'.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "AzureDiagnostics",
+ "Version": "v1",
+ "Kind": "ControlPlaneMachineSetTemplateObjectMeta",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.AzureMachineProviderSpec": {
- "description": "AzureMachineProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an Azure virtual machine. It is used by the Azure machine actuator to create a single Machine. Required parameters such as location that are not specified by this configuration, will be defaulted by the actuator. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1.DataDiskProperties": {
+ "description": "DataDisk contains the information regarding the datadisk attached to an instance",
"type": "object",
- "required": [
- "image",
- "osDisk",
- "publicIP",
- "subnet"
- ],
"properties": {
- "acceleratedNetworking": {
- "description": "AcceleratedNetworking enables or disables Azure accelerated networking feature. Set to false by default. If true, then this will depend on whether the requested VMSize is supported. If set to true with an unsupported VMSize, Azure will return an error.",
- "type": "boolean"
- },
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "applicationSecurityGroups": {
- "description": "Application Security Groups that need to be attached to the machine's interface. No application security groups will be attached if zero-length.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "availabilitySet": {
- "description": "AvailabilitySet specifies the availability set to use for this instance. Availability set should be precreated, before using this field.",
- "type": "string"
- },
- "capacityReservationGroupID": {
- "description": "capacityReservationGroupID specifies the capacity reservation group resource id that should be used for allocating the virtual machine. The field size should be greater than 0 and the field input must start with '/'. The input for capacityReservationGroupID must be similar to '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/capacityReservationGroups/{capacityReservationGroupName}'. The keys which are used should be among 'subscriptions', 'providers' and 'resourcegroups' followed by valid ID or names respectively.",
- "type": "string"
- },
- "credentialsSecret": {
- "description": "CredentialsSecret is a reference to the secret with Azure credentials.",
- "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
- },
- "dataDisks": {
- "description": "DataDisk specifies the parameters that are used to add one or more data disks to the machine.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.DataDisk"
- }
- },
- "diagnostics": {
- "description": "Diagnostics configures the diagnostics settings for the virtual machine. This allows you to configure boot diagnostics such as capturing serial output from the virtual machine on boot. This is useful for debugging software based launch issues.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.AzureDiagnostics"
- },
- "image": {
- "description": "Image is the OS image to use to create the instance.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.Image"
+ "Category": {
+ "description": "Category describes the type of data disk N. Valid values: cloud_efficiency: ultra disk cloud_ssd: standard SSD cloud_essd: ESSD cloud: basic disk Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently for non-I/O optimized instances of retired instance types, the default is `cloud`. Currently for other instances, the default is `cloud_efficiency`.",
+ "type": "string",
+ "default": ""
},
- "internalLoadBalancer": {
- "description": "InternalLoadBalancerName to use for this instance",
- "type": "string"
+ "DiskEncryption": {
+ "description": "DiskEncryption specifies whether to encrypt data disk N.\n\nEmpty value means the platform chooses a default, which is subject to change over time. Currently the default is `disabled`.",
+ "type": "string",
+ "default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "DiskPreservation": {
+ "description": "DiskPreservation specifies whether to release data disk N along with the instance. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `DeleteWithInstance`",
+ "type": "string",
+ "default": ""
},
- "location": {
- "description": "Location is the region to use to create the instance",
- "type": "string"
+ "KMSKeyID": {
+ "description": "KMSKeyID is the ID of the Key Management Service (KMS) key to be used by data disk N. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `\"\"` which is interpreted as do not use KMSKey encryption.",
+ "type": "string",
+ "default": ""
},
- "managedIdentity": {
- "description": "ManagedIdentity to set managed identity name",
- "type": "string"
+ "Name": {
+ "description": "Name is the name of data disk N. If the name is specified the name must be 2 to 128 characters in length. It must start with a letter and cannot start with http:// or https://. It can contain letters, digits, colons (:), underscores (_), and hyphens (-).\n\nEmpty value means the platform chooses a default, which is subject to change over time. Currently the default is `\"\"`.",
+ "type": "string",
+ "default": ""
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "PerformanceLevel": {
+ "description": "PerformanceLevel is the performance level of the ESSD used as as data disk N. The N value must be the same as that in DataDisk.N.Category when DataDisk.N.Category is set to cloud_essd. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is `PL1`. Valid values:\n\nPL0: A single ESSD can deliver up to 10,000 random read/write IOPS. PL1: A single ESSD can deliver up to 50,000 random read/write IOPS. PL2: A single ESSD can deliver up to 100,000 random read/write IOPS. PL3: A single ESSD can deliver up to 1,000,000 random read/write IOPS. For more information about ESSD performance levels, see ESSDs.",
+ "type": "string",
+ "default": ""
},
- "natRule": {
- "description": "NatRule to set inbound NAT rule of the load balancer",
+ "Size": {
+ "description": "Size of the data disk N. Valid values of N: 1 to 16. Unit: GiB. Valid values:\n\nValid values when DataDisk.N.Category is set to cloud_efficiency: 20 to 32768 Valid values when DataDisk.N.Category is set to cloud_ssd: 20 to 32768 Valid values when DataDisk.N.Category is set to cloud_essd: 20 to 32768 Valid values when DataDisk.N.Category is set to cloud: 5 to 2000 The value of this parameter must be greater than or equal to the size of the snapshot specified by the SnapshotID parameter.",
"type": "integer",
- "format": "int64"
- },
- "networkResourceGroup": {
- "description": "NetworkResourceGroup is the resource group for the virtual machine's network",
- "type": "string"
- },
- "osDisk": {
- "description": "OSDisk represents the parameters for creating the OS disk.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.OSDisk"
- },
- "publicIP": {
- "description": "PublicIP if true a public IP will be used",
- "type": "boolean",
- "default": false
- },
- "publicLoadBalancer": {
- "description": "PublicLoadBalancer to use for this instance",
- "type": "string"
- },
- "resourceGroup": {
- "description": "ResourceGroup is the resource group for the virtual machine",
- "type": "string"
- },
- "securityGroup": {
- "description": "Network Security Group that needs to be attached to the machine's interface. No security group will be attached if empty.",
- "type": "string"
- },
- "securityProfile": {
- "description": "SecurityProfile specifies the Security profile settings for a virtual machine.",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.SecurityProfile"
- },
- "spotVMOptions": {
- "description": "SpotVMOptions allows the ability to specify the Machine should use a Spot VM",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.SpotVMOptions"
- },
- "sshPublicKey": {
- "description": "SSHPublicKey is the public key to use to SSH to the virtual machine.",
- "type": "string"
+ "format": "int64",
+ "default": 0
},
- "subnet": {
- "description": "Subnet to use for this instance",
+ "SnapshotID": {
+ "description": "SnapshotID is the ID of the snapshot used to create data disk N. Valid values of N: 1 to 16.\n\nWhen the DataDisk.N.SnapshotID parameter is specified, the DataDisk.N.Size parameter is ignored. The data disk is created based on the size of the specified snapshot. Use snapshots created after July 15, 2013. Otherwise, an error is returned and your request is rejected.",
"type": "string",
"default": ""
- },
- "tags": {
- "description": "Tags is a list of tags to apply to the machine.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "ultraSSDCapability": {
- "description": "UltraSSDCapability enables or disables Azure UltraSSD capability for a virtual machine. This can be used to allow/disallow binding of Azure UltraSSD to the Machine both as Data Disks or via Persistent Volumes. This Azure feature is subject to a specific scope and certain limitations. More informations on this can be found in the official Azure documentation for Ultra Disks: (https://docs.microsoft.com/en-us/azure/virtual-machines/disks-enable-ultra-ssd?tabs=azure-portal#ga-scope-and-limitations).\n\nWhen omitted, if at least one Data Disk of type UltraSSD is specified, the platform will automatically enable the capability. If a Perisistent Volume backed by an UltraSSD is bound to a Pod on the Machine, when this field is ommitted, the platform will *not* automatically enable the capability (unless already enabled by the presence of an UltraSSD as Data Disk). This may manifest in the Pod being stuck in `ContainerCreating` phase. This defaulting behaviour may be subject to change in future.\n\nWhen set to \"Enabled\", if the capability is available for the Machine based on the scope and limitations described above, the capability will be set on the Machine. This will thus allow UltraSSD both as Data Disks and Persistent Volumes. If set to \"Enabled\" when the capability can't be available due to scope and limitations, the Machine will go into \"Failed\" state.\n\nWhen set to \"Disabled\", UltraSSDs will not be allowed either as Data Disks nor as Persistent Volumes. In this case if any UltraSSDs are specified as Data Disks on a Machine, the Machine will go into a \"Failed\" state. If instead any UltraSSDs are backing the volumes (via Persistent Volumes) of any Pods scheduled on a Node which is backed by the Machine, the Pod may get stuck in `ContainerCreating` phase.",
- "type": "string"
- },
- "userDataSecret": {
- "description": "UserDataSecret contains a local reference to a secret that contains the UserData to apply to the instance",
- "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
- },
- "vmSize": {
- "description": "VMSize is the size of the VM to create.",
- "type": "string"
- },
- "vnet": {
- "description": "Vnet to set virtual network name",
- "type": "string"
- },
- "zone": {
- "description": "Availability Zone for the virtual machine. If nil, the virtual machine should be deployed to no zone",
- "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "AzureMachineProviderSpec",
+ "Version": "v1",
+ "Kind": "DataDiskProperties",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.AzureMachineProviderStatus": {
- "description": "AzureMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains Azure-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1.FailureDomains": {
+ "description": "FailureDomain represents the different configurations required to spread Machines across failure domains on different platforms.",
"type": "object",
+ "required": [
+ "platform"
+ ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "aws": {
+ "description": "AWS configures failure domain information for the AWS platform.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.AWSFailureDomain"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "conditions": {
- "description": "Conditions is a set of conditions associated with the Machine to indicate errors or other status.",
+ "azure": {
+ "description": "Azure configures failure domain information for the Azure platform.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- }
+ "$ref": "#/definitions/io.openshift.machine.v1.AzureFailureDomain"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "gcp": {
+ "description": "GCP configures failure domain information for the GCP platform.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.GCPFailureDomain"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "nutanix": {
+ "description": "nutanix configures failure domain information for the Nutanix platform.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.NutanixFailureDomainReference"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "vmId": {
- "description": "VMID is the ID of the virtual machine created in Azure.",
- "type": "string"
+ "openstack": {
+ "description": "OpenStack configures failure domain information for the OpenStack platform.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.OpenStackFailureDomain"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "vmState": {
- "description": "VMState is the provisioning state of the Azure virtual machine.",
- "type": "string"
+ "platform": {
+ "description": "Platform identifies the platform for which the FailureDomain represents. Currently supported values are AWS, Azure, GCP, OpenStack, VSphere and Nutanix.",
+ "type": "string",
+ "default": ""
+ },
+ "vsphere": {
+ "description": "vsphere configures failure domain information for the VSphere platform.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.VSphereFailureDomain"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "AzureMachineProviderStatus",
+ "Version": "v1",
+ "Kind": "FailureDomains",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "platform",
+ "fields-to-discriminateBy": {
+ "aws": "AWS",
+ "azure": "Azure",
+ "gcp": "GCP",
+ "nutanix": "Nutanix",
+ "openstack": "OpenStack",
+ "vsphere": "VSphere"
+ }
+ }
+ ]
},
- "io.openshift.machine.v1beta1.BlockDeviceMappingSpec": {
- "description": "BlockDeviceMappingSpec describes a block device mapping",
+ "io.openshift.machine.v1.GCPFailureDomain": {
+ "description": "GCPFailureDomain configures failure domain information for the GCP platform",
"type": "object",
+ "required": [
+ "zone"
+ ],
"properties": {
- "deviceName": {
- "description": "The device name exposed to the machine (for example, /dev/sdh or xvdh).",
- "type": "string"
- },
- "ebs": {
- "description": "Parameters used to automatically set up EBS volumes when the machine is launched.",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.EBSBlockDeviceSpec"
- },
- "noDevice": {
- "description": "Suppresses the specified device included in the block device mapping of the AMI.",
- "type": "string"
- },
- "virtualName": {
- "description": "The virtual device name (ephemeralN). Machine store volumes are numbered starting from 0. An machine type with 2 available machine store volumes can specify mappings for ephemeral0 and ephemeral1.The number of available machine store volumes depends on the machine type. After you connect to the machine, you must mount the volume.\n\nConstraints: For M3 machines, you must specify machine store volumes in the block device mapping for the machine. When you launch an M3 machine, we ignore any machine store volumes specified in the block device mapping for the AMI.",
- "type": "string"
+ "zone": {
+ "description": "Zone is the zone in which the GCP machine provider will create the VM.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "BlockDeviceMappingSpec",
+ "Version": "v1",
+ "Kind": "GCPFailureDomain",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.Condition": {
- "description": "Condition defines an observation of a Machine API resource operational state.",
+ "io.openshift.machine.v1.LoadBalancerReference": {
+ "description": "LoadBalancerReference is a reference to a load balancer on IBM Cloud virtual private cloud(VPC).",
"type": "object",
"required": [
- "type",
- "status",
- "lastTransitionTime"
+ "name",
+ "type"
],
"properties": {
- "lastTransitionTime": {
- "description": "Last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "A human readable message indicating details about the transition. This field may be empty.",
- "type": "string"
- },
- "reason": {
- "description": "The reason for the condition's last transition in CamelCase. The specific API may choose whether or not this field is considered a guaranteed API. This field may not be empty.",
- "type": "string"
- },
- "severity": {
- "description": "Severity provides an explicit classification of Reason code, so the users or machines can immediately understand the current situation and act accordingly. The Severity field MUST be set only when Status=False.",
- "type": "string"
- },
- "status": {
- "description": "Status of the condition, one of True, False, Unknown.",
+ "name": {
+ "description": "name of the LoadBalancer in IBM Cloud VPC. The name should be between 1 and 63 characters long and may consist of lowercase alphanumeric characters and hyphens only. The value must not end with a hyphen. It is a reference to existing LoadBalancer created by openshift installer component.",
"type": "string",
"default": ""
},
"type": {
- "description": "Type of condition in CamelCase or in foo.example.com/CamelCase. Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important.",
+ "description": "type of the LoadBalancer service supported by IBM Cloud VPC. Currently, only Application LoadBalancer is supported. More details about Application LoadBalancer https://cloud.ibm.com/docs/vpc?topic=vpc-load-balancers-about\u0026interface=ui Supported values are Application.",
"type": "string",
"default": ""
}
@@ -92345,65 +92811,26 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "Condition",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.ConfidentialVM": {
- "description": "ConfidentialVM defines the UEFI settings for the virtual machine.",
- "type": "object",
- "properties": {
- "uefiSettings": {
- "description": "uefiSettings specifies the security settings like secure boot and vTPM used while creating the virtual machine.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.UEFISettings"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "ConfidentialVM",
+ "Version": "v1",
+ "Kind": "LoadBalancerReference",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.DataDisk": {
- "description": "DataDisk specifies the parameters that are used to add one or more data disks to the machine. A Data Disk is a managed disk that's attached to a virtual machine to store application data. It differs from an OS Disk as it doesn't come with a pre-installed OS, and it cannot contain the boot volume. It is registered as SCSI drive and labeled with the chosen `lun`. e.g. for `lun: 0` the raw disk device will be available at `/dev/disk/azure/scsi1/lun0`.\n\nAs the Data Disk disk device is attached raw to the virtual machine, it will need to be partitioned, formatted with a filesystem and mounted, in order for it to be usable. This can be done by creating a custom userdata Secret with custom Ignition configuration to achieve the desired initialization. At this stage the previously defined `lun` is to be used as the \"device\" key for referencing the raw disk device to be initialized. Once the custom userdata Secret has been created, it can be referenced in the Machine's `.providerSpec.userDataSecret`. For further guidance and examples, please refer to the official OpenShift docs.",
+ "io.openshift.machine.v1.NutanixCategory": {
+ "description": "NutanixCategory identifies a pair of prism category key and value",
"type": "object",
"required": [
- "nameSuffix",
- "diskSizeGB",
- "deletionPolicy"
+ "key",
+ "value"
],
"properties": {
- "cachingType": {
- "description": "CachingType specifies the caching requirements. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is CachingTypeNone.",
- "type": "string"
- },
- "deletionPolicy": {
- "description": "DeletionPolicy specifies the data disk deletion policy upon Machine deletion. Possible values are \"Delete\",\"Detach\". When \"Delete\" is used the data disk is deleted when the Machine is deleted. When \"Detach\" is used the data disk is detached from the Machine and retained when the Machine is deleted.",
+ "key": {
+ "description": "key is the prism category key name",
"type": "string",
"default": ""
},
- "diskSizeGB": {
- "description": "DiskSizeGB is the size in GB to assign to the data disk.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "lun": {
- "description": "Lun Specifies the logical unit number of the data disk. This value is used to identify data disks within the VM and therefore must be unique for each data disk attached to a VM. This value is also needed for referencing the data disks devices within userdata to perform disk initialization through Ignition (e.g. partition/format/mount). The value must be between 0 and 63.",
- "type": "integer",
- "format": "int32"
- },
- "managedDisk": {
- "description": "ManagedDisk specifies the Managed Disk parameters for the data disk. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is a ManagedDisk with with storageAccountType: \"Premium_LRS\" and diskEncryptionSet.id: \"Default\".",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.DataDiskManagedDiskParameters"
- },
- "nameSuffix": {
- "description": "NameSuffix is the suffix to be appended to the machine name to generate the disk name. Each disk name will be in format \u003cmachineName\u003e_\u003cnameSuffix\u003e. NameSuffix name must start and finish with an alphanumeric character and can only contain letters, numbers, underscores, periods or hyphens. The overall disk name must not exceed 80 chars in length.",
+ "value": {
+ "description": "value is the prism category value associated with the key",
"type": "string",
"default": ""
}
@@ -92411,24 +92838,20 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "DataDisk",
+ "Version": "v1",
+ "Kind": "NutanixCategory",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.DataDiskManagedDiskParameters": {
- "description": "DataDiskManagedDiskParameters is the parameters of a DataDisk managed disk.",
+ "io.openshift.machine.v1.NutanixFailureDomainReference": {
+ "description": "NutanixFailureDomainReference refers to the failure domain of the Nutanix platform.",
"type": "object",
"required": [
- "storageAccountType"
+ "name"
],
"properties": {
- "diskEncryptionSet": {
- "description": "DiskEncryptionSet is the disk encryption set properties. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is a DiskEncryptionSet with id: \"Default\".",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.DiskEncryptionSetParameters"
- },
- "storageAccountType": {
- "description": "StorageAccountType is the storage account type to use. Possible values include \"Standard_LRS\", \"Premium_LRS\" and \"UltraSSD_LRS\".",
+ "name": {
+ "description": "name of the failure domain in which the nutanix machine provider will create the VM. Failure domains are defined in a cluster's config.openshift.io/Infrastructure resource.",
"type": "string",
"default": ""
}
@@ -92436,210 +92859,330 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "DataDiskManagedDiskParameters",
+ "Version": "v1",
+ "Kind": "NutanixFailureDomainReference",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.DiskEncryptionSetParameters": {
- "description": "DiskEncryptionSetParameters is the disk encryption set properties",
+ "io.openshift.machine.v1.NutanixGPU": {
+ "description": "NutanixGPU holds the identity of a Nutanix GPU resource in the Prism Central",
"type": "object",
+ "required": [
+ "type"
+ ],
"properties": {
- "id": {
- "description": "ID is the disk encryption set ID Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is: \"Default\".",
+ "deviceID": {
+ "description": "deviceID is the GPU device ID with the integer value.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "name": {
+ "description": "name is the GPU device name",
"type": "string"
+ },
+ "type": {
+ "description": "type is the identifier type of the GPU device. Valid values are Name and DeviceID.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "DiskEncryptionSetParameters",
+ "Version": "v1",
+ "Kind": "NutanixGPU",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "deviceID": "DeviceID",
+ "name": "Name"
+ }
+ }
+ ]
},
- "io.openshift.machine.v1beta1.DiskSettings": {
- "description": "DiskSettings describe ephemeral disk settings for the os disk.",
+ "io.openshift.machine.v1.NutanixMachineProviderConfig": {
+ "description": "NutanixMachineProviderConfig is the Schema for the nutanixmachineproviderconfigs API Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "cluster",
+ "image",
+ "subnets",
+ "vcpusPerSocket",
+ "vcpuSockets",
+ "memorySize",
+ "systemDiskSize",
+ "credentialsSecret"
+ ],
"properties": {
- "ephemeralStorageLocation": {
- "description": "EphemeralStorageLocation enables ephemeral OS when set to 'Local'. Possible values include: 'Local'. See https://docs.microsoft.com/en-us/azure/virtual-machines/ephemeral-os-disks for full details. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is that disks are saved to remote Azure storage.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "DiskSettings",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.EBSBlockDeviceSpec": {
- "description": "EBSBlockDeviceSpec describes a block device for an EBS volume. https://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/EbsBlockDevice",
- "type": "object",
- "properties": {
- "deleteOnTermination": {
- "description": "Indicates whether the EBS volume is deleted on machine termination.",
- "type": "boolean"
},
- "encrypted": {
- "description": "Indicates whether the EBS volume is encrypted. Encrypted Amazon EBS volumes may only be attached to machines that support Amazon EBS encryption.",
- "type": "boolean"
+ "bootType": {
+ "description": "bootType indicates the boot type (Legacy, UEFI or SecureBoot) the Machine's VM uses to boot. If this field is empty or omitted, the VM will use the default boot type \"Legacy\" to boot. \"SecureBoot\" depends on \"UEFI\" boot, i.e., enabling \"SecureBoot\" means that \"UEFI\" boot is also enabled.",
+ "type": "string",
+ "default": ""
},
- "iops": {
- "description": "The number of I/O operations per second (IOPS) that the volume supports. For io1, this represents the number of IOPS that are provisioned for the volume. For gp2, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. For more information about General Purpose SSD baseline performance, I/O credits, and bursting, see Amazon EBS Volume Types (http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html) in the Amazon Elastic Compute Cloud User Guide.\n\nMinimal and maximal IOPS for io1 and gp2 are constrained. Please, check https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html for precise boundaries for individual volumes.\n\nCondition: This parameter is required for requests to create io1 volumes; it is not used in requests to create gp2, st1, sc1, or standard volumes.",
- "type": "integer",
- "format": "int64"
+ "categories": {
+ "description": "categories optionally adds one or more prism categories (each with key and value) for the Machine's VM to associate with. All the category key and value pairs specified must already exist in the prism central.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.NutanixCategory"
+ },
+ "x-kubernetes-list-map-keys": [
+ "key"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "kmsKey": {
- "description": "Indicates the KMS key that should be used to encrypt the Amazon EBS volume.",
+ "cluster": {
+ "description": "cluster is to identify the cluster (the Prism Element under management of the Prism Central), in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.",
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.AWSResourceReference"
+ "$ref": "#/definitions/io.openshift.machine.v1.NutanixResourceIdentifier"
},
- "volumeSize": {
- "description": "The size of the volume, in GiB.\n\nConstraints: 1-16384 for General Purpose SSD (gp2), 4-16384 for Provisioned IOPS SSD (io1), 500-16384 for Throughput Optimized HDD (st1), 500-16384 for Cold HDD (sc1), and 1-1024 for Magnetic (standard) volumes. If you specify a snapshot, the volume size must be equal to or larger than the snapshot size.\n\nDefault: If you're creating the volume from a snapshot and don't specify a volume size, the default is the snapshot size.",
- "type": "integer",
- "format": "int64"
+ "credentialsSecret": {
+ "description": "credentialsSecret is a local reference to a secret that contains the credentials data to access Nutanix PC client",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
},
- "volumeType": {
- "description": "The volume type: gp2, io1, st1, sc1, or standard. Default: standard",
+ "dataDisks": {
+ "description": "dataDisks holds information of the data disks to attach to the Machine's VM",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.NutanixVMDisk"
+ },
+ "x-kubernetes-list-type": "set"
+ },
+ "failureDomain": {
+ "description": "failureDomain refers to the name of the FailureDomain with which this Machine is associated. If this is configured, the Nutanix machine controller will use the prism_central endpoint and credentials defined in the referenced FailureDomain to communicate to the prism_central. It will also verify that the 'cluster' and subnets' configuration in the NutanixMachineProviderConfig is consistent with that in the referenced failureDomain.",
+ "$ref": "#/definitions/io.openshift.machine.v1.NutanixFailureDomainReference"
+ },
+ "gpus": {
+ "description": "gpus is a list of GPU devices to attach to the machine's VM. The GPU devices should already exist in Prism Central and associated with one of the Prism Element's hosts and available for the VM to attach (in \"UNUSED\" status).",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.NutanixGPU"
+ },
+ "x-kubernetes-list-type": "set"
+ },
+ "image": {
+ "description": "image is to identify the rhcos image uploaded to the Prism Central (PC) The image identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.NutanixResourceIdentifier"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "memorySize": {
+ "description": "memorySize is the memory size (in Quantity format) of the VM The minimum memorySize is 2Gi bytes",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "project": {
+ "description": "project optionally identifies a Prism project for the Machine's VM to associate with.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.NutanixResourceIdentifier"
+ },
+ "subnets": {
+ "description": "subnets holds a list of identifiers (one or more) of the cluster's network subnets for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.NutanixResourceIdentifier"
+ }
+ },
+ "systemDiskSize": {
+ "description": "systemDiskSize is size (in Quantity format) of the system disk of the VM The minimum systemDiskSize is 20Gi bytes",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
+ },
+ "userDataSecret": {
+ "description": "userDataSecret is a local reference to a secret that contains the UserData to apply to the VM",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "vcpuSockets": {
+ "description": "vcpuSockets is the number of vCPU sockets of the VM",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "vcpusPerSocket": {
+ "description": "vcpusPerSocket is the number of vCPUs per socket of the VM",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "EBSBlockDeviceSpec",
+ "Version": "v1",
+ "Kind": "NutanixMachineProviderConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.Filter": {
- "description": "Filter is a filter used to identify an AWS resource",
+ "io.openshift.machine.v1.NutanixMachineProviderStatus": {
+ "description": "NutanixMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains nutanix-specific status information. Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "name"
- ],
"properties": {
- "name": {
- "description": "Name of the filter. Filter names are case-sensitive.",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "values": {
- "description": "Values includes one or more filter values. Filter values are case-sensitive.",
+ "conditions": {
+ "description": "conditions is a set of conditions associated with the Machine to indicate errors or other status",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
}
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "vmUUID": {
+ "description": "vmUUID is the Machine associated VM's UUID The field is missing before the VM is created. Once the VM is created, the field is filled with the VM's UUID and it will not change. The vmUUID is used to find the VM when updating the Machine status, and to delete the VM when the Machine is deleted.",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "Filter",
+ "Version": "v1",
+ "Kind": "NutanixMachineProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.GCPDisk": {
- "description": "GCPDisk describes disks for GCP.",
+ "io.openshift.machine.v1.NutanixResourceIdentifier": {
+ "description": "NutanixResourceIdentifier holds the identity of a Nutanix PC resource (cluster, image, subnet, etc.)",
"type": "object",
"required": [
- "autoDelete",
- "boot",
- "sizeGb",
- "type",
- "image",
- "labels"
+ "type"
],
"properties": {
- "autoDelete": {
- "description": "AutoDelete indicates if the disk will be auto-deleted when the instance is deleted (default false).",
- "type": "boolean",
- "default": false
- },
- "boot": {
- "description": "Boot indicates if this is a boot disk (default false).",
- "type": "boolean",
- "default": false
- },
- "encryptionKey": {
- "description": "EncryptionKey is the customer-supplied encryption key of the disk.",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPEncryptionKeyReference"
+ "name": {
+ "description": "name is the resource name in the PC",
+ "type": "string"
},
- "image": {
- "description": "Image is the source image to create this disk.",
+ "type": {
+ "description": "Type is the identifier type to use for this resource.",
"type": "string",
"default": ""
},
- "labels": {
- "description": "Labels list of labels to apply to the disk.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
+ "uuid": {
+ "description": "uuid is the UUID of the resource in the PC.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1",
+ "Kind": "NutanixResourceIdentifier",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "name": "Name",
+ "uuid": "UUID"
}
- },
- "sizeGb": {
- "description": "SizeGB is the size of the disk (in GB).",
- "type": "integer",
- "format": "int64",
- "default": 0
- },
+ }
+ ]
+ },
+ "io.openshift.machine.v1.NutanixStorageResourceIdentifier": {
+ "description": "NutanixStorageResourceIdentifier holds the identity of a Nutanix storage resource (storage_container, etc.)",
+ "type": "object",
+ "required": [
+ "type"
+ ],
+ "properties": {
"type": {
- "description": "Type is the type of the disk (eg: pd-standard).",
+ "description": "type is the identifier type to use for this resource. The valid value is \"uuid\".",
"type": "string",
"default": ""
+ },
+ "uuid": {
+ "description": "uuid is the UUID of the storage resource in the PC.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "GCPDisk",
+ "Version": "v1",
+ "Kind": "NutanixStorageResourceIdentifier",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "uuid": "UUID"
+ }
+ }
+ ]
},
- "io.openshift.machine.v1beta1.GCPEncryptionKeyReference": {
- "description": "GCPEncryptionKeyReference describes the encryptionKey to use for a disk's encryption.",
+ "io.openshift.machine.v1.NutanixVMDisk": {
+ "description": "NutanixDataDisk specifies the VM data disk configuration parameters.",
"type": "object",
+ "required": [
+ "diskSize"
+ ],
"properties": {
- "kmsKey": {
- "description": "KMSKeyName is the reference KMS key, in the format",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPKMSKeyReference"
+ "dataSource": {
+ "description": "dataSource refers to a data source image for the VM disk.",
+ "$ref": "#/definitions/io.openshift.machine.v1.NutanixResourceIdentifier"
},
- "kmsKeyServiceAccount": {
- "description": "KMSKeyServiceAccount is the service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used. See https://cloud.google.com/compute/docs/access/service-accounts#compute_engine_service_account for details on the default service account.",
- "type": "string"
+ "deviceProperties": {
+ "description": "deviceProperties are the properties of the disk device.",
+ "$ref": "#/definitions/io.openshift.machine.v1.NutanixVMDiskDeviceProperties"
+ },
+ "diskSize": {
+ "description": "diskSize is size (in Quantity format) of the disk attached to the VM. See https://pkg.go.dev/k8s.io/apimachinery/pkg/api/resource#Format for the Quantity format and example documentation. The minimum diskSize is 1GB.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
+ },
+ "storageConfig": {
+ "description": "storageConfig are the storage configuration parameters of the VM disks.",
+ "$ref": "#/definitions/io.openshift.machine.v1.NutanixVMStorageConfig"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "GCPEncryptionKeyReference",
+ "Version": "v1",
+ "Kind": "NutanixVMDisk",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.GCPGPUConfig": {
- "description": "GCPGPUConfig describes type and count of GPUs attached to the instance on GCP.",
+ "io.openshift.machine.v1.NutanixVMDiskDeviceProperties": {
+ "description": "NutanixVMDiskDeviceProperties specifies the disk device properties.",
"type": "object",
"required": [
- "count",
- "type"
+ "deviceType"
],
"properties": {
- "count": {
- "description": "Count is the number of GPUs to be attached to an instance.",
+ "adapterType": {
+ "description": "adapterType is the adapter type of the disk address. If the deviceType is \"Disk\", the valid adapterType can be \"SCSI\", \"IDE\", \"PCI\", \"SATA\" or \"SPAPR\". If the deviceType is \"CDRom\", the valid adapterType can be \"IDE\" or \"SATA\".",
+ "type": "string"
+ },
+ "deviceIndex": {
+ "description": "deviceIndex is the index of the disk address. The valid values are non-negative integers, with the default value 0. For a Machine VM, the deviceIndex for the disks with the same deviceType.adapterType combination should start from 0 and increase consecutively afterwards. Note that for each Machine VM, the Disk.SCSI.0 and CDRom.IDE.0 are reserved to be used by the VM's system. So for dataDisks of Disk.SCSI and CDRom.IDE, the deviceIndex should start from 1.",
"type": "integer",
- "format": "int32",
- "default": 0
+ "format": "int32"
},
- "type": {
- "description": "Type is the type of GPU to be attached to an instance. Supported GPU types are: nvidia-tesla-k80, nvidia-tesla-p100, nvidia-tesla-v100, nvidia-tesla-p4, nvidia-tesla-t4",
+ "deviceType": {
+ "description": "deviceType specifies the disk device type. The valid values are \"Disk\" and \"CDRom\", and the default is \"Disk\".",
"type": "string",
"default": ""
}
@@ -92647,215 +93190,174 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "GCPGPUConfig",
+ "Version": "v1",
+ "Kind": "NutanixVMDiskDeviceProperties",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.GCPKMSKeyReference": {
- "description": "GCPKMSKeyReference gathers required fields for looking up a GCP KMS Key",
+ "io.openshift.machine.v1.NutanixVMStorageConfig": {
+ "description": "NutanixVMStorageConfig specifies the storage configuration parameters for VM disks.",
"type": "object",
"required": [
- "name",
- "keyRing",
- "location"
+ "diskMode"
],
"properties": {
- "keyRing": {
- "description": "KeyRing is the name of the KMS Key Ring which the KMS Key belongs to.",
+ "diskMode": {
+ "description": "diskMode specifies the disk mode. The valid values are Standard and Flash, and the default is Standard.",
"type": "string",
"default": ""
},
- "location": {
- "description": "Location is the GCP location in which the Key Ring exists.",
- "type": "string",
- "default": ""
+ "storageContainer": {
+ "description": "storageContainer refers to the storage_container used by the VM disk.",
+ "$ref": "#/definitions/io.openshift.machine.v1.NutanixStorageResourceIdentifier"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1",
+ "Kind": "NutanixVMStorageConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machine.v1.OpenShiftMachineV1Beta1MachineTemplate": {
+ "description": "OpenShiftMachineV1Beta1MachineTemplate is a template for the ControlPlaneMachineSet to create Machines from the v1beta1.machine.openshift.io API group.",
+ "type": "object",
+ "required": [
+ "metadata",
+ "spec"
+ ],
+ "properties": {
+ "failureDomains": {
+ "description": "FailureDomains is the list of failure domains (sometimes called availability zones) in which the ControlPlaneMachineSet should balance the Control Plane Machines. This will be merged into the ProviderSpec given in the template. This field is optional on platforms that do not require placement information.",
+ "$ref": "#/definitions/io.openshift.machine.v1.FailureDomains"
},
- "name": {
- "description": "Name is the name of the customer managed encryption key to be used for the disk encryption.",
- "type": "string",
- "default": ""
+ "metadata": {
+ "description": "ObjectMeta is the standard object metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata Labels are required to match the ControlPlaneMachineSet selector.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.ControlPlaneMachineSetTemplateObjectMeta"
},
- "projectID": {
- "description": "ProjectID is the ID of the Project in which the KMS Key Ring exists. Defaults to the VM ProjectID if not set.",
+ "spec": {
+ "description": "Spec contains the desired configuration of the Control Plane Machines. The ProviderSpec within contains platform specific details for creating the Control Plane Machines. The ProviderSe should be complete apart from the platform specific failure domain field. This will be overriden when the Machines are created based on the FailureDomains field.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineSpec"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1",
+ "Kind": "OpenShiftMachineV1Beta1MachineTemplate",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machine.v1.OpenStackFailureDomain": {
+ "description": "OpenStackFailureDomain configures failure domain information for the OpenStack platform.",
+ "type": "object",
+ "properties": {
+ "availabilityZone": {
+ "description": "availabilityZone is the nova availability zone in which the OpenStack machine provider will create the VM. If not specified, the VM will be created in the default availability zone specified in the nova configuration. Availability zone names must NOT contain : since it is used by admin users to specify hosts where instances are launched in server creation. Also, it must not contain spaces otherwise it will lead to node that belongs to this availability zone register failure, see kubernetes/cloud-provider-openstack#1379 for further information. The maximum length of availability zone name is 63 as per labels limits.",
"type": "string"
+ },
+ "rootVolume": {
+ "description": "rootVolume contains settings that will be used by the OpenStack machine provider to create the root volume attached to the VM. If not specified, no root volume will be created.",
+ "$ref": "#/definitions/io.openshift.machine.v1.RootVolume"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "GCPKMSKeyReference",
+ "Version": "v1",
+ "Kind": "OpenStackFailureDomain",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.GCPMachineProviderSpec": {
- "description": "GCPMachineProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an GCP virtual machine. It is used by the GCP machine actuator to create a single Machine. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1.PowerVSMachineProviderConfig": {
+ "description": "PowerVSMachineProviderConfig is the type that will be embedded in a Machine.Spec.ProviderSpec field for a PowerVS virtual machine. It is used by the PowerVS machine actuator to create a single Machine.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "canIPForward",
- "deletionProtection",
- "serviceAccounts",
- "machineType",
- "region",
- "zone"
+ "serviceInstance",
+ "image",
+ "network",
+ "keyPairName"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "canIPForward": {
- "description": "CanIPForward Allows this instance to send and receive packets with non-matching destination or source IPs. This is required if you plan to use this instance to forward routes.",
- "type": "boolean",
- "default": false
- },
- "confidentialCompute": {
- "description": "confidentialCompute Defines whether the instance should have confidential compute enabled. If enabled OnHostMaintenance is required to be set to \"Terminate\". If omitted, the platform chooses a default, which is subject to change over time, currently that default is false.",
- "type": "string"
- },
"credentialsSecret": {
- "description": "CredentialsSecret is a reference to the secret with GCP credentials.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "deletionProtection": {
- "description": "DeletionProtection whether the resource should be protected against deletion.",
- "type": "boolean",
- "default": false
- },
- "disks": {
- "description": "Disks is a list of disks to be attached to the VM.",
- "type": "array",
- "items": {
- "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPDisk"
- }
+ "description": "credentialsSecret is a reference to the secret with IBM Cloud credentials.",
+ "$ref": "#/definitions/io.openshift.machine.v1.PowerVSSecretReference"
},
- "gcpMetadata": {
- "description": "Metadata key/value pairs to apply to the VM.",
- "type": "array",
- "items": {
- "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPMetadata"
- }
+ "image": {
+ "description": "image is to identify the rhcos image uploaded to IBM COS bucket which is used to create the instance. supported image identifier in PowerVSResource are Name and ID and that can be obtained from IBM Cloud UI or IBM Cloud cli.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.PowerVSResource"
},
- "gpus": {
- "description": "GPUs is a list of GPUs to be attached to the VM.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPGPUConfig"
- }
+ "keyPairName": {
+ "description": "keyPairName is the name of the KeyPair to use for SSH. The key pair will be exposed to the instance via the instance metadata service. On boot, the OS will copy the public keypair into the authorized keys for the core user.",
+ "type": "string",
+ "default": ""
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "labels": {
- "description": "Labels list of labels to apply to the VM.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
+ "loadBalancers": {
+ "description": "loadBalancers is the set of load balancers to which the new control plane instance should be added once it is created.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.LoadBalancerReference"
}
},
- "machineType": {
- "description": "MachineType is the machine type to use for the VM.",
- "type": "string",
- "default": ""
+ "memoryGiB": {
+ "description": "memoryGiB is the size of a virtual machine's memory, in GiB. maximum value for the MemoryGiB depends on the selected SystemType. when SystemType is set to e880 maximum MemoryGiB value is 7463 GiB. when SystemType is set to e980 maximum MemoryGiB value is 15307 GiB. when SystemType is set to s922 maximum MemoryGiB value is 942 GiB. The minimum memory is 32 GiB. When omitted, this means the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 32.",
+ "type": "integer",
+ "format": "int32"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "networkInterfaces": {
- "description": "NetworkInterfaces is a list of network interfaces to be attached to the VM.",
- "type": "array",
- "items": {
- "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPNetworkInterface"
- }
+ "network": {
+ "description": "network is the reference to the Network to use for this instance. supported network identifier in PowerVSResource are Name, ID and RegEx and that can be obtained from IBM Cloud UI or IBM Cloud cli.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.PowerVSResource"
},
- "onHostMaintenance": {
- "description": "OnHostMaintenance determines the behavior when a maintenance event occurs that might cause the instance to reboot. This is required to be set to \"Terminate\" if you want to provision machine with attached GPUs. Otherwise, allowed values are \"Migrate\" and \"Terminate\". If omitted, the platform chooses a default, which is subject to change over time, currently that default is \"Migrate\".",
+ "processorType": {
+ "description": "processorType is the VM instance processor type. It must be set to one of the following values: Dedicated, Capped or Shared. Dedicated: resources are allocated for a specific client, The hypervisor makes a 1:1 binding of a partition’s processor to a physical processor core. Shared: Shared among other clients. Capped: Shared, but resources do not expand beyond those that are requested, the amount of CPU time is Capped to the value specified for the entitlement. if the processorType is selected as Dedicated, then processors value cannot be fractional. When omitted, this means that the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Shared.",
"type": "string"
},
- "preemptible": {
- "description": "Preemptible indicates if created instance is preemptible.",
- "type": "boolean"
- },
- "projectID": {
- "description": "ProjectID is the project in which the GCP machine provider will create the VM.",
- "type": "string"
+ "processors": {
+ "description": "processors is the number of virtual processors in a virtual machine. when the processorType is selected as Dedicated the processors value cannot be fractional. maximum value for the Processors depends on the selected SystemType. when SystemType is set to e880 or e980 maximum Processors value is 143. when SystemType is set to s922 maximum Processors value is 15. minimum value for Processors depends on the selected ProcessorType. when ProcessorType is set as Shared or Capped, The minimum processors is 0.5. when ProcessorType is set as Dedicated, The minimum processors is 1. When omitted, this means that the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default is set based on the selected ProcessorType. when ProcessorType selected as Dedicated, the default is set to 1. when ProcessorType selected as Shared or Capped, the default is set to 0.5.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
},
- "region": {
- "description": "Region is the region in which the GCP machine provider will create the VM.",
- "type": "string",
- "default": ""
+ "serviceInstance": {
+ "description": "serviceInstance is the reference to the Power VS service on which the server instance(VM) will be created. Power VS service is a container for all Power VS instances at a specific geographic region. serviceInstance can be created via IBM Cloud catalog or CLI. supported serviceInstance identifier in PowerVSResource are Name and ID and that can be obtained from IBM Cloud UI or IBM Cloud cli. More detail about Power VS service instance. https://cloud.ibm.com/docs/power-iaas?topic=power-iaas-creating-power-virtual-server",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1.PowerVSResource"
},
- "resourceManagerTags": {
- "description": "resourceManagerTags is an optional list of tags to apply to the GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on tagging GCP resources. GCP supports a maximum of 50 tags per resource.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.ResourceManagerTag"
- },
- "x-kubernetes-list-map-keys": [
- "key"
- ],
- "x-kubernetes-list-type": "map"
- },
- "restartPolicy": {
- "description": "RestartPolicy determines the behavior when an instance crashes or the underlying infrastructure provider stops the instance as part of a maintenance event (default \"Always\"). Cannot be \"Always\" with preemptible instances. Otherwise, allowed values are \"Always\" and \"Never\". If omitted, the platform chooses a default, which is subject to change over time, currently that default is \"Always\". RestartPolicy represents AutomaticRestart in GCP compute api",
- "type": "string"
- },
- "serviceAccounts": {
- "description": "ServiceAccounts is a list of GCP service accounts to be used by the VM.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPServiceAccount"
- }
- },
- "shieldedInstanceConfig": {
- "description": "ShieldedInstanceConfig is the Shielded VM configuration for the VM",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPShieldedInstanceConfig"
- },
- "tags": {
- "description": "Tags list of network tags to apply to the VM.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "targetPools": {
- "description": "TargetPools are used for network TCP/UDP load balancing. A target pool references member instances, an associated legacy HttpHealthCheck resource, and, optionally, a backup target pool",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "systemType": {
+ "description": "systemType is the System type used to host the instance. systemType determines the number of cores and memory that is available. Few of the supported SystemTypes are s922,e880,e980. e880 systemType available only in Dallas Datacenters. e980 systemType available in Datacenters except Dallas and Washington. When omitted, this means that the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is s922 which is generally available.",
+ "type": "string"
},
"userDataSecret": {
- "description": "UserDataSecret contains a local reference to a secret that contains the UserData to apply to the instance",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "zone": {
- "description": "Zone is the zone in which the GCP machine provider will create the VM.",
- "type": "string",
- "default": ""
+ "description": "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance.",
+ "$ref": "#/definitions/io.openshift.machine.v1.PowerVSSecretReference"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "GCPMachineProviderSpec",
+ "Version": "v1",
+ "Kind": "PowerVSMachineProviderConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.GCPMachineProviderStatus": {
- "description": "GCPMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains GCP-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1.PowerVSMachineProviderStatus": {
+ "description": "PowerVSMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains PowerVS-specific status information.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"properties": {
"apiVersion": {
@@ -92863,185 +93365,171 @@
"type": "string"
},
"conditions": {
- "description": "Conditions is a set of conditions associated with the Machine to indicate errors or other status",
+ "description": "conditions is a set of conditions associated with the Machine to indicate errors or other status",
"type": "array",
"items": {
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- }
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
"instanceId": {
- "description": "InstanceID is the ID of the instance in GCP",
+ "description": "instanceId is the instance ID of the machine created in PowerVS instanceId uniquely identifies a Power VS server instance(VM) under a Power VS service. This will help in updating or deleting a VM in Power VS Cloud",
"type": "string"
},
"instanceState": {
- "description": "InstanceState is the provisioning state of the GCP Instance.",
+ "description": "instanceState is the state of the PowerVS instance for this machine Possible instance states are Active, Build, ShutOff, Reboot This is used to display additional information to user regarding instance current state",
"type": "string"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "serviceInstanceID": {
+ "description": "serviceInstanceID is the reference to the Power VS ServiceInstance on which the machine instance will be created. serviceInstanceID uniquely identifies the Power VS service By setting serviceInstanceID it will become easy and efficient to fetch a server instance(VM) within Power VS Cloud.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "GCPMachineProviderStatus",
+ "Version": "v1",
+ "Kind": "PowerVSMachineProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.GCPMetadata": {
- "description": "GCPMetadata describes metadata for GCP.",
+ "io.openshift.machine.v1.PowerVSResource": {
+ "description": "PowerVSResource is a reference to a specific PowerVS resource by ID, Name or RegEx Only one of ID, Name or RegEx may be specified. Specifying more than one will result in a validation error.",
"type": "object",
- "required": [
- "key",
- "value"
- ],
"properties": {
- "key": {
- "description": "Key is the metadata key.",
- "type": "string",
- "default": ""
+ "id": {
+ "description": "ID of resource",
+ "type": "string"
},
- "value": {
- "description": "Value is the metadata value.",
+ "name": {
+ "description": "Name of resource",
+ "type": "string"
+ },
+ "regex": {
+ "description": "Regex to find resource Regex contains the pattern to match to find a resource",
+ "type": "string"
+ },
+ "type": {
+ "description": "Type identifies the resource type for this entry. Valid values are ID, Name and RegEx",
"type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "GCPMetadata",
+ "Version": "v1",
+ "Kind": "PowerVSResource",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "fields-to-discriminateBy": {
+ "id": "ID",
+ "name": "Name",
+ "regex": "RegEx",
+ "type": "Type"
+ }
+ }
+ ]
},
- "io.openshift.machine.v1beta1.GCPNetworkInterface": {
- "description": "GCPNetworkInterface describes network interfaces for GCP",
+ "io.openshift.machine.v1.PowerVSSecretReference": {
+ "description": "PowerVSSecretReference contains enough information to locate the referenced secret inside the same namespace.",
"type": "object",
"properties": {
- "network": {
- "description": "Network is the network name.",
- "type": "string"
- },
- "projectID": {
- "description": "ProjectID is the project in which the GCP machine provider will create the VM.",
- "type": "string"
- },
- "publicIP": {
- "description": "PublicIP indicates if true a public IP will be used",
- "type": "boolean"
- },
- "subnetwork": {
- "description": "Subnetwork is the subnetwork name.",
+ "name": {
+ "description": "Name of the secret.",
"type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "GCPNetworkInterface",
+ "Version": "v1",
+ "Kind": "PowerVSSecretReference",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-map-type": "atomic"
},
- "io.openshift.machine.v1beta1.GCPServiceAccount": {
- "description": "GCPServiceAccount describes service accounts for GCP.",
+ "io.openshift.machine.v1.RootVolume": {
+ "description": "RootVolume represents the volume metadata to boot from. The original RootVolume struct is defined in the v1alpha1 but it's not best practice to use it directly here so we define a new one that should stay in sync with the original one.",
"type": "object",
"required": [
- "email",
- "scopes"
+ "volumeType"
],
"properties": {
- "email": {
- "description": "Email is the service account email.",
+ "availabilityZone": {
+ "description": "availabilityZone specifies the Cinder availability zone where the root volume will be created. If not specifified, the root volume will be created in the availability zone specified by the volume type in the cinder configuration. If the volume type (configured in the OpenStack cluster) does not specify an availability zone, the root volume will be created in the default availability zone specified in the cinder configuration. See https://docs.openstack.org/cinder/latest/admin/availability-zone-type.html for more details. If the OpenStack cluster is deployed with the cross_az_attach configuration option set to false, the root volume will have to be in the same availability zone as the VM (defined by OpenStackFailureDomain.AvailabilityZone). Availability zone names must NOT contain spaces otherwise it will lead to volume that belongs to this availability zone register failure, see kubernetes/cloud-provider-openstack#1379 for further information. The maximum length of availability zone name is 63 as per labels limits.",
+ "type": "string"
+ },
+ "volumeType": {
+ "description": "volumeType specifies the type of the root volume that will be provisioned. The maximum length of a volume type name is 255 characters, as per the OpenStack limit.",
"type": "string",
"default": ""
- },
- "scopes": {
- "description": "Scopes list of scopes to be assigned to the service account.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "GCPServiceAccount",
+ "Version": "v1",
+ "Kind": "RootVolume",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.GCPShieldedInstanceConfig": {
- "description": "GCPShieldedInstanceConfig describes the shielded VM configuration of the instance on GCP. Shielded VM configuration allow users to enable and disable Secure Boot, vTPM, and Integrity Monitoring.",
+ "io.openshift.machine.v1.SystemDiskProperties": {
+ "description": "SystemDiskProperties contains the information regarding the system disk including performance, size, name, and category",
"type": "object",
"properties": {
- "integrityMonitoring": {
- "description": "IntegrityMonitoring determines whether the instance should have integrity monitoring that verify the runtime boot integrity. Compares the most recent boot measurements to the integrity policy baseline and return a pair of pass/fail results depending on whether they match or not. If omitted, the platform chooses a default, which is subject to change over time, currently that default is Enabled.",
+ "category": {
+ "description": "Category is the category of the system disk. Valid values: cloud_essd: ESSD. When the parameter is set to this value, you can use the SystemDisk.PerformanceLevel parameter to specify the performance level of the disk. cloud_efficiency: ultra disk. cloud_ssd: standard SSD. cloud: basic disk. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently for non-I/O optimized instances of retired instance types, the default is `cloud`. Currently for other instances, the default is `cloud_efficiency`.",
"type": "string"
},
- "secureBoot": {
- "description": "SecureBoot Defines whether the instance should have secure boot enabled. Secure Boot verify the digital signature of all boot components, and halting the boot process if signature verification fails. If omitted, the platform chooses a default, which is subject to change over time, currently that default is Disabled.",
+ "name": {
+ "description": "Name is the name of the system disk. If the name is specified the name must be 2 to 128 characters in length. It must start with a letter and cannot start with http:// or https://. It can contain letters, digits, colons (:), underscores (_), and hyphens (-). Empty value means the platform chooses a default, which is subject to change over time. Currently the default is `\"\"`.",
"type": "string"
},
- "virtualizedTrustedPlatformModule": {
- "description": "VirtualizedTrustedPlatformModule enable virtualized trusted platform module measurements to create a known good boot integrity policy baseline. The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed. This is required to be set to \"Enabled\" if IntegrityMonitoring is enabled. If omitted, the platform chooses a default, which is subject to change over time, currently that default is Enabled.",
+ "performanceLevel": {
+ "description": "PerformanceLevel is the performance level of the ESSD used as the system disk. Valid values:\n\nPL0: A single ESSD can deliver up to 10,000 random read/write IOPS. PL1: A single ESSD can deliver up to 50,000 random read/write IOPS. PL2: A single ESSD can deliver up to 100,000 random read/write IOPS. PL3: A single ESSD can deliver up to 1,000,000 random read/write IOPS. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is `PL1`. For more information about ESSD performance levels, see ESSDs.",
"type": "string"
+ },
+ "size": {
+ "description": "Size is the size of the system disk. Unit: GiB. Valid values: 20 to 500. The value must be at least 20 and greater than or equal to the size of the image. Empty value means the platform chooses a default, which is subject to change over time. Currently the default is `40` or the size of the image depending on whichever is greater.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "GCPShieldedInstanceConfig",
+ "Version": "v1",
+ "Kind": "SystemDiskProperties",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.Image": {
- "description": "Image is a mirror of azure sdk compute.ImageReference",
+ "io.openshift.machine.v1.Tag": {
+ "description": "Tag The tags of ECS Instance",
"type": "object",
"required": [
- "publisher",
- "offer",
- "sku",
- "version",
- "resourceID"
+ "Key",
+ "Value"
],
"properties": {
- "offer": {
- "description": "Offer specifies the name of a group of related images created by the publisher. For example, UbuntuServer, WindowsServer",
- "type": "string",
- "default": ""
- },
- "publisher": {
- "description": "Publisher is the name of the organization that created the image",
- "type": "string",
- "default": ""
- },
- "resourceID": {
- "description": "ResourceID specifies an image to use by ID",
- "type": "string",
- "default": ""
- },
- "sku": {
- "description": "SKU specifies an instance of an offer, such as a major release of a distribution. For example, 18.04-LTS, 2019-Datacenter",
+ "Key": {
+ "description": "Key is the name of the key pair",
"type": "string",
"default": ""
},
- "type": {
- "description": "Type identifies the source of the image and related information, such as purchase plans. Valid values are \"ID\", \"MarketplaceWithPlan\", \"MarketplaceNoPlan\", and omitted, which means no opinion and the platform chooses a good default which may change over time. Currently that default is \"MarketplaceNoPlan\" if publisher data is supplied, or \"ID\" if not. For more information about purchase plans, see: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/cli-ps-findimage#check-the-purchase-plan-information",
- "type": "string"
- },
- "version": {
- "description": "Version specifies the version of an image sku. The allowed formats are Major.Minor.Build or 'latest'. Major, Minor, and Build are decimal numbers. Specify 'latest' to use the latest version of an image available at deploy time. Even if you use 'latest', the VM image will not automatically update after deploy time even if a new version becomes available.",
+ "Value": {
+ "description": "Value is the value or data of the key pair",
"type": "string",
"default": ""
}
@@ -93049,364 +93537,359 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "Image",
+ "Version": "v1",
+ "Kind": "Tag",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.LastOperation": {
- "description": "LastOperation represents the detail of the last performed operation on the MachineObject.",
+ "io.openshift.machine.v1.VSphereFailureDomain": {
+ "description": "VSphereFailureDomain configures failure domain information for the vSphere platform",
"type": "object",
+ "required": [
+ "name"
+ ],
"properties": {
- "description": {
- "description": "Description is the human-readable description of the last operation.",
- "type": "string"
- },
- "lastUpdated": {
- "description": "LastUpdated is the timestamp at which LastOperation API was last-updated.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "state": {
- "description": "State is the current status of the last performed operation. E.g. Processing, Failed, Successful etc",
- "type": "string"
- },
- "type": {
- "description": "Type is the type of operation which was last performed. E.g. Create, Delete, Update etc",
- "type": "string"
+ "name": {
+ "description": "name of the failure domain in which the vSphere machine provider will create the VM. Failure domains are defined in a cluster's config.openshift.io/Infrastructure resource. When balancing machines across failure domains, the control plane machine set will inject configuration from the Infrastructure resource into the machine providerSpec to allocate the machine to a failure domain.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "LastOperation",
+ "Version": "v1",
+ "Kind": "VSphereFailureDomain",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.LifecycleHook": {
- "description": "LifecycleHook represents a single instance of a lifecycle hook",
+ "io.openshift.machine.v1alpha1.AdditionalBlockDevice": {
+ "description": "additionalBlockDevice is a block device to attach to the server.",
"type": "object",
"required": [
"name",
- "owner"
+ "sizeGiB",
+ "storage"
],
"properties": {
"name": {
- "description": "Name defines a unique name for the lifcycle hook. The name should be unique and descriptive, ideally 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase. Names must be unique and should only be managed by a single entity.",
+ "description": "name of the block device in the context of a machine. If the block device is a volume, the Cinder volume will be named as a combination of the machine name and this name. Also, this name will be used for tagging the block device. Information about the block device tag can be obtained from the OpenStack metadata API or the config drive.",
"type": "string",
"default": ""
},
- "owner": {
- "description": "Owner defines the owner of the lifecycle hook. This should be descriptive enough so that users can identify who/what is responsible for blocking the lifecycle. This could be the name of a controller (e.g. clusteroperator/etcd) or an administrator managing the hook.",
- "type": "string",
- "default": ""
+ "sizeGiB": {
+ "description": "sizeGiB is the size of the block device in gibibytes (GiB).",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "storage": {
+ "description": "storage specifies the storage type of the block device and additional storage options.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1alpha1.BlockDeviceStorage"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "LifecycleHook",
+ "Version": "v1alpha1",
+ "Kind": "AdditionalBlockDevice",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.LifecycleHooks": {
- "description": "LifecycleHooks allow users to pause operations on the machine at certain prefedined points within the machine lifecycle.",
+ "io.openshift.machine.v1alpha1.AddressPair": {
"type": "object",
"properties": {
- "preDrain": {
- "description": "PreDrain hooks prevent the machine from being drained. This also blocks further lifecycle events, such as termination.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.LifecycleHook"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "ipAddress": {
+ "type": "string"
},
- "preTerminate": {
- "description": "PreTerminate hooks prevent the machine from being terminated. PreTerminate hooks be actioned after the Machine has been drained.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.LifecycleHook"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "macAddress": {
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "LifecycleHooks",
+ "Version": "v1alpha1",
+ "Kind": "AddressPair",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.LoadBalancerReference": {
- "description": "LoadBalancerReference is a reference to a load balancer on AWS.",
+ "io.openshift.machine.v1alpha1.BlockDeviceStorage": {
+ "description": "blockDeviceStorage is the storage type of a block device to create and contains additional storage options.",
"type": "object",
"required": [
- "name",
"type"
],
"properties": {
- "name": {
- "type": "string",
- "default": ""
- },
"type": {
+ "description": "type is the type of block device to create. This can be either \"Volume\" or \"Local\".",
"type": "string",
"default": ""
+ },
+ "volume": {
+ "description": "volume contains additional storage options for a volume block device.",
+ "$ref": "#/definitions/io.openshift.machine.v1alpha1.BlockDeviceVolume"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "LoadBalancerReference",
+ "Version": "v1alpha1",
+ "Kind": "BlockDeviceStorage",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "volume": "Volume"
+ }
+ }
+ ]
},
- "io.openshift.machine.v1beta1.Machine": {
- "description": "Machine is the Schema for the machines API Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1alpha1.BlockDeviceVolume": {
+ "description": "blockDeviceVolume contains additional storage options for a volume block device.",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "availabilityZone": {
+ "description": "availabilityZone is the volume availability zone to create the volume in. If omitted, the availability zone of the server will be used. The availability zone must NOT contain spaces otherwise it will lead to volume that belongs to this availability zone register failure, see kubernetes/cloud-provider-openstack#1379 for further information.",
"type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": {
+ "description": "type is the Cinder volume type of the volume. If omitted, the default Cinder volume type that is configured in the OpenStack cloud will be used.",
"type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineSpec"
- },
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineStatus"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "Machine",
+ "Version": "v1alpha1",
+ "Kind": "BlockDeviceVolume",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.MachineHealthCheck": {
- "description": "MachineHealthCheck is the Schema for the machinehealthchecks API Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1alpha1.Filter": {
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "adminStateUp": {
+ "description": "Deprecated: adminStateUp is silently ignored. It has no replacement.",
+ "type": "boolean"
+ },
+ "description": {
+ "description": "description filters networks by description.",
"type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "id": {
+ "description": "Deprecated: use NetworkParam.uuid instead. Ignored if NetworkParam.uuid is set.",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "limit": {
+ "description": "Deprecated: limit is silently ignored. It has no replacement.",
+ "type": "integer",
+ "format": "int32"
},
- "spec": {
- "description": "Specification of machine health check policy",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineHealthCheckSpec"
+ "marker": {
+ "description": "Deprecated: marker is silently ignored. It has no replacement.",
+ "type": "string"
+ },
+ "name": {
+ "description": "name filters networks by name.",
+ "type": "string"
+ },
+ "notTags": {
+ "description": "notTags filters by networks which don't match all specified tags. NOT (t1 AND t2...) Multiple tags are comma separated.",
+ "type": "string"
+ },
+ "notTagsAny": {
+ "description": "notTagsAny filters by networks which don't match any specified tags. NOT (t1 OR t2...) Multiple tags are comma separated.",
+ "type": "string"
+ },
+ "projectId": {
+ "description": "projectId filters networks by project ID.",
+ "type": "string"
+ },
+ "shared": {
+ "description": "Deprecated: shared is silently ignored. It has no replacement.",
+ "type": "boolean"
+ },
+ "sortDir": {
+ "description": "Deprecated: sortDir is silently ignored. It has no replacement.",
+ "type": "string"
+ },
+ "sortKey": {
+ "description": "Deprecated: sortKey is silently ignored. It has no replacement.",
+ "type": "string"
},
"status": {
- "description": "Most recently observed status of MachineHealthCheck resource",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineHealthCheckStatus"
+ "description": "Deprecated: status is silently ignored. It has no replacement.",
+ "type": "string"
+ },
+ "tags": {
+ "description": "tags filters by networks containing all specified tags. Multiple tags are comma separated.",
+ "type": "string"
+ },
+ "tagsAny": {
+ "description": "tagsAny filters by networks containing any specified tags. Multiple tags are comma separated.",
+ "type": "string"
+ },
+ "tenantId": {
+ "description": "tenantId filters networks by tenant ID. Deprecated: use projectId instead. tenantId will be ignored if projectId is set.",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "MachineHealthCheck",
+ "Version": "v1alpha1",
+ "Kind": "Filter",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.MachineHealthCheckList": {
- "description": "MachineHealthCheckList contains a list of MachineHealthCheck Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1alpha1.FixedIPs": {
"type": "object",
"required": [
- "items"
+ "subnetID"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineHealthCheck"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "ipAddress": {
+ "description": "ipAddress is a specific IP address to use in the given subnet. Port creation will fail if the address is not available. If not specified, an available IP from the given subnet will be selected automatically.",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "subnetID": {
+ "description": "subnetID specifies the ID of the subnet where the fixed IP will be allocated.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
+ "Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "MachineHealthCheckList",
+ "Version": "v1alpha1",
+ "Kind": "FixedIPs",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.MachineHealthCheckSpec": {
- "description": "MachineHealthCheckSpec defines the desired state of MachineHealthCheck",
+ "io.openshift.machine.v1alpha1.NetworkParam": {
"type": "object",
- "required": [
- "selector",
- "unhealthyConditions"
- ],
"properties": {
- "maxUnhealthy": {
- "description": "Any farther remediation is only allowed if at most \"MaxUnhealthy\" machines selected by \"selector\" are not healthy. Expects either a postive integer value or a percentage value. Percentage values must be positive whole numbers and are capped at 100%. Both 0 and 0% are valid and will block all remediation.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
+ "filter": {
+ "description": "Filters for optional network query",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1alpha1.Filter"
},
- "nodeStartupTimeout": {
- "description": "Machines older than this duration without a node will be considered to have failed and will be remediated. To prevent Machines without Nodes from being removed, disable startup checks by setting this value explicitly to \"0\". Expects an unsigned duration string of decimal numbers each with optional fraction and a unit suffix, eg \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "fixedIp": {
+ "description": "A fixed IPv4 address for the NIC.",
+ "type": "string"
},
- "remediationTemplate": {
- "description": "RemediationTemplate is a reference to a remediation template provided by an infrastructure provider.\n\nThis field is completely optional, when filled, the MachineHealthCheck controller creates a new object from the template referenced and hands off remediation of the machine to a controller that lives outside of Machine API Operator.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "noAllowedAddressPairs": {
+ "description": "NoAllowedAddressPairs disables creation of allowed address pairs for the network ports",
+ "type": "boolean"
},
- "selector": {
- "description": "Label selector to match machines whose health will be exercised. Note: An empty selector will match all machines.",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ "portSecurity": {
+ "description": "PortSecurity optionally enables or disables security on ports managed by OpenStack",
+ "type": "boolean"
},
- "unhealthyConditions": {
- "description": "UnhealthyConditions contains a list of the conditions that determine whether a node is considered unhealthy. The conditions are combined in a logical OR, i.e. if any of the conditions is met, the node is unhealthy.",
+ "portTags": {
+ "description": "PortTags allows users to specify a list of tags to add to ports created in a given network",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "profile": {
+ "description": "A dictionary that enables the application running on the specified host to pass and receive virtual network interface (VIF) port-specific information to the plug-in.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "subnets": {
+ "description": "Subnet within a network to use",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.UnhealthyCondition"
+ "$ref": "#/definitions/io.openshift.machine.v1alpha1.SubnetParam"
}
+ },
+ "uuid": {
+ "description": "The UUID of the network. Required if you omit the port attribute.",
+ "type": "string"
+ },
+ "vnicType": {
+ "description": "The virtual network interface card (vNIC) type that is bound to the neutron port.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "MachineHealthCheckSpec",
+ "Version": "v1alpha1",
+ "Kind": "NetworkParam",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.MachineHealthCheckStatus": {
- "description": "MachineHealthCheckStatus defines the observed state of MachineHealthCheck",
+ "io.openshift.machine.v1alpha1.OpenstackProviderSpec": {
+ "description": "OpenstackProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an OpenStack Instance. It is used by the Openstack machine actuator to create a single machine instance. Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "expectedMachines",
- "currentHealthy"
+ "cloudsSecret",
+ "cloudName",
+ "flavor",
+ "image"
],
"properties": {
- "conditions": {
- "description": "Conditions defines the current state of the MachineHealthCheck",
+ "additionalBlockDevices": {
+ "description": "additionalBlockDevices is a list of specifications for additional block devices to attach to the server instance",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.Condition"
+ "$ref": "#/definitions/io.openshift.machine.v1alpha1.AdditionalBlockDevice"
},
"x-kubernetes-list-map-keys": [
- "type"
+ "name"
],
"x-kubernetes-list-type": "map"
},
- "currentHealthy": {
- "description": "total number of machines counted by this machine health check",
- "type": "integer",
- "format": "int32"
- },
- "expectedMachines": {
- "description": "total number of machines counted by this machine health check",
- "type": "integer",
- "format": "int32"
- },
- "remediationsAllowed": {
- "description": "RemediationsAllowed is the number of further remediations allowed by this machine health check before maxUnhealthy short circuiting will be applied",
- "type": "integer",
- "format": "int32",
- "default": 0
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "MachineHealthCheckStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.MachineList": {
- "description": "MachineList contains a list of Machine Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "required": [
- "items"
- ],
- "properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.Machine"
- }
+ "availabilityZone": {
+ "description": "The availability zone from which to launch the server.",
+ "type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "cloudName": {
+ "description": "The name of the cloud to use from the clouds secret",
+ "type": "string",
+ "default": ""
+ },
+ "cloudsSecret": {
+ "description": "The name of the secret containing the openstack credentials",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
+ },
+ "configDrive": {
+ "description": "Config Drive support",
+ "type": "boolean"
+ },
+ "flavor": {
+ "description": "The flavor reference for the flavor for your server instance.",
+ "type": "string",
+ "default": ""
+ },
+ "floatingIP": {
+ "description": "floatingIP specifies a floating IP to be associated with the machine. Note that it is not safe to use this parameter in a MachineSet, as only one Machine may be assigned the same floating IP.\n\nDeprecated: floatingIP will be removed in a future release as it cannot be implemented correctly.",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
- }
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "MachineList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.MachineSet": {
- "description": "MachineSet ensures that a specified number of machines replicas are running at any given time. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "image": {
+ "description": "The name of the image to use for your server instance. If the RootVolume is specified, this will be ignored and use rootVolume directly.",
+ "type": "string",
+ "default": ""
+ },
+ "keyName": {
+ "description": "The ssh key to inject in the instance",
"type": "string"
},
"kind": {
@@ -93418,539 +93901,668 @@
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineSetSpec"
+ "networks": {
+ "description": "A networks object. Required parameter when there are multiple networks defined for the tenant. When you do not specify the networks parameter, the server attaches to the only network created for the current tenant.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1alpha1.NetworkParam"
+ }
},
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineSetStatus"
+ "ports": {
+ "description": "Create and assign additional ports to instances",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1alpha1.PortOpts"
+ }
+ },
+ "primarySubnet": {
+ "description": "The subnet that a set of machines will get ingress/egress traffic from",
+ "type": "string"
+ },
+ "rootVolume": {
+ "description": "The volume metadata to boot from",
+ "$ref": "#/definitions/io.openshift.machine.v1alpha1.RootVolume"
+ },
+ "securityGroups": {
+ "description": "The names of the security groups to assign to the instance",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1alpha1.SecurityGroupParam"
+ }
+ },
+ "serverGroupID": {
+ "description": "The server group to assign the machine to.",
+ "type": "string"
+ },
+ "serverGroupName": {
+ "description": "The server group to assign the machine to. A server group with that name will be created if it does not exist. If both ServerGroupID and ServerGroupName are non-empty, they must refer to the same OpenStack resource.",
+ "type": "string"
+ },
+ "serverMetadata": {
+ "description": "Metadata mapping. Allows you to create a map of key value pairs to add to the server instance.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "sshUserName": {
+ "description": "The machine ssh username",
+ "type": "string"
+ },
+ "tags": {
+ "description": "Machine tags Requires Nova api 2.52 minimum!",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "trunk": {
+ "description": "Whether the server instance is created on a trunk port or not.",
+ "type": "boolean"
+ },
+ "userDataSecret": {
+ "description": "The name of the secret containing the user data (startup script in most cases)",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "MachineSet",
+ "Version": "v1alpha1",
+ "Kind": "OpenstackProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.MachineSetList": {
- "description": "MachineSetList contains a list of MachineSet Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1alpha1.PortOpts": {
"type": "object",
"required": [
- "items"
+ "networkID"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "adminStateUp": {
+ "description": "adminStateUp sets the administrative state of the created port to up (true), or down (false).",
+ "type": "boolean"
+ },
+ "allowedAddressPairs": {
+ "description": "allowedAddressPairs specifies a set of allowed address pairs to add to the port.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1alpha1.AddressPair"
+ }
+ },
+ "description": {
+ "description": "description specifies the description of the created port.",
"type": "string"
},
- "items": {
+ "fixedIPs": {
+ "description": "fixedIPs specifies a set of fixed IPs to assign to the port. They must all be valid for the port's network.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineSet"
+ "$ref": "#/definitions/io.openshift.machine.v1alpha1.FixedIPs"
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "hostID": {
+ "description": "The ID of the host where the port is allocated. Do not use this field: it cannot be used correctly. Deprecated: hostID is silently ignored. It will be removed with no replacement.",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "macAddress": {
+ "description": "macAddress specifies the MAC address of the created port.",
+ "type": "string"
+ },
+ "nameSuffix": {
+ "description": "If nameSuffix is specified the created port will be named \u003cmachine name\u003e-\u003cnameSuffix\u003e. If not specified the port will be named \u003cmachine-name\u003e-\u003cindex of this port\u003e.",
+ "type": "string"
+ },
+ "networkID": {
+ "description": "networkID is the ID of the network the port will be created in. It is required.",
+ "type": "string",
+ "default": ""
+ },
+ "portSecurity": {
+ "description": "enable or disable security on a given port incompatible with securityGroups and allowedAddressPairs",
+ "type": "boolean"
+ },
+ "profile": {
+ "description": "A dictionary that enables the application running on the specified host to pass and receive virtual network interface (VIF) port-specific information to the plug-in.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "projectID": {
+ "description": "projectID specifies the project ID of the created port. Note that this requires OpenShift to have administrative permissions, which is typically not the case. Use of this field is not recommended.",
+ "type": "string"
+ },
+ "securityGroups": {
+ "description": "securityGroups specifies a set of security group UUIDs to use instead of the machine's default security groups. The default security groups will be used if this is left empty or not specified.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "tags": {
+ "description": "tags species a set of tags to add to the port.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "tenantID": {
+ "description": "tenantID specifies the tenant ID of the created port. Note that this requires OpenShift to have administrative permissions, which is typically not the case. Use of this field is not recommended. Deprecated: use projectID instead. It will be ignored if projectID is set.",
+ "type": "string"
+ },
+ "trunk": {
+ "description": "Enables and disables trunk at port level. If not provided, openStackMachine.Spec.Trunk is inherited.",
+ "type": "boolean"
+ },
+ "vnicType": {
+ "description": "The virtual network interface card (vNIC) type that is bound to the neutron port.",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "list",
+ "Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "MachineSetList",
+ "Version": "v1alpha1",
+ "Kind": "PortOpts",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.MachineSetSpec": {
- "description": "MachineSetSpec defines the desired state of MachineSet",
+ "io.openshift.machine.v1alpha1.RootVolume": {
"type": "object",
- "required": [
- "selector"
- ],
"properties": {
- "authoritativeAPI": {
- "description": "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI and ClusterAPI. When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy. When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy. Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API. Currently the authoritative API determines which controller will manage the resource, this will change in a future release. To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.",
+ "availabilityZone": {
+ "description": "availabilityZone specifies the Cinder availability where the root volume will be created.",
"type": "string"
},
- "deletePolicy": {
- "description": "DeletePolicy defines the policy used to identify nodes to delete when downscaling. Defaults to \"Random\". Valid values are \"Random, \"Newest\", \"Oldest\"",
+ "deviceType": {
+ "description": "Deprecated: deviceType will be silently ignored. There is no replacement.",
"type": "string"
},
- "minReadySeconds": {
- "description": "MinReadySeconds is the minimum number of seconds for which a newly created machine should be ready. Defaults to 0 (machine will be considered available as soon as it is ready)",
+ "diskSize": {
+ "description": "diskSize specifies the size, in GB, of the created root volume.",
"type": "integer",
"format": "int32"
},
- "replicas": {
- "description": "Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1.",
- "type": "integer",
- "format": "int32"
+ "sourceType": {
+ "description": "Deprecated: sourceType will be silently ignored. There is no replacement.",
+ "type": "string"
},
- "selector": {
- "description": "Selector is a label query over machines that should match the replica count. Label keys and values that must match in order to be controlled by this MachineSet. It must match the machine template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ "sourceUUID": {
+ "description": "sourceUUID specifies the UUID of a glance image used to populate the root volume. Deprecated: set image in the platform spec instead. This will be ignored if image is set in the platform spec.",
+ "type": "string"
},
- "template": {
- "description": "Template is the object that describes the machine that will be created if insufficient replicas are detected.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineTemplateSpec"
+ "volumeType": {
+ "description": "volumeType specifies a volume type to use when creating the root volume. If not specified the default volume type will be used.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "MachineSetSpec",
+ "Version": "v1alpha1",
+ "Kind": "RootVolume",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.MachineSetStatus": {
- "description": "MachineSetStatus defines the observed state of MachineSet",
+ "io.openshift.machine.v1alpha1.SecurityGroupFilter": {
"type": "object",
- "required": [
- "replicas"
- ],
"properties": {
- "authoritativeAPI": {
- "description": "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI, ClusterAPI and Migrating. This value is updated by the migration controller to reflect the authoritative API. Machine API and Cluster API controllers use this value to determine whether or not to reconcile the resource. When set to Migrating, the migration controller is currently performing the handover of authority from one API to the other.",
+ "description": {
+ "description": "description filters security groups by description.",
"type": "string"
},
- "availableReplicas": {
- "description": "The number of available replicas (ready for at least minReadySeconds) for this MachineSet.",
+ "id": {
+ "description": "id specifies the ID of a security group to use. If set, id will not be validated before use. An invalid id will result in failure to create a server with an appropriate error message.",
+ "type": "string"
+ },
+ "limit": {
+ "description": "Deprecated: limit is silently ignored. It has no replacement.",
"type": "integer",
"format": "int32"
},
- "conditions": {
- "description": "Conditions defines the current state of the MachineSet",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
+ "marker": {
+ "description": "Deprecated: marker is silently ignored. It has no replacement.",
+ "type": "string"
},
- "errorMessage": {
+ "name": {
+ "description": "name filters security groups by name.",
"type": "string"
},
- "errorReason": {
- "description": "In the event that there is a terminal problem reconciling the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason will be populated with a succinct value suitable for machine interpretation, while ErrorMessage will contain a more verbose string suitable for logging and human consumption.\n\nThese fields should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the MachineTemplate's spec or the configuration of the machine controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the machine controller, or the responsible machine controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of Machines can be added as events to the MachineSet object and/or logged in the controller's output.",
+ "notTags": {
+ "description": "notTags filters by security groups which don't match all specified tags. NOT (t1 AND t2...) Multiple tags are comma separated.",
"type": "string"
},
- "fullyLabeledReplicas": {
- "description": "The number of replicas that have labels matching the labels of the machine template of the MachineSet.",
- "type": "integer",
- "format": "int32"
+ "notTagsAny": {
+ "description": "notTagsAny filters by security groups which don't match any specified tags. NOT (t1 OR t2...) Multiple tags are comma separated.",
+ "type": "string"
},
- "observedGeneration": {
- "description": "ObservedGeneration reflects the generation of the most recently observed MachineSet.",
- "type": "integer",
- "format": "int64"
+ "projectId": {
+ "description": "projectId filters security groups by project ID.",
+ "type": "string"
},
- "readyReplicas": {
- "description": "The number of ready replicas for this MachineSet. A machine is considered ready when the node has been created and is \"Ready\".",
- "type": "integer",
- "format": "int32"
+ "sortDir": {
+ "description": "Deprecated: sortDir is silently ignored. It has no replacement.",
+ "type": "string"
},
- "replicas": {
- "description": "Replicas is the most recently observed number of replicas.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "sortKey": {
+ "description": "Deprecated: sortKey is silently ignored. It has no replacement.",
+ "type": "string"
},
- "synchronizedGeneration": {
- "description": "synchronizedGeneration is the generation of the authoritative resource that the non-authoritative resource is synchronised with. This field is set when the authoritative resource is updated and the sync controller has updated the non-authoritative resource to match.",
- "type": "integer",
- "format": "int64"
+ "tags": {
+ "description": "tags filters by security groups containing all specified tags. Multiple tags are comma separated.",
+ "type": "string"
+ },
+ "tagsAny": {
+ "description": "tagsAny filters by security groups containing any specified tags. Multiple tags are comma separated.",
+ "type": "string"
+ },
+ "tenantId": {
+ "description": "tenantId filters security groups by tenant ID. Deprecated: use projectId instead. tenantId will be ignored if projectId is set.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "MachineSetStatus",
+ "Version": "v1alpha1",
+ "Kind": "SecurityGroupFilter",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.MachineSpec": {
- "description": "MachineSpec defines the desired state of Machine",
+ "io.openshift.machine.v1alpha1.SecurityGroupParam": {
"type": "object",
"properties": {
- "authoritativeAPI": {
- "description": "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI and ClusterAPI. When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy. When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy. Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API. Currently the authoritative API determines which controller will manage the resource, this will change in a future release. To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.",
- "type": "string"
- },
- "lifecycleHooks": {
- "description": "LifecycleHooks allow users to pause operations on the machine at certain predefined points within the machine lifecycle.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.LifecycleHooks"
- },
- "metadata": {
- "description": "ObjectMeta will autopopulate the Node created. Use this to indicate what labels, annotations, name prefix, etc., should be used when creating the Node.",
+ "filter": {
+ "description": "Filters used to query security groups in openstack",
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.ObjectMeta"
+ "$ref": "#/definitions/io.openshift.machine.v1alpha1.SecurityGroupFilter"
},
- "providerID": {
- "description": "ProviderID is the identification ID of the machine provided by the provider. This field must match the provider ID as seen on the node object corresponding to this machine. This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a generic out-of-tree provider for autoscaler, this field is required by autoscaler to be able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver and then a comparison is done to find out unregistered machines and are marked for delete. This field will be set by the actuators and consumed by higher level entities like autoscaler that will be interfacing with cluster-api as generic provider.",
+ "name": {
+ "description": "Security Group name",
"type": "string"
},
- "providerSpec": {
- "description": "ProviderSpec details Provider-specific configuration to use during node creation.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.ProviderSpec"
- },
- "taints": {
- "description": "The list of the taints to be applied to the corresponding Node in additive manner. This list will not overwrite any other taints added to the Node on an ongoing basis by other entities. These taints should be actively reconciled e.g. if you ask the machine controller to apply a taint and then manually remove the taint the machine controller will put it back) but not have the machine controller remove any taints",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.Taint"
- },
- "x-kubernetes-list-type": "atomic"
+ "uuid": {
+ "description": "Security Group UUID",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "MachineSpec",
+ "Version": "v1alpha1",
+ "Kind": "SecurityGroupParam",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.MachineStatus": {
- "description": "MachineStatus defines the observed state of Machine",
+ "io.openshift.machine.v1alpha1.SubnetFilter": {
"type": "object",
"properties": {
- "addresses": {
- "description": "Addresses is a list of addresses assigned to the machine. Queried from cloud provider, if available.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.NodeAddress"
- },
- "x-kubernetes-list-type": "atomic"
+ "cidr": {
+ "description": "cidr filters subnets by CIDR.",
+ "type": "string"
},
- "authoritativeAPI": {
- "description": "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI, ClusterAPI and Migrating. This value is updated by the migration controller to reflect the authoritative API. Machine API and Cluster API controllers use this value to determine whether or not to reconcile the resource. When set to Migrating, the migration controller is currently performing the handover of authority from one API to the other.",
+ "description": {
+ "description": "description filters subnets by description.",
"type": "string"
},
- "conditions": {
- "description": "Conditions defines the current state of the Machine",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
+ "enableDhcp": {
+ "description": "Deprecated: enableDhcp is silently ignored. It has no replacement.",
+ "type": "boolean"
},
- "errorMessage": {
- "description": "ErrorMessage will be set in the event that there is a terminal problem reconciling the Machine and will contain a more verbose string suitable for logging and human consumption.\n\nThis field should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the Machine's spec or the configuration of the controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the controller, or the responsible controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of Machines can be added as events to the Machine object and/or logged in the controller's output.",
+ "gateway_ip": {
+ "description": "gateway_ip filters subnets by gateway IP.",
"type": "string"
},
- "errorReason": {
- "description": "ErrorReason will be set in the event that there is a terminal problem reconciling the Machine and will contain a succinct value suitable for machine interpretation.\n\nThis field should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the Machine's spec or the configuration of the controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the controller, or the responsible controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of Machines can be added as events to the Machine object and/or logged in the controller's output.",
+ "id": {
+ "description": "id is the uuid of a specific subnet to use. If specified, id will not be validated. Instead server creation will fail with an appropriate error.",
"type": "string"
},
- "lastOperation": {
- "description": "LastOperation describes the last-operation performed by the machine-controller. This API should be useful as a history in terms of the latest operation performed on the specific machine. It should also convey the state of the latest-operation for example if it is still on-going, failed or completed successfully.",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.LastOperation"
+ "ipVersion": {
+ "description": "ipVersion filters subnets by IP version.",
+ "type": "integer",
+ "format": "int32"
},
- "lastUpdated": {
- "description": "LastUpdated identifies when this status was last observed.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "ipv6AddressMode": {
+ "description": "ipv6AddressMode filters subnets by IPv6 address mode.",
+ "type": "string"
},
- "nodeRef": {
- "description": "NodeRef will point to the corresponding Node if it exists.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "ipv6RaMode": {
+ "description": "ipv6RaMode filters subnets by IPv6 router adversiement mode.",
+ "type": "string"
},
- "phase": {
- "description": "Phase represents the current phase of machine actuation. One of: Failed, Provisioning, Provisioned, Running, Deleting",
+ "limit": {
+ "description": "Deprecated: limit is silently ignored. It has no replacement.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "marker": {
+ "description": "Deprecated: marker is silently ignored. It has no replacement.",
"type": "string"
},
- "providerStatus": {
- "description": "ProviderStatus details a Provider-specific status. It is recommended that providers maintain their own versioned API types that should be serialized/deserialized from this field.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "name": {
+ "description": "name filters subnets by name.",
+ "type": "string"
},
- "synchronizedGeneration": {
- "description": "synchronizedGeneration is the generation of the authoritative resource that the non-authoritative resource is synchronised with. This field is set when the authoritative resource is updated and the sync controller has updated the non-authoritative resource to match.",
- "type": "integer",
- "format": "int64"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "MachineStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.MachineTemplateSpec": {
- "description": "MachineTemplateSpec describes the data needed to create a Machine from a template",
- "type": "object",
- "properties": {
- "metadata": {
- "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.ObjectMeta"
+ "networkId": {
+ "description": "Deprecated: networkId is silently ignored. Set uuid on the containing network definition instead.",
+ "type": "string"
},
- "spec": {
- "description": "Specification of the desired behavior of the machine. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineSpec"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "MachineTemplateSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.MetadataServiceOptions": {
- "description": "MetadataServiceOptions defines the options available to a user when configuring Instance Metadata Service (IMDS) Options.",
- "type": "object",
- "properties": {
- "authentication": {
- "description": "Authentication determines whether or not the host requires the use of authentication when interacting with the metadata service. When using authentication, this enforces v2 interaction method (IMDSv2) with the metadata service. When omitted, this means the user has no opinion and the value is left to the platform to choose a good default, which is subject to change over time. The current default is optional. At this point this field represents `HttpTokens` parameter from `InstanceMetadataOptionsRequest` structure in AWS EC2 API https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_InstanceMetadataOptionsRequest.html",
+ "notTags": {
+ "description": "notTags filters by subnets which don't match all specified tags. NOT (t1 AND t2...) Multiple tags are comma separated.",
+ "type": "string"
+ },
+ "notTagsAny": {
+ "description": "notTagsAny filters by subnets which don't match any specified tags. NOT (t1 OR t2...) Multiple tags are comma separated.",
+ "type": "string"
+ },
+ "projectId": {
+ "description": "projectId filters subnets by project ID.",
+ "type": "string"
+ },
+ "sortDir": {
+ "description": "Deprecated: sortDir is silently ignored. It has no replacement.",
+ "type": "string"
+ },
+ "sortKey": {
+ "description": "Deprecated: sortKey is silently ignored. It has no replacement.",
+ "type": "string"
+ },
+ "subnetpoolId": {
+ "description": "subnetpoolId filters subnets by subnet pool ID.",
+ "type": "string"
+ },
+ "tags": {
+ "description": "tags filters by subnets containing all specified tags. Multiple tags are comma separated.",
+ "type": "string"
+ },
+ "tagsAny": {
+ "description": "tagsAny filters by subnets containing any specified tags. Multiple tags are comma separated.",
+ "type": "string"
+ },
+ "tenantId": {
+ "description": "tenantId filters subnets by tenant ID. Deprecated: use projectId instead. tenantId will be ignored if projectId is set.",
"type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "MetadataServiceOptions",
+ "Version": "v1alpha1",
+ "Kind": "SubnetFilter",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.NetworkDeviceSpec": {
- "description": "NetworkDeviceSpec defines the network configuration for a virtual machine's network device.",
+ "io.openshift.machine.v1alpha1.SubnetParam": {
"type": "object",
"properties": {
- "addressesFromPools": {
- "description": "addressesFromPools is a list of references to IP pool types and instances which are handled by an external controller. addressesFromPool configurations provided via addressesFromPools defer IP address assignment to an external controller. IP addresses provided via ipAddrs, however, are intended to allow explicit assignment of a machine's IP address. If both addressesFromPool and ipAddrs are empty or not defined, DHCP will assign an IP address. If both ipAddrs and addressesFromPools are defined, the IP addresses associated with ipAddrs will be applied first followed by IP addresses from addressesFromPools.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.AddressesFromPool"
- }
- },
- "gateway": {
- "description": "gateway is an IPv4 or IPv6 address which represents the subnet gateway, for example, 192.168.1.1.",
- "type": "string"
+ "filter": {
+ "description": "Filters for optional network query",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1alpha1.SubnetFilter"
},
- "ipAddrs": {
- "description": "ipAddrs is a list of one or more IPv4 and/or IPv6 addresses and CIDR to assign to this device, for example, 192.168.1.100/24. IP addresses provided via ipAddrs are intended to allow explicit assignment of a machine's IP address. IP pool configurations provided via addressesFromPool, however, defer IP address assignment to an external controller. If both addressesFromPool and ipAddrs are empty or not defined, DHCP will be used to assign an IP address. If both ipAddrs and addressesFromPools are defined, the IP addresses associated with ipAddrs will be applied first followed by IP addresses from addressesFromPools.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "portSecurity": {
+ "description": "PortSecurity optionally enables or disables security on ports managed by OpenStack",
+ "type": "boolean"
},
- "nameservers": {
- "description": "nameservers is a list of IPv4 and/or IPv6 addresses used as DNS nameservers, for example, 8.8.8.8. a nameserver is not provided by a fulfilled IPAddressClaim. If DHCP is not the source of IP addresses for this network device, nameservers should include a valid nameserver.",
+ "portTags": {
+ "description": "PortTags are tags that are added to ports created on this subnet",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "networkName": {
- "description": "networkName is the name of the vSphere network or port group to which the network device will be connected, for example, port-group-1. When not provided, the vCenter API will attempt to select a default network. The available networks (port groups) can be listed using `govc ls 'network/*'`",
+ "uuid": {
+ "description": "The UUID of the network. Required if you omit the port attribute.",
"type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "NetworkDeviceSpec",
+ "Version": "v1alpha1",
+ "Kind": "SubnetParam",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.NetworkSpec": {
- "description": "NetworkSpec defines the virtual machine's network configuration.",
+ "io.openshift.machine.v1beta1.AWSMachineProviderConfig": {
+ "description": "AWSMachineProviderConfig is the Schema for the awsmachineproviderconfigs API Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "devices"
+ "ami",
+ "instanceType",
+ "deviceIndex",
+ "subnet",
+ "placement"
],
"properties": {
- "devices": {
- "description": "Devices defines the virtual machine's network interfaces.",
+ "ami": {
+ "description": "AMI is the reference to the AMI from which to create the machine instance.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.AWSResourceReference"
+ },
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "blockDevices": {
+ "description": "BlockDevices is the set of block device mapping associated to this instance, block device without a name will be used as a root device and only one device without a name is allowed https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/block-device-mapping-concepts.html",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.NetworkDeviceSpec"
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.BlockDeviceMappingSpec"
}
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "NetworkSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.OSDisk": {
- "type": "object",
- "required": [
- "osType",
- "managedDisk",
- "diskSizeGB"
- ],
- "properties": {
- "cachingType": {
- "description": "CachingType specifies the caching requirements. Possible values include: 'None', 'ReadOnly', 'ReadWrite'. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is `None`.",
- "type": "string"
},
- "diskSettings": {
- "description": "DiskSettings describe ephemeral disk settings for the os disk.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.DiskSettings"
+ "capacityReservationId": {
+ "description": "capacityReservationId specifies the target Capacity Reservation into which the instance should be launched. The field size should be greater than 0 and the field input must start with cr-***",
+ "type": "string",
+ "default": ""
},
- "diskSizeGB": {
- "description": "DiskSizeGB is the size in GB to assign to the data disk.",
+ "credentialsSecret": {
+ "description": "CredentialsSecret is a reference to the secret with AWS credentials. Otherwise, defaults to permissions provided by attached IAM role where the actuator is running.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "deviceIndex": {
+ "description": "DeviceIndex is the index of the device on the instance for the network interface attachment. Defaults to 0.",
"type": "integer",
- "format": "int32",
+ "format": "int64",
"default": 0
},
- "managedDisk": {
- "description": "ManagedDisk specifies the Managed Disk parameters for the OS disk.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.OSDiskManagedDiskParameters"
+ "iamInstanceProfile": {
+ "description": "IAMInstanceProfile is a reference to an IAM role to assign to the instance",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.AWSResourceReference"
},
- "osType": {
- "description": "OSType is the operating system type of the OS disk. Possible values include \"Linux\" and \"Windows\".",
+ "instanceType": {
+ "description": "InstanceType is the type of instance to create. Example: m4.xlarge",
"type": "string",
"default": ""
+ },
+ "keyName": {
+ "description": "KeyName is the name of the KeyPair to use for SSH",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "loadBalancers": {
+ "description": "LoadBalancers is the set of load balancers to which the new instance should be added once it is created.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.LoadBalancerReference"
+ }
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "metadataServiceOptions": {
+ "description": "MetadataServiceOptions allows users to configure instance metadata service interaction options. If nothing specified, default AWS IMDS settings will be applied. https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_InstanceMetadataOptionsRequest.html",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.MetadataServiceOptions"
+ },
+ "networkInterfaceType": {
+ "description": "NetworkInterfaceType specifies the type of network interface to be used for the primary network interface. Valid values are \"ENA\", \"EFA\", and omitted, which means no opinion and the platform chooses a good default which may change over time. The current default value is \"ENA\". Please visit https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html to learn more about the AWS Elastic Fabric Adapter interface option.",
+ "type": "string"
+ },
+ "placement": {
+ "description": "Placement specifies where to create the instance in AWS",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.Placement"
+ },
+ "placementGroupName": {
+ "description": "PlacementGroupName specifies the name of the placement group in which to launch the instance. The placement group must already be created and may use any placement strategy. When omitted, no placement group is used when creating the EC2 instance.",
+ "type": "string"
+ },
+ "placementGroupPartition": {
+ "description": "placementGroupPartition is the partition number within the placement group in which to launch the instance. This must be an integer value between 1 and 7. It is only valid if the placement group, referred in `PlacementGroupName` was created with strategy set to partition.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "publicIp": {
+ "description": "PublicIP specifies whether the instance should get a public IP. If not present, it should use the default of its subnet.",
+ "type": "boolean"
+ },
+ "securityGroups": {
+ "description": "SecurityGroups is an array of references to security groups that should be applied to the instance.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.AWSResourceReference"
+ }
+ },
+ "spotMarketOptions": {
+ "description": "SpotMarketOptions allows users to configure instances to be run using AWS Spot instances.",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.SpotMarketOptions"
+ },
+ "subnet": {
+ "description": "Subnet is a reference to the subnet to use for this instance",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.AWSResourceReference"
+ },
+ "tags": {
+ "description": "Tags is the set of tags to add to apply to an instance, in addition to the ones added by default by the actuator. These tags are additive. The actuator will ensure these tags are present, but will not remove any other tags that may exist on the instance.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.TagSpecification"
+ }
+ },
+ "userDataSecret": {
+ "description": "UserDataSecret contains a local reference to a secret that contains the UserData to apply to the instance",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "machine.openshift.io",
"Version": "v1beta1",
- "Kind": "OSDisk",
+ "Kind": "AWSMachineProviderConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.OSDiskManagedDiskParameters": {
- "description": "OSDiskManagedDiskParameters is the parameters of a OSDisk managed disk.",
+ "io.openshift.machine.v1beta1.AWSMachineProviderConfigList": {
+ "description": "AWSMachineProviderConfigList contains a list of AWSMachineProviderConfig Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "storageAccountType"
+ "items"
],
"properties": {
- "diskEncryptionSet": {
- "description": "DiskEncryptionSet is the disk encryption set properties",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.DiskEncryptionSetParameters"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "securityProfile": {
- "description": "securityProfile specifies the security profile for the managed disk.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.VMDiskSecurityProfile"
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.AWSMachineProviderConfig"
+ }
},
- "storageAccountType": {
- "description": "StorageAccountType is the storage account type to use. Possible values include \"Standard_LRS\", \"Premium_LRS\".",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "machine.openshift.io",
"Version": "v1beta1",
- "Kind": "OSDiskManagedDiskParameters",
+ "Kind": "AWSMachineProviderConfigList",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.ObjectMeta": {
- "description": "ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create. This is a copy of customizable fields from metav1.ObjectMeta.\n\nObjectMeta is embedded in `Machine.Spec`, `MachineDeployment.Template` and `MachineSet.Template`, which are not top-level Kubernetes objects. Given that metav1.ObjectMeta has lots of special cases and read-only fields which end up in the generated CRD validation, having it as a subset simplifies the API and some issues that can impact user experience.\n\nDuring the [upgrade to controller-tools@v2](https://github.com/kubernetes-sigs/cluster-api/pull/1054) for v1alpha2, we noticed a failure would occur running Cluster API test suite against the new CRDs, specifically `spec.metadata.creationTimestamp in body must be of type string: \"null\"`. The investigation showed that `controller-tools@v2` behaves differently than its previous version when handling types from [metav1](k8s.io/apimachinery/pkg/apis/meta/v1) package.\n\nIn more details, we found that embedded (non-top level) types that embedded `metav1.ObjectMeta` had validation properties, including for `creationTimestamp` (metav1.Time). The `metav1.Time` type specifies a custom json marshaller that, when IsZero() is true, returns `null` which breaks validation because the field isn't marked as nullable.\n\nIn future versions, controller-tools@v2 might allow overriding the type and validation for embedded types. When that happens, this hack should be revisited.",
+ "io.openshift.machine.v1beta1.AWSMachineProviderStatus": {
+ "description": "AWSMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains AWS-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"properties": {
- "annotations": {
- "description": "Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "generateName": {
- "description": "GenerateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.\n\nIf this field is specified and the generated name exists, the server will NOT return a 409 - instead, it will either return 201 Created or 500 with Reason ServerTimeout indicating a unique name could not be found in the time allotted, and the client should retry (optionally after the time indicated in the Retry-After header).\n\nApplied only if Name is not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "labels": {
- "description": "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
+ "conditions": {
+ "description": "Conditions is a set of conditions associated with the Machine to indicate errors or other status",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
}
},
- "name": {
- "description": "Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names",
+ "instanceId": {
+ "description": "InstanceID is the instance ID of the machine created in AWS",
"type": "string"
},
- "namespace": {
- "description": "Namespace defines the space within each name must be unique. An empty namespace is equivalent to the \"default\" namespace, but \"default\" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.\n\nMust be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces",
+ "instanceState": {
+ "description": "InstanceState is the state of the AWS instance for this machine",
"type": "string"
},
- "ownerReferences": {
- "description": "List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReference"
- },
- "x-kubernetes-list-map-keys": [
- "uid"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "uid",
- "x-kubernetes-patch-strategy": "merge"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "machine.openshift.io",
"Version": "v1beta1",
- "Kind": "ObjectMeta",
+ "Kind": "AWSMachineProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.Placement": {
- "description": "Placement indicates where to create the instance in AWS",
+ "io.openshift.machine.v1beta1.AWSResourceReference": {
+ "description": "AWSResourceReference is a reference to a specific AWS resource by ID, ARN, or filters. Only one of ID, ARN or Filters may be specified. Specifying more than one will result in a validation error.",
"type": "object",
"properties": {
- "availabilityZone": {
- "description": "AvailabilityZone is the availability zone of the instance",
+ "arn": {
+ "description": "ARN of resource",
"type": "string"
},
- "region": {
- "description": "Region is the region to use to create the instance",
- "type": "string"
+ "filters": {
+ "description": "Filters is a set of filters used to identify a resource",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.Filter"
+ }
},
- "tenancy": {
- "description": "Tenancy indicates if instance should run on shared or single-tenant hardware. There are supported 3 options: default, dedicated and host.",
+ "id": {
+ "description": "ID of resource",
"type": "string"
}
},
@@ -93958,48 +94570,31 @@
"Type": "nested",
"Group": "machine.openshift.io",
"Version": "v1beta1",
- "Kind": "Placement",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.ProviderSpec": {
- "description": "ProviderSpec defines the configuration to use during node creation.",
- "type": "object",
- "properties": {
- "value": {
- "description": "Value is an inlined, serialized representation of the resource configuration. It is recommended that providers maintain their own versioned API types that should be serialized/deserialized from this field, akin to component config.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "ProviderSpec",
+ "Kind": "AWSResourceReference",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.ResourceManagerTag": {
- "description": "ResourceManagerTag is a tag to apply to GCP resources created for the cluster.",
+ "io.openshift.machine.v1beta1.AddressesFromPool": {
+ "description": "AddressesFromPool is an IPAddressPool that will be used to create IPAddressClaims for fulfillment by an external controller.",
"type": "object",
"required": [
- "parentID",
- "key",
- "value"
+ "group",
+ "resource",
+ "name"
],
"properties": {
- "key": {
- "description": "key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty. Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `._-`.",
+ "group": {
+ "description": "group of the IP address pool type known to an external IPAM controller. This should be a fully qualified domain name, for example, externalipam.controller.io.",
"type": "string",
"default": ""
},
- "parentID": {
- "description": "parentID is the ID of the hierarchical resource where the tags are defined e.g. at the Organization or the Project level. To find the Organization or Project ID ref https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects An OrganizationID can have a maximum of 32 characters and must consist of decimal numbers, and cannot have leading zeroes. A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.",
+ "name": {
+ "description": "name of an IP address pool, for example, pool-config-1.",
"type": "string",
"default": ""
},
- "value": {
- "description": "value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty. Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `_-.@%=+:,*#\u0026(){}[]` and spaces.",
+ "resource": {
+ "description": "resource of the IP address pool type known to an external IPAM controller. It is normally the plural form of the resource kind in lowercase, for example, ippools.",
"type": "string",
"default": ""
}
@@ -94008,115 +94603,52 @@
"Type": "nested",
"Group": "machine.openshift.io",
"Version": "v1beta1",
- "Kind": "ResourceManagerTag",
+ "Kind": "AddressesFromPool",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.SecurityProfile": {
- "description": "SecurityProfile specifies the Security profile settings for a virtual machine or virtual machine scale set.",
- "type": "object",
- "properties": {
- "encryptionAtHost": {
- "description": "encryptionAtHost indicates whether Host Encryption should be enabled or disabled for a virtual machine or virtual machine scale set. This should be disabled when SecurityEncryptionType is set to DiskWithVMGuestState. Default is disabled.",
- "type": "boolean"
- },
- "settings": {
- "description": "settings specify the security type and the UEFI settings of the virtual machine. This field can be set for Confidential VMs and Trusted Launch for VMs.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.SecuritySettings"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "SecurityProfile",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.SecuritySettings": {
- "description": "SecuritySettings define the security type and the UEFI settings of the virtual machine.",
+ "io.openshift.machine.v1beta1.AzureBootDiagnostics": {
+ "description": "AzureBootDiagnostics configures the boot diagnostics settings for the virtual machine. This allows you to configure capturing serial output from the virtual machine on boot. This is useful for debugging software based launch issues.",
"type": "object",
+ "required": [
+ "storageAccountType"
+ ],
"properties": {
- "confidentialVM": {
- "description": "confidentialVM specifies the security configuration of the virtual machine. For more information regarding Confidential VMs, please refer to: https://learn.microsoft.com/azure/confidential-computing/confidential-vm-overview",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.ConfidentialVM"
- },
- "securityType": {
- "description": "securityType specifies the SecurityType of the virtual machine. It has to be set to any specified value to enable UEFISettings. The default behavior is: UEFISettings will not be enabled unless this property is set.",
- "type": "string"
+ "customerManaged": {
+ "description": "CustomerManaged provides reference to the customer manager storage account.",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.AzureCustomerManagedBootDiagnostics"
},
- "trustedLaunch": {
- "description": "trustedLaunch specifies the security configuration of the virtual machine. For more information regarding TrustedLaunch for VMs, please refer to: https://learn.microsoft.com/azure/virtual-machines/trusted-launch",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.TrustedLaunch"
+ "storageAccountType": {
+ "description": "StorageAccountType determines if the storage account for storing the diagnostics data should be provisioned by Azure (AzureManaged) or by the customer (CustomerManaged).",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
"Version": "v1beta1",
- "Kind": "SecuritySettings",
+ "Kind": "AzureBootDiagnostics",
"Scope": "Namespaced"
},
"x-kubernetes-unions": [
{
- "discriminator": "securityType",
+ "discriminator": "storageAccountType",
"fields-to-discriminateBy": {
- "confidentialVM": "ConfidentialVM",
- "trustedLaunch": "TrustedLaunch"
+ "customerManaged": "CustomerManaged"
}
}
]
},
- "io.openshift.machine.v1beta1.SpotMarketOptions": {
- "description": "SpotMarketOptions defines the options available to a user when configuring Machines to run on Spot instances. Most users should provide an empty struct.",
- "type": "object",
- "properties": {
- "maxPrice": {
- "description": "The maximum price the user is willing to pay for their instances Default: On-Demand price",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "SpotMarketOptions",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.SpotVMOptions": {
- "description": "SpotVMOptions defines the options relevant to running the Machine on Spot VMs",
- "type": "object",
- "properties": {
- "maxPrice": {
- "description": "MaxPrice defines the maximum price the user is willing to pay for Spot VM instances",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "SpotVMOptions",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.TagSpecification": {
- "description": "TagSpecification is the name/value pair for a tag",
+ "io.openshift.machine.v1beta1.AzureCustomerManagedBootDiagnostics": {
+ "description": "AzureCustomerManagedBootDiagnostics provides reference to a customer managed storage account.",
"type": "object",
"required": [
- "name",
- "value"
+ "storageAccountURI"
],
"properties": {
- "name": {
- "description": "Name of the tag",
- "type": "string",
- "default": ""
- },
- "value": {
- "description": "Value of the tag",
+ "storageAccountURI": {
+ "description": "StorageAccountURI is the URI of the customer managed storage account. The URI typically will be `https://\u003cmystorageaccountname\u003e.blob.core.windows.net/` but may differ if you are using Azure DNS zone endpoints. You can find the correct endpoint by looking for the Blob Primary Endpoint in the endpoints tab in the Azure console.",
"type": "string",
"default": ""
}
@@ -94125,191 +94657,190 @@
"Type": "nested",
"Group": "machine.openshift.io",
"Version": "v1beta1",
- "Kind": "TagSpecification",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.TrustedLaunch": {
- "description": "TrustedLaunch defines the UEFI settings for the virtual machine.",
- "type": "object",
- "properties": {
- "uefiSettings": {
- "description": "uefiSettings specifies the security settings like secure boot and vTPM used while creating the virtual machine.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.UEFISettings"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "TrustedLaunch",
+ "Kind": "AzureCustomerManagedBootDiagnostics",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.UEFISettings": {
- "description": "UEFISettings specifies the security settings like secure boot and vTPM used while creating the virtual machine.",
+ "io.openshift.machine.v1beta1.AzureDiagnostics": {
+ "description": "AzureDiagnostics is used to configure the diagnostic settings of the virtual machine.",
"type": "object",
"properties": {
- "secureBoot": {
- "description": "secureBoot specifies whether secure boot should be enabled on the virtual machine. Secure Boot verifies the digital signature of all boot components and halts the boot process if signature verification fails. If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.",
- "type": "string"
- },
- "virtualizedTrustedPlatformModule": {
- "description": "virtualizedTrustedPlatformModule specifies whether vTPM should be enabled on the virtual machine. When enabled the virtualized trusted platform module measurements are used to create a known good boot integrity policy baseline. The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed. This is required to be enabled if SecurityEncryptionType is defined. If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.",
- "type": "string"
+ "boot": {
+ "description": "AzureBootDiagnostics configures the boot diagnostics settings for the virtual machine. This allows you to configure capturing serial output from the virtual machine on boot. This is useful for debugging software based launch issues.",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.AzureBootDiagnostics"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machine.openshift.io",
"Version": "v1beta1",
- "Kind": "UEFISettings",
+ "Kind": "AzureDiagnostics",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.UnhealthyCondition": {
- "description": "UnhealthyCondition represents a Node condition type and value with a timeout specified as a duration. When the named condition has been in the given status for at least the timeout value, a node is considered unhealthy.",
+ "io.openshift.machine.v1beta1.AzureMachineProviderSpec": {
+ "description": "AzureMachineProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an Azure virtual machine. It is used by the Azure machine actuator to create a single Machine. Required parameters such as location that are not specified by this configuration, will be defaulted by the actuator. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "type",
- "status",
- "timeout"
+ "image",
+ "osDisk",
+ "publicIP",
+ "subnet"
],
"properties": {
- "status": {
- "type": "string",
- "default": ""
- },
- "timeout": {
- "description": "Expects an unsigned duration string of decimal numbers each with optional fraction and a unit suffix, eg \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "type": {
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "UnhealthyCondition",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.VMDiskSecurityProfile": {
- "description": "VMDiskSecurityProfile specifies the security profile settings for the managed disk. It can be set only for Confidential VMs.",
- "type": "object",
- "properties": {
- "diskEncryptionSet": {
- "description": "diskEncryptionSet specifies the customer managed disk encryption set resource id for the managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and VMGuest blob.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.DiskEncryptionSetParameters"
+ "acceleratedNetworking": {
+ "description": "AcceleratedNetworking enables or disables Azure accelerated networking feature. Set to false by default. If true, then this will depend on whether the requested VMSize is supported. If set to true with an unsupported VMSize, Azure will return an error.",
+ "type": "boolean"
},
- "securityEncryptionType": {
- "description": "securityEncryptionType specifies the encryption type of the managed disk. It is set to DiskWithVMGuestState to encrypt the managed disk along with the VMGuestState blob, and to VMGuestStateOnly to encrypt the VMGuestState blob only. When set to VMGuestStateOnly, the vTPM should be enabled. When set to DiskWithVMGuestState, both SecureBoot and vTPM should be enabled. If the above conditions are not fulfilled, the VM will not be created and the respective error will be returned. It can be set only for Confidential VMs. Confidential VMs are defined by their SecurityProfile.SecurityType being set to ConfidentialVM, the SecurityEncryptionType of their OS disk being set to one of the allowed values and by enabling the respective SecurityProfile.UEFISettings of the VM (i.e. vTPM and SecureBoot), depending on the selected SecurityEncryptionType. For further details on Azure Confidential VMs, please refer to the respective documentation: https://learn.microsoft.com/azure/confidential-computing/confidential-vm-overview",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machine.openshift.io",
- "Version": "v1beta1",
- "Kind": "VMDiskSecurityProfile",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machine.v1beta1.VSphereMachineProviderSpec": {
- "description": "VSphereMachineProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an VSphere virtual machine. It is used by the vSphere machine actuator to create a single Machine. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "required": [
- "template",
- "network"
- ],
- "properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "cloneMode": {
- "description": "CloneMode specifies the type of clone operation. The LinkedClone mode is only support for templates that have at least one snapshot. If the template has no snapshots, then CloneMode defaults to FullClone. When LinkedClone mode is enabled the DiskGiB field is ignored as it is not possible to expand disks of linked clones. Defaults to FullClone. When using LinkedClone, if no snapshots exist for the source template, falls back to FullClone.",
+ "applicationSecurityGroups": {
+ "description": "Application Security Groups that need to be attached to the machine's interface. No application security groups will be attached if zero-length.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "availabilitySet": {
+ "description": "AvailabilitySet specifies the availability set to use for this instance. Availability set should be precreated, before using this field.",
+ "type": "string"
+ },
+ "capacityReservationGroupID": {
+ "description": "capacityReservationGroupID specifies the capacity reservation group resource id that should be used for allocating the virtual machine. The field size should be greater than 0 and the field input must start with '/'. The input for capacityReservationGroupID must be similar to '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/capacityReservationGroups/{capacityReservationGroupName}'. The keys which are used should be among 'subscriptions', 'providers' and 'resourcegroups' followed by valid ID or names respectively.",
"type": "string"
},
"credentialsSecret": {
- "description": "CredentialsSecret is a reference to the secret with vSphere credentials.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "description": "CredentialsSecret is a reference to the secret with Azure credentials.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
},
- "diskGiB": {
- "description": "DiskGiB is the size of a virtual machine's disk, in GiB. Defaults to the analogue property value in the template from which this machine is cloned. This parameter will be ignored if 'LinkedClone' CloneMode is set.",
- "type": "integer",
- "format": "int32"
+ "dataDisks": {
+ "description": "DataDisk specifies the parameters that are used to add one or more data disks to the machine.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.DataDisk"
+ }
+ },
+ "diagnostics": {
+ "description": "Diagnostics configures the diagnostics settings for the virtual machine. This allows you to configure boot diagnostics such as capturing serial output from the virtual machine on boot. This is useful for debugging software based launch issues.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.AzureDiagnostics"
+ },
+ "image": {
+ "description": "Image is the OS image to use to create the instance.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.Image"
+ },
+ "internalLoadBalancer": {
+ "description": "InternalLoadBalancerName to use for this instance",
+ "type": "string"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "memoryMiB": {
- "description": "MemoryMiB is the size of a virtual machine's memory, in MiB. Defaults to the analogue property value in the template from which this machine is cloned.",
- "type": "integer",
- "format": "int64"
+ "location": {
+ "description": "Location is the region to use to create the instance",
+ "type": "string"
+ },
+ "managedIdentity": {
+ "description": "ManagedIdentity to set managed identity name",
+ "type": "string"
},
"metadata": {
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "network": {
- "description": "Network is the network configuration for this machine's VM.",
+ "natRule": {
+ "description": "NatRule to set inbound NAT rule of the load balancer",
+ "type": "integer",
+ "format": "int64"
+ },
+ "networkResourceGroup": {
+ "description": "NetworkResourceGroup is the resource group for the virtual machine's network",
+ "type": "string"
+ },
+ "osDisk": {
+ "description": "OSDisk represents the parameters for creating the OS disk.",
"default": {},
- "$ref": "#/definitions/io.openshift.machine.v1beta1.NetworkSpec"
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.OSDisk"
},
- "numCPUs": {
- "description": "NumCPUs is the number of virtual processors in a virtual machine. Defaults to the analogue property value in the template from which this machine is cloned.",
- "type": "integer",
- "format": "int32"
+ "publicIP": {
+ "description": "PublicIP if true a public IP will be used",
+ "type": "boolean",
+ "default": false
},
- "numCoresPerSocket": {
- "description": "NumCPUs is the number of cores among which to distribute CPUs in this virtual machine. Defaults to the analogue property value in the template from which this machine is cloned.",
- "type": "integer",
- "format": "int32"
+ "publicLoadBalancer": {
+ "description": "PublicLoadBalancer to use for this instance",
+ "type": "string"
},
- "snapshot": {
- "description": "Snapshot is the name of the snapshot from which the VM was cloned",
+ "resourceGroup": {
+ "description": "ResourceGroup is the resource group for the virtual machine",
+ "type": "string"
+ },
+ "securityGroup": {
+ "description": "Network Security Group that needs to be attached to the machine's interface. No security group will be attached if empty.",
+ "type": "string"
+ },
+ "securityProfile": {
+ "description": "SecurityProfile specifies the Security profile settings for a virtual machine.",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.SecurityProfile"
+ },
+ "spotVMOptions": {
+ "description": "SpotVMOptions allows the ability to specify the Machine should use a Spot VM",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.SpotVMOptions"
+ },
+ "sshPublicKey": {
+ "description": "SSHPublicKey is the public key to use to SSH to the virtual machine.",
+ "type": "string"
+ },
+ "subnet": {
+ "description": "Subnet to use for this instance",
"type": "string",
"default": ""
},
- "tagIDs": {
- "description": "tagIDs is an optional set of tags to add to an instance. Specified tagIDs must use URN-notation instead of display names. A maximum of 10 tag IDs may be specified.",
- "type": "array",
- "items": {
+ "tags": {
+ "description": "Tags is a list of tags to apply to the machine.",
+ "type": "object",
+ "additionalProperties": {
"type": "string",
"default": ""
}
},
- "template": {
- "description": "Template is the name, inventory path, or instance UUID of the template used to clone new machines.",
- "type": "string",
- "default": ""
+ "ultraSSDCapability": {
+ "description": "UltraSSDCapability enables or disables Azure UltraSSD capability for a virtual machine. This can be used to allow/disallow binding of Azure UltraSSD to the Machine both as Data Disks or via Persistent Volumes. This Azure feature is subject to a specific scope and certain limitations. More informations on this can be found in the official Azure documentation for Ultra Disks: (https://docs.microsoft.com/en-us/azure/virtual-machines/disks-enable-ultra-ssd?tabs=azure-portal#ga-scope-and-limitations).\n\nWhen omitted, if at least one Data Disk of type UltraSSD is specified, the platform will automatically enable the capability. If a Perisistent Volume backed by an UltraSSD is bound to a Pod on the Machine, when this field is ommitted, the platform will *not* automatically enable the capability (unless already enabled by the presence of an UltraSSD as Data Disk). This may manifest in the Pod being stuck in `ContainerCreating` phase. This defaulting behaviour may be subject to change in future.\n\nWhen set to \"Enabled\", if the capability is available for the Machine based on the scope and limitations described above, the capability will be set on the Machine. This will thus allow UltraSSD both as Data Disks and Persistent Volumes. If set to \"Enabled\" when the capability can't be available due to scope and limitations, the Machine will go into \"Failed\" state.\n\nWhen set to \"Disabled\", UltraSSDs will not be allowed either as Data Disks nor as Persistent Volumes. In this case if any UltraSSDs are specified as Data Disks on a Machine, the Machine will go into a \"Failed\" state. If instead any UltraSSDs are backing the volumes (via Persistent Volumes) of any Pods scheduled on a Node which is backed by the Machine, the Pod may get stuck in `ContainerCreating` phase.",
+ "type": "string"
},
"userDataSecret": {
"description": "UserDataSecret contains a local reference to a secret that contains the UserData to apply to the instance",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
},
- "workspace": {
- "description": "Workspace describes the workspace to use for the machine.",
- "$ref": "#/definitions/io.openshift.machine.v1beta1.Workspace"
+ "vmSize": {
+ "description": "VMSize is the size of the VM to create.",
+ "type": "string"
+ },
+ "vnet": {
+ "description": "Vnet to set virtual network name",
+ "type": "string"
+ },
+ "zone": {
+ "description": "Availability Zone for the virtual machine. If nil, the virtual machine should be deployed to no zone",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "machine.openshift.io",
"Version": "v1beta1",
- "Kind": "VSphereMachineProviderSpec",
+ "Kind": "AzureMachineProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.VSphereMachineProviderStatus": {
- "description": "VSphereMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains VSphere-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1beta1.AzureMachineProviderStatus": {
+ "description": "AzureMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains Azure-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"properties": {
"apiVersion": {
@@ -94317,27 +94848,27 @@
"type": "string"
},
"conditions": {
- "description": "Conditions is a set of conditions associated with the Machine to indicate errors or other status",
+ "description": "Conditions is a set of conditions associated with the Machine to indicate errors or other status.",
"type": "array",
"items": {
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
}
},
- "instanceId": {
- "description": "InstanceID is the ID of the instance in VSphere",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "instanceState": {
- "description": "InstanceState is the provisioning state of the VSphere Instance.",
- "type": "string"
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "vmId": {
+ "description": "VMID is the ID of the virtual machine created in Azure.",
"type": "string"
},
- "taskRef": {
- "description": "TaskRef is a managed object reference to a Task related to the machine. This value is set automatically at runtime and should not be set or modified by users.",
+ "vmState": {
+ "description": "VMState is the provisioning state of the Azure virtual machine.",
"type": "string"
}
},
@@ -94345,32 +94876,28 @@
"Type": "object",
"Group": "machine.openshift.io",
"Version": "v1beta1",
- "Kind": "VSphereMachineProviderStatus",
+ "Kind": "AzureMachineProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machine.v1beta1.Workspace": {
- "description": "WorkspaceConfig defines a workspace configuration for the vSphere cloud provider.",
+ "io.openshift.machine.v1beta1.BlockDeviceMappingSpec": {
+ "description": "BlockDeviceMappingSpec describes a block device mapping",
"type": "object",
"properties": {
- "datacenter": {
- "description": "Datacenter is the datacenter in which VMs are created/located.",
- "type": "string"
- },
- "datastore": {
- "description": "Datastore is the datastore in which VMs are created/located.",
+ "deviceName": {
+ "description": "The device name exposed to the machine (for example, /dev/sdh or xvdh).",
"type": "string"
},
- "folder": {
- "description": "Folder is the folder in which VMs are created/located.",
- "type": "string"
+ "ebs": {
+ "description": "Parameters used to automatically set up EBS volumes when the machine is launched.",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.EBSBlockDeviceSpec"
},
- "resourcePool": {
- "description": "ResourcePool is the resource pool in which VMs are created/located.",
+ "noDevice": {
+ "description": "Suppresses the specified device included in the block device mapping of the AMI.",
"type": "string"
},
- "server": {
- "description": "Server is the IP address or FQDN of the vSphere endpoint.",
+ "virtualName": {
+ "description": "The virtual device name (ephemeralN). Machine store volumes are numbered starting from 0. An machine type with 2 available machine store volumes can specify mappings for ephemeral0 and ephemeral1.The number of available machine store volumes depends on the machine type. After you connect to the machine, you must mount the volume.\n\nConstraints: For M3 machines, you must specify machine store volumes in the block device mapping for the machine. When you launch an M3 machine, we ignore any machine store volumes specified in the block device mapping for the AMI.",
"type": "string"
}
},
@@ -94378,759 +94905,878 @@
"Type": "nested",
"Group": "machine.openshift.io",
"Version": "v1beta1",
- "Kind": "Workspace",
+ "Kind": "BlockDeviceMappingSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.CertExpiry": {
- "description": "ceryExpiry contains the bundle name and the expiry date",
+ "io.openshift.machine.v1beta1.Condition": {
+ "description": "Condition defines an observation of a Machine API resource operational state.",
"type": "object",
"required": [
- "bundle",
- "subject"
+ "type",
+ "status",
+ "lastTransitionTime"
],
"properties": {
- "bundle": {
- "description": "bundle is the name of the bundle in which the subject certificate resides",
+ "lastTransitionTime": {
+ "description": "Last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "description": "A human readable message indicating details about the transition. This field may be empty.",
+ "type": "string"
+ },
+ "reason": {
+ "description": "The reason for the condition's last transition in CamelCase. The specific API may choose whether or not this field is considered a guaranteed API. This field may not be empty.",
+ "type": "string"
+ },
+ "severity": {
+ "description": "Severity provides an explicit classification of Reason code, so the users or machines can immediately understand the current situation and act accordingly. The Severity field MUST be set only when Status=False.",
+ "type": "string"
+ },
+ "status": {
+ "description": "Status of the condition, one of True, False, Unknown.",
"type": "string",
"default": ""
},
- "expiry": {
- "description": "expiry is the date after which the certificate will no longer be valid",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "subject": {
- "description": "subject is the subject of the certificate",
+ "type": {
+ "description": "Type of condition in CamelCase or in foo.example.com/CamelCase. Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "CertExpiry",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "Condition",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.ContainerRuntimeConfig": {
- "description": "ContainerRuntimeConfig describes a customized Container Runtime configuration.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1beta1.ConfidentialVM": {
+ "description": "ConfidentialVM defines the UEFI settings for the virtual machine.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ContainerRuntimeConfigSpec"
- },
- "status": {
+ "uefiSettings": {
+ "description": "uefiSettings specifies the security settings like secure boot and vTPM used while creating the virtual machine.",
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ContainerRuntimeConfigStatus"
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.UEFISettings"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "ContainerRuntimeConfig",
- "Scope": "Clustered"
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "ConfidentialVM",
+ "Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.ContainerRuntimeConfigCondition": {
- "description": "ContainerRuntimeConfigCondition defines the state of the ContainerRuntimeConfig",
+ "io.openshift.machine.v1beta1.DataDisk": {
+ "description": "DataDisk specifies the parameters that are used to add one or more data disks to the machine. A Data Disk is a managed disk that's attached to a virtual machine to store application data. It differs from an OS Disk as it doesn't come with a pre-installed OS, and it cannot contain the boot volume. It is registered as SCSI drive and labeled with the chosen `lun`. e.g. for `lun: 0` the raw disk device will be available at `/dev/disk/azure/scsi1/lun0`.\n\nAs the Data Disk disk device is attached raw to the virtual machine, it will need to be partitioned, formatted with a filesystem and mounted, in order for it to be usable. This can be done by creating a custom userdata Secret with custom Ignition configuration to achieve the desired initialization. At this stage the previously defined `lun` is to be used as the \"device\" key for referencing the raw disk device to be initialized. Once the custom userdata Secret has been created, it can be referenced in the Machine's `.providerSpec.userDataSecret`. For further guidance and examples, please refer to the official OpenShift docs.",
"type": "object",
+ "required": [
+ "nameSuffix",
+ "diskSizeGB",
+ "deletionPolicy"
+ ],
"properties": {
- "lastTransitionTime": {
- "description": "lastTransitionTime is the time of the last update to the current status object.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "message provides additional information about the current condition. This is only to be consumed by humans.",
- "type": "string"
- },
- "reason": {
- "description": "reason is the reason for the condition's last transition. Reasons are PascalCase",
+ "cachingType": {
+ "description": "CachingType specifies the caching requirements. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is CachingTypeNone.",
"type": "string"
},
- "status": {
- "description": "status of the condition, one of True, False, Unknown.",
+ "deletionPolicy": {
+ "description": "DeletionPolicy specifies the data disk deletion policy upon Machine deletion. Possible values are \"Delete\",\"Detach\". When \"Delete\" is used the data disk is deleted when the Machine is deleted. When \"Detach\" is used the data disk is detached from the Machine and retained when the Machine is deleted.",
"type": "string",
"default": ""
},
- "type": {
- "description": "type specifies the state of the operator's reconciliation functionality.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "ContainerRuntimeConfigCondition",
+ "diskSizeGB": {
+ "description": "DiskSizeGB is the size in GB to assign to the data disk.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "lun": {
+ "description": "Lun Specifies the logical unit number of the data disk. This value is used to identify data disks within the VM and therefore must be unique for each data disk attached to a VM. This value is also needed for referencing the data disks devices within userdata to perform disk initialization through Ignition (e.g. partition/format/mount). The value must be between 0 and 63.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "managedDisk": {
+ "description": "ManagedDisk specifies the Managed Disk parameters for the data disk. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is a ManagedDisk with with storageAccountType: \"Premium_LRS\" and diskEncryptionSet.id: \"Default\".",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.DataDiskManagedDiskParameters"
+ },
+ "nameSuffix": {
+ "description": "NameSuffix is the suffix to be appended to the machine name to generate the disk name. Each disk name will be in format \u003cmachineName\u003e_\u003cnameSuffix\u003e. NameSuffix name must start and finish with an alphanumeric character and can only contain letters, numbers, underscores, periods or hyphens. The overall disk name must not exceed 80 chars in length.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "DataDisk",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.ContainerRuntimeConfigList": {
- "description": "ContainerRuntimeConfigList is a list of ContainerRuntimeConfig resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1beta1.DataDiskManagedDiskParameters": {
+ "description": "DataDiskManagedDiskParameters is the parameters of a DataDisk managed disk.",
"type": "object",
"required": [
- "metadata",
- "items"
+ "storageAccountType"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ContainerRuntimeConfig"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "diskEncryptionSet": {
+ "description": "DiskEncryptionSet is the disk encryption set properties. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is a DiskEncryptionSet with id: \"Default\".",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.DiskEncryptionSetParameters"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "storageAccountType": {
+ "description": "StorageAccountType is the storage account type to use. Possible values include \"Standard_LRS\", \"Premium_LRS\" and \"UltraSSD_LRS\".",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "ContainerRuntimeConfigList",
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "DataDiskManagedDiskParameters",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.ContainerRuntimeConfigSpec": {
- "description": "ContainerRuntimeConfigSpec defines the desired state of ContainerRuntimeConfig",
+ "io.openshift.machine.v1beta1.DiskEncryptionSetParameters": {
+ "description": "DiskEncryptionSetParameters is the disk encryption set properties",
"type": "object",
"properties": {
- "containerRuntimeConfig": {
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ContainerRuntimeConfiguration"
- },
- "machineConfigPoolSelector": {
- "description": "MachineConfigPoolSelector selects which pools the ContainerRuntimeConfig shoud apply to. A nil selector will result in no pools being selected.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ "id": {
+ "description": "ID is the disk encryption set ID Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is: \"Default\".",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "ContainerRuntimeConfigSpec",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "DiskEncryptionSetParameters",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.ContainerRuntimeConfigStatus": {
- "description": "ContainerRuntimeConfigStatus defines the observed state of a ContainerRuntimeConfig",
+ "io.openshift.machine.v1beta1.DiskSettings": {
+ "description": "DiskSettings describe ephemeral disk settings for the os disk.",
"type": "object",
"properties": {
- "conditions": {
- "description": "conditions represents the latest available observations of current state.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ContainerRuntimeConfigCondition"
- },
- "x-kubernetes-list-type": "atomic"
- },
- "observedGeneration": {
- "description": "observedGeneration represents the generation observed by the controller.",
- "type": "integer",
- "format": "int64"
+ "ephemeralStorageLocation": {
+ "description": "EphemeralStorageLocation enables ephemeral OS when set to 'Local'. Possible values include: 'Local'. See https://docs.microsoft.com/en-us/azure/virtual-machines/ephemeral-os-disks for full details. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is that disks are saved to remote Azure storage.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "ContainerRuntimeConfigStatus",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "DiskSettings",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.ContainerRuntimeConfiguration": {
- "description": "ContainerRuntimeConfiguration defines the tuneables of the container runtime",
+ "io.openshift.machine.v1beta1.EBSBlockDeviceSpec": {
+ "description": "EBSBlockDeviceSpec describes a block device for an EBS volume. https://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/EbsBlockDevice",
"type": "object",
"properties": {
- "defaultRuntime": {
- "description": "defaultRuntime is the name of the OCI runtime to be used as the default.",
- "type": "string"
+ "deleteOnTermination": {
+ "description": "Indicates whether the EBS volume is deleted on machine termination.",
+ "type": "boolean"
},
- "logLevel": {
- "description": "logLevel specifies the verbosity of the logs based on the level it is set to. Options are fatal, panic, error, warn, info, and debug.",
- "type": "string"
+ "encrypted": {
+ "description": "Indicates whether the EBS volume is encrypted. Encrypted Amazon EBS volumes may only be attached to machines that support Amazon EBS encryption.",
+ "type": "boolean"
},
- "logSizeMax": {
- "description": "logSizeMax specifies the Maximum size allowed for the container log file. Negative numbers indicate that no size limit is imposed. If it is positive, it must be \u003e= 8192 to match/exceed conmon's read buffer.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
+ "iops": {
+ "description": "The number of I/O operations per second (IOPS) that the volume supports. For io1, this represents the number of IOPS that are provisioned for the volume. For gp2, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. For more information about General Purpose SSD baseline performance, I/O credits, and bursting, see Amazon EBS Volume Types (http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html) in the Amazon Elastic Compute Cloud User Guide.\n\nMinimal and maximal IOPS for io1 and gp2 are constrained. Please, check https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html for precise boundaries for individual volumes.\n\nCondition: This parameter is required for requests to create io1 volumes; it is not used in requests to create gp2, st1, sc1, or standard volumes.",
+ "type": "integer",
+ "format": "int64"
},
- "overlaySize": {
- "description": "overlaySize specifies the maximum size of a container image. This flag can be used to set quota on the size of container images. (default: 10GB)",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
+ "kmsKey": {
+ "description": "Indicates the KMS key that should be used to encrypt the Amazon EBS volume.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.AWSResourceReference"
},
- "pidsLimit": {
- "description": "pidsLimit specifies the maximum number of processes allowed in a container",
+ "volumeSize": {
+ "description": "The size of the volume, in GiB.\n\nConstraints: 1-16384 for General Purpose SSD (gp2), 4-16384 for Provisioned IOPS SSD (io1), 500-16384 for Throughput Optimized HDD (st1), 500-16384 for Cold HDD (sc1), and 1-1024 for Magnetic (standard) volumes. If you specify a snapshot, the volume size must be equal to or larger than the snapshot size.\n\nDefault: If you're creating the volume from a snapshot and don't specify a volume size, the default is the snapshot size.",
"type": "integer",
"format": "int64"
+ },
+ "volumeType": {
+ "description": "The volume type: gp2, io1, st1, sc1, or standard. Default: standard",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "ContainerRuntimeConfiguration",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "EBSBlockDeviceSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.ControllerCertificate": {
- "description": "ControllerCertificate contains info about a specific cert.",
+ "io.openshift.machine.v1beta1.Filter": {
+ "description": "Filter is a filter used to identify an AWS resource",
"type": "object",
"required": [
- "subject",
- "signer",
- "bundleFile"
+ "name"
],
"properties": {
- "bundleFile": {
- "description": "bundleFile is the larger bundle a cert comes from",
+ "name": {
+ "description": "Name of the filter. Filter names are case-sensitive.",
"type": "string",
"default": ""
},
- "notAfter": {
- "description": "notAfter is the upper boundary for validity",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "values": {
+ "description": "Values includes one or more filter values. Filter values are case-sensitive.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "Filter",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machine.v1beta1.GCPDisk": {
+ "description": "GCPDisk describes disks for GCP.",
+ "type": "object",
+ "required": [
+ "autoDelete",
+ "boot",
+ "sizeGb",
+ "type",
+ "image",
+ "labels"
+ ],
+ "properties": {
+ "autoDelete": {
+ "description": "AutoDelete indicates if the disk will be auto-deleted when the instance is deleted (default false).",
+ "type": "boolean",
+ "default": false
},
- "notBefore": {
- "description": "notBefore is the lower boundary for validity",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "boot": {
+ "description": "Boot indicates if this is a boot disk (default false).",
+ "type": "boolean",
+ "default": false
},
- "signer": {
- "description": "signer is the cert Issuer",
+ "encryptionKey": {
+ "description": "EncryptionKey is the customer-supplied encryption key of the disk.",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPEncryptionKeyReference"
+ },
+ "image": {
+ "description": "Image is the source image to create this disk.",
"type": "string",
"default": ""
},
- "subject": {
- "description": "subject is the cert subject",
+ "labels": {
+ "description": "Labels list of labels to apply to the disk.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "sizeGb": {
+ "description": "SizeGB is the size of the disk (in GB).",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "type": {
+ "description": "Type is the type of the disk (eg: pd-standard).",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "ControllerCertificate",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "GCPDisk",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.ControllerConfig": {
- "description": "ControllerConfig describes configuration for MachineConfigController. This is currently only used to drive the MachineConfig objects generated by the TemplateController.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1beta1.GCPEncryptionKeyReference": {
+ "description": "GCPEncryptionKeyReference describes the encryptionKey to use for a disk's encryption.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "kmsKey": {
+ "description": "KMSKeyName is the reference KMS key, in the format",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPKMSKeyReference"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "kmsKeyServiceAccount": {
+ "description": "KMSKeyServiceAccount is the service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used. See https://cloud.google.com/compute/docs/access/service-accounts#compute_engine_service_account for details on the default service account.",
"type": "string"
- },
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ControllerConfigSpec"
- },
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ControllerConfigStatus"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "ControllerConfig",
- "Scope": "Clustered"
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "GCPEncryptionKeyReference",
+ "Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.ControllerConfigList": {
- "description": "ControllerConfigList is a list of ControllerConfig resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1beta1.GCPGPUConfig": {
+ "description": "GCPGPUConfig describes type and count of GPUs attached to the instance on GCP.",
"type": "object",
"required": [
- "metadata",
- "items"
+ "count",
+ "type"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ControllerConfig"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "count": {
+ "description": "Count is the number of GPUs to be attached to an instance.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "type": {
+ "description": "Type is the type of GPU to be attached to an instance. Supported GPU types are: nvidia-tesla-k80, nvidia-tesla-p100, nvidia-tesla-v100, nvidia-tesla-p4, nvidia-tesla-t4",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "ControllerConfigList",
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "GCPGPUConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.ControllerConfigSpec": {
- "description": "ControllerConfigSpec is the spec for ControllerConfig resource.",
+ "io.openshift.machine.v1beta1.GCPKMSKeyReference": {
+ "description": "GCPKMSKeyReference gathers required fields for looking up a GCP KMS Key",
"type": "object",
"required": [
- "clusterDNSIP",
- "cloudProviderConfig",
- "kubeAPIServerServingCAData",
- "rootCAData",
- "cloudProviderCAData",
- "additionalTrustBundle",
- "images",
- "baseOSContainerImage",
- "releaseImage",
- "proxy",
- "infra",
- "dns",
- "ipFamilies",
- "network"
+ "name",
+ "keyRing",
+ "location"
],
"properties": {
- "additionalTrustBundle": {
- "description": "additionalTrustBundle is a certificate bundle that will be added to the nodes trusted certificate store.",
- "type": "string",
- "format": "byte"
- },
- "baseOSContainerImage": {
- "description": "BaseOSContainerImage is the new-format container image for operating system updates.",
+ "keyRing": {
+ "description": "KeyRing is the name of the KMS Key Ring which the KMS Key belongs to.",
"type": "string",
"default": ""
},
- "baseOSExtensionsContainerImage": {
- "description": "BaseOSExtensionsContainerImage is the matching extensions container for the new-format container",
+ "location": {
+ "description": "Location is the GCP location in which the Key Ring exists.",
"type": "string",
"default": ""
},
- "cloudProviderCAData": {
- "description": "cloudProvider specifies the cloud provider CA data",
- "type": "string",
- "format": "byte"
- },
- "cloudProviderConfig": {
- "description": "cloudProviderConfig is the configuration for the given cloud provider",
+ "name": {
+ "description": "Name is the name of the customer managed encryption key to be used for the disk encryption.",
"type": "string",
"default": ""
},
- "clusterDNSIP": {
- "description": "clusterDNSIP is the cluster DNS IP address",
- "type": "string",
- "default": ""
+ "projectID": {
+ "description": "ProjectID is the ID of the Project in which the KMS Key Ring exists. Defaults to the VM ProjectID if not set.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "GCPKMSKeyReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machine.v1beta1.GCPMachineProviderSpec": {
+ "description": "GCPMachineProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an GCP virtual machine. It is used by the GCP machine actuator to create a single Machine. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "canIPForward",
+ "deletionProtection",
+ "serviceAccounts",
+ "machineType",
+ "region",
+ "zone"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "dns": {
- "description": "dns holds the cluster dns details",
- "$ref": "#/definitions/io.openshift.config.v1.DNS"
+ "canIPForward": {
+ "description": "CanIPForward Allows this instance to send and receive packets with non-matching destination or source IPs. This is required if you plan to use this instance to forward routes.",
+ "type": "boolean",
+ "default": false
},
- "etcdDiscoveryDomain": {
- "description": "etcdDiscoveryDomain is deprecated, use Infra.Status.EtcdDiscoveryDomain instead",
+ "confidentialCompute": {
+ "description": "confidentialCompute Defines whether the instance should have confidential compute enabled. If enabled OnHostMaintenance is required to be set to \"Terminate\". If omitted, the platform chooses a default, which is subject to change over time, currently that default is false.",
"type": "string"
},
- "imageRegistryBundleData": {
- "description": "imageRegistryBundleData is the ImageRegistryData",
+ "credentialsSecret": {
+ "description": "CredentialsSecret is a reference to the secret with GCP credentials.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "deletionProtection": {
+ "description": "DeletionProtection whether the resource should be protected against deletion.",
+ "type": "boolean",
+ "default": false
+ },
+ "disks": {
+ "description": "Disks is a list of disks to be attached to the VM.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ImageRegistryBundle"
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPDisk"
+ }
},
- "imageRegistryBundleUserData": {
- "description": "imageRegistryBundleUserData is Image Registry Data provided by the user",
+ "gcpMetadata": {
+ "description": "Metadata key/value pairs to apply to the VM.",
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPMetadata"
+ }
+ },
+ "gpus": {
+ "description": "GPUs is a list of GPUs to be attached to the VM.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ImageRegistryBundle"
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPGPUConfig"
+ }
},
- "images": {
- "description": "images is map of images that are used by the controller to render templates under ./templates/",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "labels": {
+ "description": "Labels list of labels to apply to the VM.",
"type": "object",
"additionalProperties": {
"type": "string",
"default": ""
}
},
- "infra": {
- "description": "infra holds the infrastructure details",
- "$ref": "#/definitions/io.openshift.config.v1.Infrastructure"
- },
- "internalRegistryPullSecret": {
- "description": "internalRegistryPullSecret is the pull secret for the internal registry, used by rpm-ostree to pull images from the internal registry if present",
- "type": "string",
- "format": "byte"
- },
- "ipFamilies": {
- "description": "ipFamilies indicates the IP families in use by the cluster network",
+ "machineType": {
+ "description": "MachineType is the machine type to use for the VM.",
"type": "string",
"default": ""
},
- "kubeAPIServerServingCAData": {
- "description": "kubeAPIServerServingCAData managed Kubelet to API Server Cert... Rotated automatically",
- "type": "string",
- "format": "byte"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "network": {
- "description": "Network contains additional network related information",
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.NetworkInfo"
+ "networkInterfaces": {
+ "description": "NetworkInterfaces is a list of network interfaces to be attached to the VM.",
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPNetworkInterface"
+ }
},
- "networkType": {
- "description": "networkType holds the type of network the cluster is using XXX: this is temporary and will be dropped as soon as possible in favor of a better support to start network related services the proper way. Nobody is also changing this once the cluster is up and running the first time, so, disallow regeneration if this changes.",
+ "onHostMaintenance": {
+ "description": "OnHostMaintenance determines the behavior when a maintenance event occurs that might cause the instance to reboot. This is required to be set to \"Terminate\" if you want to provision machine with attached GPUs. Otherwise, allowed values are \"Migrate\" and \"Terminate\". If omitted, the platform chooses a default, which is subject to change over time, currently that default is \"Migrate\".",
"type": "string"
},
- "osImageURL": {
- "description": "OSImageURL is the old-format container image that contains the OS update payload.",
- "type": "string",
- "default": ""
+ "preemptible": {
+ "description": "Preemptible indicates if created instance is preemptible.",
+ "type": "boolean"
},
- "platform": {
- "description": "platform is deprecated, use Infra.Status.PlatformStatus.Type instead",
+ "projectID": {
+ "description": "ProjectID is the project in which the GCP machine provider will create the VM.",
"type": "string"
},
- "proxy": {
- "description": "proxy holds the current proxy configuration for the nodes",
- "$ref": "#/definitions/io.openshift.config.v1.ProxyStatus"
- },
- "pullSecret": {
- "description": "pullSecret is the default pull secret that needs to be installed on all machines.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "releaseImage": {
- "description": "releaseImage is the image used when installing the cluster",
+ "region": {
+ "description": "Region is the region in which the GCP machine provider will create the VM.",
"type": "string",
"default": ""
},
- "rootCAData": {
- "description": "rootCAData specifies the root CA data",
- "type": "string",
- "format": "byte"
+ "resourceManagerTags": {
+ "description": "resourceManagerTags is an optional list of tags to apply to the GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on tagging GCP resources. GCP supports a maximum of 50 tags per resource.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.ResourceManagerTag"
+ },
+ "x-kubernetes-list-map-keys": [
+ "key"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "restartPolicy": {
+ "description": "RestartPolicy determines the behavior when an instance crashes or the underlying infrastructure provider stops the instance as part of a maintenance event (default \"Always\"). Cannot be \"Always\" with preemptible instances. Otherwise, allowed values are \"Always\" and \"Never\". If omitted, the platform chooses a default, which is subject to change over time, currently that default is \"Always\". RestartPolicy represents AutomaticRestart in GCP compute api",
+ "type": "string"
+ },
+ "serviceAccounts": {
+ "description": "ServiceAccounts is a list of GCP service accounts to be used by the VM.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPServiceAccount"
+ }
+ },
+ "shieldedInstanceConfig": {
+ "description": "ShieldedInstanceConfig is the Shielded VM configuration for the VM",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.GCPShieldedInstanceConfig"
+ },
+ "tags": {
+ "description": "Tags list of network tags to apply to the VM.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "targetPools": {
+ "description": "TargetPools are used for network TCP/UDP load balancing. A target pool references member instances, an associated legacy HttpHealthCheck resource, and, optionally, a backup target pool",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "userDataSecret": {
+ "description": "UserDataSecret contains a local reference to a secret that contains the UserData to apply to the instance",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "zone": {
+ "description": "Zone is the zone in which the GCP machine provider will create the VM.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "ControllerConfigSpec",
+ "Type": "object",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "GCPMachineProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.ControllerConfigStatus": {
- "description": "ControllerConfigStatus is the status for ControllerConfig",
+ "io.openshift.machine.v1beta1.GCPMachineProviderStatus": {
+ "description": "GCPMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains GCP-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
"conditions": {
- "description": "conditions represents the latest available observations of current state.",
+ "description": "Conditions is a set of conditions associated with the Machine to indicate errors or other status",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ControllerConfigStatusCondition"
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ }
},
- "controllerCertificates": {
- "description": "controllerCertificates represents the latest available observations of the automatically rotating certificates in the MCO.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ControllerCertificate"
- },
- "x-kubernetes-list-type": "atomic"
+ "instanceId": {
+ "description": "InstanceID is the ID of the instance in GCP",
+ "type": "string"
},
- "observedGeneration": {
- "description": "observedGeneration represents the generation observed by the controller.",
- "type": "integer",
- "format": "int64"
+ "instanceState": {
+ "description": "InstanceState is the provisioning state of the GCP Instance.",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "ControllerConfigStatus",
+ "Type": "object",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "GCPMachineProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.ControllerConfigStatusCondition": {
- "description": "ControllerConfigStatusCondition contains condition information for ControllerConfigStatus",
+ "io.openshift.machine.v1beta1.GCPMetadata": {
+ "description": "GCPMetadata describes metadata for GCP.",
"type": "object",
"required": [
- "type",
- "status",
- "lastTransitionTime"
+ "key",
+ "value"
],
"properties": {
- "lastTransitionTime": {
- "description": "lastTransitionTime is the time of the last update to the current status object.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "key": {
+ "description": "Key is the metadata key.",
+ "type": "string",
+ "default": ""
},
- "message": {
- "description": "message provides additional information about the current condition. This is only to be consumed by humans.",
+ "value": {
+ "description": "Value is the metadata value.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "GCPMetadata",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machine.v1beta1.GCPNetworkInterface": {
+ "description": "GCPNetworkInterface describes network interfaces for GCP",
+ "type": "object",
+ "properties": {
+ "network": {
+ "description": "Network is the network name.",
"type": "string"
},
- "reason": {
- "description": "reason is the reason for the condition's last transition. Reasons are PascalCase",
+ "projectID": {
+ "description": "ProjectID is the project in which the GCP machine provider will create the VM.",
"type": "string"
},
- "status": {
- "description": "status of the condition, one of True, False, Unknown.",
- "type": "string",
- "default": ""
+ "publicIP": {
+ "description": "PublicIP indicates if true a public IP will be used",
+ "type": "boolean"
},
- "type": {
- "description": "type specifies the state of the operator's reconciliation functionality.",
- "type": "string",
- "default": ""
+ "subnetwork": {
+ "description": "Subnetwork is the subnetwork name.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "ControllerConfigStatusCondition",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "GCPNetworkInterface",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.ImageRegistryBundle": {
- "description": "ImageRegistryBundle contains information for writing image registry certificates",
+ "io.openshift.machine.v1beta1.GCPServiceAccount": {
+ "description": "GCPServiceAccount describes service accounts for GCP.",
"type": "object",
"required": [
- "file",
- "data"
+ "email",
+ "scopes"
],
"properties": {
- "data": {
- "description": "data holds the contents of the bundle that will be written to the file location",
- "type": "string",
- "format": "byte"
- },
- "file": {
- "description": "file holds the name of the file where the bundle will be written to disk",
+ "email": {
+ "description": "Email is the service account email.",
"type": "string",
"default": ""
+ },
+ "scopes": {
+ "description": "Scopes list of scopes to be assigned to the service account.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "ImageRegistryBundle",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "GCPServiceAccount",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.KubeletConfig": {
- "description": "KubeletConfig describes a customized Kubelet configuration.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1beta1.GCPShieldedInstanceConfig": {
+ "description": "GCPShieldedInstanceConfig describes the shielded VM configuration of the instance on GCP. Shielded VM configuration allow users to enable and disable Secure Boot, vTPM, and Integrity Monitoring.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "integrityMonitoring": {
+ "description": "IntegrityMonitoring determines whether the instance should have integrity monitoring that verify the runtime boot integrity. Compares the most recent boot measurements to the integrity policy baseline and return a pair of pass/fail results depending on whether they match or not. If omitted, the platform chooses a default, which is subject to change over time, currently that default is Enabled.",
"type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "secureBoot": {
+ "description": "SecureBoot Defines whether the instance should have secure boot enabled. Secure Boot verify the digital signature of all boot components, and halting the boot process if signature verification fails. If omitted, the platform chooses a default, which is subject to change over time, currently that default is Disabled.",
"type": "string"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.KubeletConfigSpec"
- },
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.KubeletConfigStatus"
+ "virtualizedTrustedPlatformModule": {
+ "description": "VirtualizedTrustedPlatformModule enable virtualized trusted platform module measurements to create a known good boot integrity policy baseline. The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed. This is required to be set to \"Enabled\" if IntegrityMonitoring is enabled. If omitted, the platform chooses a default, which is subject to change over time, currently that default is Enabled.",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "KubeletConfig",
- "Scope": "Clustered"
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "GCPShieldedInstanceConfig",
+ "Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.KubeletConfigCondition": {
- "description": "KubeletConfigCondition defines the state of the KubeletConfig",
+ "io.openshift.machine.v1beta1.Image": {
+ "description": "Image is a mirror of azure sdk compute.ImageReference",
"type": "object",
+ "required": [
+ "publisher",
+ "offer",
+ "sku",
+ "version",
+ "resourceID"
+ ],
"properties": {
- "lastTransitionTime": {
- "description": "lastTransitionTime is the time of the last update to the current status object.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "offer": {
+ "description": "Offer specifies the name of a group of related images created by the publisher. For example, UbuntuServer, WindowsServer",
+ "type": "string",
+ "default": ""
},
- "message": {
- "description": "message provides additional information about the current condition. This is only to be consumed by humans.",
- "type": "string"
+ "publisher": {
+ "description": "Publisher is the name of the organization that created the image",
+ "type": "string",
+ "default": ""
},
- "reason": {
- "description": "reason is the reason for the condition's last transition. Reasons are PascalCase",
- "type": "string"
+ "resourceID": {
+ "description": "ResourceID specifies an image to use by ID",
+ "type": "string",
+ "default": ""
},
- "status": {
- "description": "status of the condition, one of True, False, Unknown.",
+ "sku": {
+ "description": "SKU specifies an instance of an offer, such as a major release of a distribution. For example, 18.04-LTS, 2019-Datacenter",
"type": "string",
"default": ""
},
"type": {
- "description": "type specifies the state of the operator's reconciliation functionality.",
+ "description": "Type identifies the source of the image and related information, such as purchase plans. Valid values are \"ID\", \"MarketplaceWithPlan\", \"MarketplaceNoPlan\", and omitted, which means no opinion and the platform chooses a good default which may change over time. Currently that default is \"MarketplaceNoPlan\" if publisher data is supplied, or \"ID\" if not. For more information about purchase plans, see: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/cli-ps-findimage#check-the-purchase-plan-information",
+ "type": "string"
+ },
+ "version": {
+ "description": "Version specifies the version of an image sku. The allowed formats are Major.Minor.Build or 'latest'. Major, Minor, and Build are decimal numbers. Specify 'latest' to use the latest version of an image available at deploy time. Even if you use 'latest', the VM image will not automatically update after deploy time even if a new version becomes available.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "KubeletConfigCondition",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "Image",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.KubeletConfigList": {
- "description": "KubeletConfigList is a list of KubeletConfig resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1beta1.LastOperation": {
+ "description": "LastOperation represents the detail of the last performed operation on the MachineObject.",
"type": "object",
- "required": [
- "metadata",
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "description": {
+ "description": "Description is the human-readable description of the last operation.",
"type": "string"
},
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.KubeletConfig"
- }
+ "lastUpdated": {
+ "description": "LastUpdated is the timestamp at which LastOperation API was last-updated.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "state": {
+ "description": "State is the current status of the last performed operation. E.g. Processing, Failed, Successful etc",
"type": "string"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "type": {
+ "description": "Type is the type of operation which was last performed. E.g. Create, Delete, Update etc",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "KubeletConfigList",
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "LastOperation",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.KubeletConfigSpec": {
- "description": "KubeletConfigSpec defines the desired state of KubeletConfig",
+ "io.openshift.machine.v1beta1.LifecycleHook": {
+ "description": "LifecycleHook represents a single instance of a lifecycle hook",
"type": "object",
+ "required": [
+ "name",
+ "owner"
+ ],
"properties": {
- "autoSizingReserved": {
- "type": "boolean"
- },
- "kubeletConfig": {
- "description": "kubeletConfig fields are defined in kubernetes upstream. Please refer to the types defined in the version/commit used by OpenShift of the upstream kubernetes. It's important to note that, since the fields of the kubelet configuration are directly fetched from upstream the validation of those values is handled directly by the kubelet. Please refer to the upstream version of the relevant kubernetes for the valid values of these fields. Invalid values of the kubelet configuration fields may render cluster nodes unusable.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "logLevel": {
- "type": "integer",
- "format": "int32"
- },
- "machineConfigPoolSelector": {
- "description": "MachineConfigPoolSelector selects which pools the KubeletConfig shoud apply to. A nil selector will result in no pools being selected.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ "name": {
+ "description": "Name defines a unique name for the lifcycle hook. The name should be unique and descriptive, ideally 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase. Names must be unique and should only be managed by a single entity.",
+ "type": "string",
+ "default": ""
},
- "tlsSecurityProfile": {
- "description": "If unset, the default is based on the apiservers.config.openshift.io/cluster resource. Note that only Old and Intermediate profiles are currently supported, and the maximum available minTLSVersion is VersionTLS12.",
- "$ref": "#/definitions/io.openshift.config.v1.TLSSecurityProfile"
+ "owner": {
+ "description": "Owner defines the owner of the lifecycle hook. This should be descriptive enough so that users can identify who/what is responsible for blocking the lifecycle. This could be the name of a controller (e.g. clusteroperator/etcd) or an administrator managing the hook.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "KubeletConfigSpec",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "LifecycleHook",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.KubeletConfigStatus": {
- "description": "KubeletConfigStatus defines the observed state of a KubeletConfig",
+ "io.openshift.machine.v1beta1.LifecycleHooks": {
+ "description": "LifecycleHooks allow users to pause operations on the machine at certain prefedined points within the machine lifecycle.",
"type": "object",
"properties": {
- "conditions": {
- "description": "conditions represents the latest available observations of current state.",
+ "preDrain": {
+ "description": "PreDrain hooks prevent the machine from being drained. This also blocks further lifecycle events, such as termination.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.KubeletConfigCondition"
- }
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.LifecycleHook"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "observedGeneration": {
- "description": "observedGeneration represents the generation observed by the controller.",
- "type": "integer",
- "format": "int64"
+ "preTerminate": {
+ "description": "PreTerminate hooks prevent the machine from being terminated. PreTerminate hooks be actioned after the Machine has been drained.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.LifecycleHook"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "KubeletConfigStatus",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "LifecycleHooks",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.MachineConfig": {
- "description": "MachineConfig defines the configuration for a machine\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1beta1.LoadBalancerReference": {
+ "description": "LoadBalancerReference is a reference to a load balancer on AWS.",
+ "type": "object",
+ "required": [
+ "name",
+ "type"
+ ],
+ "properties": {
+ "name": {
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "LoadBalancerReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machine.v1beta1.Machine": {
+ "description": "Machine is the Schema for the machines API Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"properties": {
"apiVersion": {
@@ -95142,136 +95788,190 @@
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigSpec"
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "MachineConfig",
- "Scope": "Clustered"
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "Machine",
+ "Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.MachineConfigList": {
- "description": "MachineConfigList is a list of MachineConfig resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1beta1.MachineHealthCheck": {
+ "description": "MachineHealthCheck is the Schema for the machinehealthchecks API Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "metadata",
- "items"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfig"
- }
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "Specification of machine health check policy",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineHealthCheckSpec"
+ },
+ "status": {
+ "description": "Most recently observed status of MachineHealthCheck resource",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineHealthCheckStatus"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "MachineConfigList",
+ "Type": "object",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "MachineHealthCheck",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.MachineConfigPool": {
- "description": "MachineConfigPool describes a pool of MachineConfigs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1beta1.MachineHealthCheckList": {
+ "description": "MachineHealthCheckList contains a list of MachineHealthCheck Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "spec"
+ "items"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineHealthCheck"
+ }
+ },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigPoolSpec"
- },
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigPoolStatus"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "MachineConfigPool",
- "Scope": "Clustered"
+ "Type": "list",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "MachineHealthCheckList",
+ "Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.MachineConfigPoolCondition": {
- "description": "MachineConfigPoolCondition contains condition information for an MachineConfigPool.",
+ "io.openshift.machine.v1beta1.MachineHealthCheckSpec": {
+ "description": "MachineHealthCheckSpec defines the desired state of MachineHealthCheck",
"type": "object",
+ "required": [
+ "selector",
+ "unhealthyConditions"
+ ],
"properties": {
- "lastTransitionTime": {
- "description": "lastTransitionTime is the timestamp corresponding to the last status change of this condition.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "maxUnhealthy": {
+ "description": "Any farther remediation is only allowed if at most \"MaxUnhealthy\" machines selected by \"selector\" are not healthy. Expects either a postive integer value or a percentage value. Percentage values must be positive whole numbers and are capped at 100%. Both 0 and 0% are valid and will block all remediation.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
},
- "message": {
- "description": "message is a human readable description of the details of the last transition, complementing reason.",
- "type": "string",
- "default": ""
+ "nodeStartupTimeout": {
+ "description": "Machines older than this duration without a node will be considered to have failed and will be remediated. To prevent Machines without Nodes from being removed, disable startup checks by setting this value explicitly to \"0\". Expects an unsigned duration string of decimal numbers each with optional fraction and a unit suffix, eg \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
},
- "reason": {
- "description": "reason is a brief machine readable explanation for the condition's last transition.",
- "type": "string",
- "default": ""
+ "remediationTemplate": {
+ "description": "RemediationTemplate is a reference to a remediation template provided by an infrastructure provider.\n\nThis field is completely optional, when filled, the MachineHealthCheck controller creates a new object from the template referenced and hands off remediation of the machine to a controller that lives outside of Machine API Operator.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
},
- "status": {
- "description": "status of the condition, one of ('True', 'False', 'Unknown').",
- "type": "string",
- "default": ""
+ "selector": {
+ "description": "Label selector to match machines whose health will be exercised. Note: An empty selector will match all machines.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
},
- "type": {
- "description": "type of the condition, currently ('Done', 'Updating', 'Failed').",
- "type": "string",
- "default": ""
+ "unhealthyConditions": {
+ "description": "UnhealthyConditions contains a list of the conditions that determine whether a node is considered unhealthy. The conditions are combined in a logical OR, i.e. if any of the conditions is met, the node is unhealthy.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.UnhealthyCondition"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "MachineConfigPoolCondition",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "MachineHealthCheckSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.MachineConfigPoolList": {
- "description": "MachineConfigPoolList is a list of MachineConfigPool resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.machine.v1beta1.MachineHealthCheckStatus": {
+ "description": "MachineHealthCheckStatus defines the observed state of MachineHealthCheck",
+ "type": "object",
+ "required": [
+ "expectedMachines",
+ "currentHealthy"
+ ],
+ "properties": {
+ "conditions": {
+ "description": "Conditions defines the current state of the MachineHealthCheck",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "currentHealthy": {
+ "description": "total number of machines counted by this machine health check",
+ "type": "integer",
+ "format": "int32"
+ },
+ "expectedMachines": {
+ "description": "total number of machines counted by this machine health check",
+ "type": "integer",
+ "format": "int32"
+ },
+ "remediationsAllowed": {
+ "description": "RemediationsAllowed is the number of further remediations allowed by this machine health check before maxUnhealthy short circuiting will be applied",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "MachineHealthCheckStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machine.v1beta1.MachineList": {
+ "description": "MachineList contains a list of Machine Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"items"
],
"properties": {
@@ -95283,7 +95983,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigPool"
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.Machine"
}
},
"kind": {
@@ -95291,974 +95991,1019 @@
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "MachineConfigPoolList",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "MachineList",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.MachineConfigPoolSpec": {
- "description": "MachineConfigPoolSpec is the spec for MachineConfigPool resource.",
+ "io.openshift.machine.v1beta1.MachineSet": {
+ "description": "MachineSet ensures that a specified number of machines replicas are running at any given time. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"properties": {
- "configuration": {
- "description": "The targeted MachineConfig object for the machine config pool.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigPoolStatusConfiguration"
- },
- "machineConfigSelector": {
- "description": "machineConfigSelector specifies a label selector for MachineConfigs. Refer https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ on how label and selectors work.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "maxUnavailable": {
- "description": "maxUnavailable defines either an integer number or percentage of nodes in the pool that can go Unavailable during an update. This includes nodes Unavailable for any reason, including user initiated cordons, failing nodes, etc. The default value is 1.\n\nA value larger than 1 will mean multiple nodes going unavailable during the update, which may affect your workload stress on the remaining nodes. You cannot set this value to 0 to stop updates (it will default back to 1); to stop updates, use the 'paused' property instead. Drain will respect Pod Disruption Budgets (PDBs) such as etcd quorum guards, even if maxUnavailable is greater than one.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "nodeSelector": {
- "description": "nodeSelector specifies a label selector for Machines",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "paused": {
- "description": "paused specifies whether or not changes to this machine config pool should be stopped. This includes generating new desiredMachineConfig and update of machines.",
- "type": "boolean",
- "default": false
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineSetSpec"
},
- "pinnedImageSets": {
- "description": "pinnedImageSets specifies a sequence of PinnedImageSetRef objects for the pool. Nodes within this pool will preload and pin images defined in the PinnedImageSet. Before pulling images the MachineConfigDaemon will ensure the total uncompressed size of all the images does not exceed available resources. If the total size of the images exceeds the available resources the controller will report a Degraded status to the MachineConfigPool and not attempt to pull any images. Also to help ensure the kubelet can mitigate storage risk, the pinned_image configuration and subsequent service reload will happen only after all of the images have been pulled for each set. Images from multiple PinnedImageSets are loaded and pinned sequentially as listed. Duplicate and existing images will be skipped.\n\nAny failure to prefetch or pin images will result in a Degraded pool. Resolving these failures is the responsibility of the user. The admin should be proactive in ensuring adequate storage and proper image authentication exists in advance.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.PinnedImageSetRef"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineSetStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "MachineConfigPoolSpec",
+ "Type": "object",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "MachineSet",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.MachineConfigPoolStatus": {
- "description": "MachineConfigPoolStatus is the status for MachineConfigPool resource.",
+ "io.openshift.machine.v1beta1.MachineSetList": {
+ "description": "MachineSetList contains a list of MachineSet Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "certExpirys": {
- "description": "certExpirys keeps track of important certificate expiration data",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.CertExpiry"
- },
- "x-kubernetes-list-type": "atomic"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "conditions": {
- "description": "conditions represents the latest available observations of current state.",
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigPoolCondition"
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineSet"
+ }
},
- "configuration": {
- "description": "configuration represents the current MachineConfig object for the machine config pool.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigPoolStatusConfiguration"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "MachineSetList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machine.v1beta1.MachineSetSpec": {
+ "description": "MachineSetSpec defines the desired state of MachineSet",
+ "type": "object",
+ "required": [
+ "selector"
+ ],
+ "properties": {
+ "authoritativeAPI": {
+ "description": "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI and ClusterAPI. When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy. When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy. Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API. Currently the authoritative API determines which controller will manage the resource, this will change in a future release. To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.",
+ "type": "string"
},
- "degradedMachineCount": {
- "description": "degradedMachineCount represents the total number of machines marked degraded (or unreconcilable). A node is marked degraded if applying a configuration failed..",
+ "deletePolicy": {
+ "description": "DeletePolicy defines the policy used to identify nodes to delete when downscaling. Defaults to \"Random\". Valid values are \"Random, \"Newest\", \"Oldest\"",
+ "type": "string"
+ },
+ "minReadySeconds": {
+ "description": "MinReadySeconds is the minimum number of seconds for which a newly created machine should be ready. Defaults to 0 (machine will be considered available as soon as it is ready)",
"type": "integer",
- "format": "int32",
- "default": 0
+ "format": "int32"
},
- "machineCount": {
- "description": "machineCount represents the total number of machines in the machine config pool.",
+ "replicas": {
+ "description": "Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1.",
"type": "integer",
- "format": "int32",
- "default": 0
+ "format": "int32"
},
- "observedGeneration": {
- "description": "observedGeneration represents the generation observed by the controller.",
+ "selector": {
+ "description": "Selector is a label query over machines that should match the replica count. Label keys and values that must match in order to be controlled by this MachineSet. It must match the machine template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ },
+ "template": {
+ "description": "Template is the object that describes the machine that will be created if insufficient replicas are detected.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineTemplateSpec"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "MachineSetSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machine.v1beta1.MachineSetStatus": {
+ "description": "MachineSetStatus defines the observed state of MachineSet",
+ "type": "object",
+ "required": [
+ "replicas"
+ ],
+ "properties": {
+ "authoritativeAPI": {
+ "description": "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI, ClusterAPI and Migrating. This value is updated by the migration controller to reflect the authoritative API. Machine API and Cluster API controllers use this value to determine whether or not to reconcile the resource. When set to Migrating, the migration controller is currently performing the handover of authority from one API to the other.",
+ "type": "string"
+ },
+ "availableReplicas": {
+ "description": "The number of available replicas (ready for at least minReadySeconds) for this MachineSet.",
"type": "integer",
- "format": "int64"
+ "format": "int32"
},
- "poolSynchronizersStatus": {
- "description": "poolSynchronizersStatus is the status of the machines managed by the pool synchronizers.",
+ "conditions": {
+ "description": "Conditions defines the current state of the MachineSet",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1.PoolSynchronizerStatus"
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.Condition"
},
"x-kubernetes-list-map-keys": [
- "poolSynchronizerType"
+ "type"
],
"x-kubernetes-list-type": "map"
},
- "readyMachineCount": {
- "description": "readyMachineCount represents the total number of ready machines targeted by the pool.",
+ "errorMessage": {
+ "type": "string"
+ },
+ "errorReason": {
+ "description": "In the event that there is a terminal problem reconciling the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason will be populated with a succinct value suitable for machine interpretation, while ErrorMessage will contain a more verbose string suitable for logging and human consumption.\n\nThese fields should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the MachineTemplate's spec or the configuration of the machine controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the machine controller, or the responsible machine controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of Machines can be added as events to the MachineSet object and/or logged in the controller's output.",
+ "type": "string"
+ },
+ "fullyLabeledReplicas": {
+ "description": "The number of replicas that have labels matching the labels of the machine template of the MachineSet.",
"type": "integer",
- "format": "int32",
- "default": 0
+ "format": "int32"
},
- "unavailableMachineCount": {
- "description": "unavailableMachineCount represents the total number of unavailable (non-ready) machines targeted by the pool. A node is marked unavailable if it is in updating state or NodeReady condition is false.",
+ "observedGeneration": {
+ "description": "ObservedGeneration reflects the generation of the most recently observed MachineSet.",
"type": "integer",
- "format": "int32",
- "default": 0
+ "format": "int64"
},
- "updatedMachineCount": {
- "description": "updatedMachineCount represents the total number of machines targeted by the pool that have the CurrentMachineConfig as their config.",
+ "readyReplicas": {
+ "description": "The number of ready replicas for this MachineSet. A machine is considered ready when the node has been created and is \"Ready\".",
+ "type": "integer",
+ "format": "int32"
+ },
+ "replicas": {
+ "description": "Replicas is the most recently observed number of replicas.",
"type": "integer",
"format": "int32",
"default": 0
+ },
+ "synchronizedGeneration": {
+ "description": "synchronizedGeneration is the generation of the authoritative resource that the non-authoritative resource is synchronised with. This field is set when the authoritative resource is updated and the sync controller has updated the non-authoritative resource to match.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "MachineConfigPoolStatus",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "MachineSetStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.MachineConfigPoolStatusConfiguration": {
- "description": "MachineConfigPoolStatusConfiguration stores the current configuration for the pool, and optionally also stores the list of MachineConfig objects used to generate the configuration.",
+ "io.openshift.machine.v1beta1.MachineSpec": {
+ "description": "MachineSpec defines the desired state of Machine",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "API version of the referent.",
- "type": "string"
- },
- "fieldPath": {
- "description": "If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: \"spec.containers{name}\" (where \"name\" refers to the name of the container that triggered the event) or if no container name is specified \"spec.containers[2]\" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object.",
+ "authoritativeAPI": {
+ "description": "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI and ClusterAPI. When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy. When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy. Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API. Currently the authoritative API determines which controller will manage the resource, this will change in a future release. To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.",
"type": "string"
},
- "kind": {
- "description": "Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "lifecycleHooks": {
+ "description": "LifecycleHooks allow users to pause operations on the machine at certain predefined points within the machine lifecycle.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.LifecycleHooks"
},
- "name": {
- "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names",
- "type": "string"
+ "metadata": {
+ "description": "ObjectMeta will autopopulate the Node created. Use this to indicate what labels, annotations, name prefix, etc., should be used when creating the Node.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.ObjectMeta"
},
- "namespace": {
- "description": "Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/",
+ "providerID": {
+ "description": "ProviderID is the identification ID of the machine provided by the provider. This field must match the provider ID as seen on the node object corresponding to this machine. This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a generic out-of-tree provider for autoscaler, this field is required by autoscaler to be able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver and then a comparison is done to find out unregistered machines and are marked for delete. This field will be set by the actuators and consumed by higher level entities like autoscaler that will be interfacing with cluster-api as generic provider.",
"type": "string"
},
- "resourceVersion": {
- "description": "Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency",
- "type": "string"
+ "providerSpec": {
+ "description": "ProviderSpec details Provider-specific configuration to use during node creation.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.ProviderSpec"
},
- "source": {
- "description": "source is the list of MachineConfig objects that were used to generate the single MachineConfig object specified in `content`.",
+ "taints": {
+ "description": "The list of the taints to be applied to the corresponding Node in additive manner. This list will not overwrite any other taints added to the Node on an ongoing basis by other entities. These taints should be actively reconciled e.g. if you ask the machine controller to apply a taint and then manually remove the taint the machine controller will put it back) but not have the machine controller remove any taints",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "$ref": "#/definitions/io.k8s.api.core.v1.Taint"
},
"x-kubernetes-list-type": "atomic"
- },
- "uid": {
- "description": "UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids",
- "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "MachineConfigPoolStatusConfiguration",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "MachineSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.MachineConfigSpec": {
- "description": "MachineConfigSpec is the spec for MachineConfig",
+ "io.openshift.machine.v1beta1.MachineStatus": {
+ "description": "MachineStatus defines the observed state of Machine",
"type": "object",
"properties": {
- "baseOSExtensionsContainerImage": {
- "description": "BaseOSExtensionsContainerImage specifies the remote location that will be used to fetch the extensions container matching a new-format OS image",
- "type": "string",
- "default": ""
- },
- "config": {
- "description": "Config is a Ignition Config object.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "extensions": {
- "description": "extensions contains a list of additional features that can be enabled on host",
+ "addresses": {
+ "description": "Addresses is a list of addresses assigned to the machine. Queried from cloud provider, if available.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.NodeAddress"
},
"x-kubernetes-list-type": "atomic"
},
- "fips": {
- "description": "fips controls FIPS mode",
- "type": "boolean",
- "default": false
+ "authoritativeAPI": {
+ "description": "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI, ClusterAPI and Migrating. This value is updated by the migration controller to reflect the authoritative API. Machine API and Cluster API controllers use this value to determine whether or not to reconcile the resource. When set to Migrating, the migration controller is currently performing the handover of authority from one API to the other.",
+ "type": "string"
},
- "kernelArguments": {
- "description": "kernelArguments contains a list of kernel arguments to be added",
+ "conditions": {
+ "description": "Conditions defines the current state of the Machine",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.Condition"
},
- "x-kubernetes-list-type": "atomic"
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "kernelType": {
- "description": "kernelType contains which kernel we want to be running like default (traditional), realtime, 64k-pages (aarch64 only).",
- "type": "string",
- "default": ""
+ "errorMessage": {
+ "description": "ErrorMessage will be set in the event that there is a terminal problem reconciling the Machine and will contain a more verbose string suitable for logging and human consumption.\n\nThis field should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the Machine's spec or the configuration of the controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the controller, or the responsible controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of Machines can be added as events to the Machine object and/or logged in the controller's output.",
+ "type": "string"
},
- "osImageURL": {
- "description": "OSImageURL specifies the remote location that will be used to fetch the OS.",
- "type": "string",
- "default": ""
+ "errorReason": {
+ "description": "ErrorReason will be set in the event that there is a terminal problem reconciling the Machine and will contain a succinct value suitable for machine interpretation.\n\nThis field should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the Machine's spec or the configuration of the controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the controller, or the responsible controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of Machines can be added as events to the Machine object and/or logged in the controller's output.",
+ "type": "string"
+ },
+ "lastOperation": {
+ "description": "LastOperation describes the last-operation performed by the machine-controller. This API should be useful as a history in terms of the latest operation performed on the specific machine. It should also convey the state of the latest-operation for example if it is still on-going, failed or completed successfully.",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.LastOperation"
+ },
+ "lastUpdated": {
+ "description": "LastUpdated identifies when this status was last observed.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "nodeRef": {
+ "description": "NodeRef will point to the corresponding Node if it exists.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "phase": {
+ "description": "Phase represents the current phase of machine actuation. One of: Failed, Provisioning, Provisioned, Running, Deleting",
+ "type": "string"
+ },
+ "providerStatus": {
+ "description": "ProviderStatus details a Provider-specific status. It is recommended that providers maintain their own versioned API types that should be serialized/deserialized from this field.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "synchronizedGeneration": {
+ "description": "synchronizedGeneration is the generation of the authoritative resource that the non-authoritative resource is synchronised with. This field is set when the authoritative resource is updated and the sync controller has updated the non-authoritative resource to match.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "MachineConfigSpec",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "MachineStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.NetworkInfo": {
- "description": "Network contains network related configuration",
+ "io.openshift.machine.v1beta1.MachineTemplateSpec": {
+ "description": "MachineTemplateSpec describes the data needed to create a Machine from a template",
"type": "object",
- "required": [
- "mtuMigration"
- ],
"properties": {
- "mtuMigration": {
- "description": "MTUMigration contains the MTU migration configuration.",
- "$ref": "#/definitions/io.openshift.config.v1.MTUMigration"
+ "metadata": {
+ "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.ObjectMeta"
+ },
+ "spec": {
+ "description": "Specification of the desired behavior of the machine. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.MachineSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "NetworkInfo",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "MachineTemplateSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.PinnedImageSetRef": {
+ "io.openshift.machine.v1beta1.MetadataServiceOptions": {
+ "description": "MetadataServiceOptions defines the options available to a user when configuring Instance Metadata Service (IMDS) Options.",
"type": "object",
- "required": [
- "name"
- ],
"properties": {
- "name": {
- "description": "name is a reference to the name of a PinnedImageSet. Must adhere to RFC-1123 (https://tools.ietf.org/html/rfc1123). Made up of one of more period-separated (.) segments, where each segment consists of alphanumeric characters and hyphens (-), must begin and end with an alphanumeric character, and is at most 63 characters in length. The total length of the name must not exceed 253 characters.",
- "type": "string",
- "default": ""
+ "authentication": {
+ "description": "Authentication determines whether or not the host requires the use of authentication when interacting with the metadata service. When using authentication, this enforces v2 interaction method (IMDSv2) with the metadata service. When omitted, this means the user has no opinion and the value is left to the platform to choose a good default, which is subject to change over time. The current default is optional. At this point this field represents `HttpTokens` parameter from `InstanceMetadataOptionsRequest` structure in AWS EC2 API https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_InstanceMetadataOptionsRequest.html",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "PinnedImageSetRef",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "MetadataServiceOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1.PoolSynchronizerStatus": {
+ "io.openshift.machine.v1beta1.NetworkDeviceSpec": {
+ "description": "NetworkDeviceSpec defines the network configuration for a virtual machine's network device.",
+ "type": "object",
+ "properties": {
+ "addressesFromPools": {
+ "description": "addressesFromPools is a list of references to IP pool types and instances which are handled by an external controller. addressesFromPool configurations provided via addressesFromPools defer IP address assignment to an external controller. IP addresses provided via ipAddrs, however, are intended to allow explicit assignment of a machine's IP address. If both addressesFromPool and ipAddrs are empty or not defined, DHCP will assign an IP address. If both ipAddrs and addressesFromPools are defined, the IP addresses associated with ipAddrs will be applied first followed by IP addresses from addressesFromPools.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.AddressesFromPool"
+ }
+ },
+ "gateway": {
+ "description": "gateway is an IPv4 or IPv6 address which represents the subnet gateway, for example, 192.168.1.1.",
+ "type": "string"
+ },
+ "ipAddrs": {
+ "description": "ipAddrs is a list of one or more IPv4 and/or IPv6 addresses and CIDR to assign to this device, for example, 192.168.1.100/24. IP addresses provided via ipAddrs are intended to allow explicit assignment of a machine's IP address. IP pool configurations provided via addressesFromPool, however, defer IP address assignment to an external controller. If both addressesFromPool and ipAddrs are empty or not defined, DHCP will be used to assign an IP address. If both ipAddrs and addressesFromPools are defined, the IP addresses associated with ipAddrs will be applied first followed by IP addresses from addressesFromPools.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "nameservers": {
+ "description": "nameservers is a list of IPv4 and/or IPv6 addresses used as DNS nameservers, for example, 8.8.8.8. a nameserver is not provided by a fulfilled IPAddressClaim. If DHCP is not the source of IP addresses for this network device, nameservers should include a valid nameserver.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "networkName": {
+ "description": "networkName is the name of the vSphere network or port group to which the network device will be connected, for example, port-group-1. When not provided, the vCenter API will attempt to select a default network. The available networks (port groups) can be listed using `govc ls 'network/*'`",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDeviceSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machine.v1beta1.NetworkSpec": {
+ "description": "NetworkSpec defines the virtual machine's network configuration.",
"type": "object",
"required": [
- "poolSynchronizerType",
- "machineCount",
- "updatedMachineCount",
- "readyMachineCount",
- "availableMachineCount",
- "unavailableMachineCount"
+ "devices"
],
"properties": {
- "availableMachineCount": {
- "description": "availableMachineCount is the number of machines managed by the node synchronizer which are available.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "devices": {
+ "description": "Devices defines the virtual machine's network interfaces.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.NetworkDeviceSpec"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machine.v1beta1.OSDisk": {
+ "type": "object",
+ "required": [
+ "osType",
+ "managedDisk",
+ "diskSizeGB"
+ ],
+ "properties": {
+ "cachingType": {
+ "description": "CachingType specifies the caching requirements. Possible values include: 'None', 'ReadOnly', 'ReadWrite'. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is `None`.",
+ "type": "string"
},
- "machineCount": {
- "description": "machineCount is the number of machines that are managed by the node synchronizer.",
+ "diskSettings": {
+ "description": "DiskSettings describe ephemeral disk settings for the os disk.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.DiskSettings"
+ },
+ "diskSizeGB": {
+ "description": "DiskSizeGB is the size in GB to assign to the data disk.",
"type": "integer",
- "format": "int64",
+ "format": "int32",
"default": 0
},
- "observedGeneration": {
- "description": "observedGeneration is the last generation change that has been applied.",
- "type": "integer",
- "format": "int64"
+ "managedDisk": {
+ "description": "ManagedDisk specifies the Managed Disk parameters for the OS disk.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.OSDiskManagedDiskParameters"
},
- "poolSynchronizerType": {
- "description": "poolSynchronizerType describes the type of the pool synchronizer.",
+ "osType": {
+ "description": "OSType is the operating system type of the OS disk. Possible values include \"Linux\" and \"Windows\".",
"type": "string",
"default": ""
- },
- "readyMachineCount": {
- "description": "readyMachineCount is the number of machines managed by the node synchronizer that are in a ready state.",
- "type": "integer",
- "format": "int64",
- "default": 0
- },
- "unavailableMachineCount": {
- "description": "unavailableMachineCount is the number of machines managed by the node synchronizer but are unavailable.",
- "type": "integer",
- "format": "int64",
- "default": 0
- },
- "updatedMachineCount": {
- "description": "updatedMachineCount is the number of machines that have been updated by the node synchronizer.",
- "type": "integer",
- "format": "int64",
- "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1",
- "Kind": "PoolSynchronizerStatus",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "OSDisk",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.BuildInputs": {
- "description": "BuildInputs holds all of the information needed to trigger a build",
+ "io.openshift.machine.v1beta1.OSDiskManagedDiskParameters": {
+ "description": "OSDiskManagedDiskParameters is the parameters of a OSDisk managed disk.",
"type": "object",
"required": [
- "baseImagePullSecret",
- "imageBuilder",
- "renderedImagePushSecret",
- "renderedImagePushspec"
+ "storageAccountType"
],
"properties": {
- "baseImagePullSecret": {
- "description": "baseImagePullSecret is the secret used to pull the base image. must live in the openshift-machine-config-operator namespace",
+ "diskEncryptionSet": {
+ "description": "DiskEncryptionSet is the disk encryption set properties",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.DiskEncryptionSetParameters"
+ },
+ "securityProfile": {
+ "description": "securityProfile specifies the security profile for the managed disk.",
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.ImageSecretObjectReference"
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.VMDiskSecurityProfile"
},
- "baseOSExtensionsImagePullspec": {
- "description": "baseOSExtensionsImagePullspec is the base Extensions image used in the build process the MachineOSConfig object will use the in cluster image registry configuration. if you wish to use a mirror or any other settings specific to registries.conf, please specify those in the cluster wide registries.conf. The format of the image pullspec is: host[:port][/namespace]/name@sha256:\u003cdigest\u003e",
+ "storageAccountType": {
+ "description": "StorageAccountType is the storage account type to use. Possible values include \"Standard_LRS\", \"Premium_LRS\".",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "OSDiskManagedDiskParameters",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machine.v1beta1.ObjectMeta": {
+ "description": "ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create. This is a copy of customizable fields from metav1.ObjectMeta.\n\nObjectMeta is embedded in `Machine.Spec`, `MachineDeployment.Template` and `MachineSet.Template`, which are not top-level Kubernetes objects. Given that metav1.ObjectMeta has lots of special cases and read-only fields which end up in the generated CRD validation, having it as a subset simplifies the API and some issues that can impact user experience.\n\nDuring the [upgrade to controller-tools@v2](https://github.com/kubernetes-sigs/cluster-api/pull/1054) for v1alpha2, we noticed a failure would occur running Cluster API test suite against the new CRDs, specifically `spec.metadata.creationTimestamp in body must be of type string: \"null\"`. The investigation showed that `controller-tools@v2` behaves differently than its previous version when handling types from [metav1](k8s.io/apimachinery/pkg/apis/meta/v1) package.\n\nIn more details, we found that embedded (non-top level) types that embedded `metav1.ObjectMeta` had validation properties, including for `creationTimestamp` (metav1.Time). The `metav1.Time` type specifies a custom json marshaller that, when IsZero() is true, returns `null` which breaks validation because the field isn't marked as nullable.\n\nIn future versions, controller-tools@v2 might allow overriding the type and validation for embedded types. When that happens, this hack should be revisited.",
+ "type": "object",
+ "properties": {
+ "annotations": {
+ "description": "Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "generateName": {
+ "description": "GenerateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.\n\nIf this field is specified and the generated name exists, the server will NOT return a 409 - instead, it will either return 201 Created or 500 with Reason ServerTimeout indicating a unique name could not be found in the time allotted, and the client should retry (optionally after the time indicated in the Retry-After header).\n\nApplied only if Name is not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency",
"type": "string"
},
- "baseOSImagePullspec": {
- "description": "baseOSImagePullspec is the base OSImage we use to build our custom image. the MachineOSConfig object will use the in cluster image registry configuration. if you wish to use a mirror or any other settings specific to registries.conf, please specify those in the cluster wide registries.conf. The format of the image pullspec is: host[:port][/namespace]/name@sha256:\u003cdigest\u003e",
+ "labels": {
+ "description": "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "name": {
+ "description": "Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names",
"type": "string"
},
- "containerFile": {
- "description": "containerFile describes the custom data the user has specified to build into the image. this is also commonly called a Dockerfile and you can treat it as such. The content is the content of your Dockerfile.",
+ "namespace": {
+ "description": "Namespace defines the space within each name must be unique. An empty namespace is equivalent to the \"default\" namespace, but \"default\" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.\n\nMust be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces",
+ "type": "string"
+ },
+ "ownerReferences": {
+ "description": "List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSContainerfile"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReference"
},
"x-kubernetes-list-map-keys": [
- "containerfileArch"
+ "uid"
],
"x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "containerfileArch",
+ "x-kubernetes-patch-merge-key": "uid",
"x-kubernetes-patch-strategy": "merge"
- },
- "imageBuilder": {
- "description": "machineOSImageBuilder describes which image builder will be used in each build triggered by this MachineOSConfig",
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSImageBuilder"
- },
- "releaseVersion": {
- "description": "releaseVersion is associated with the base OS Image. This is the version of Openshift that the Base Image is associated with. This field is populated from the machine-config-osimageurl configmap in the openshift-machine-config-operator namespace. It will come in the format: 4.16.0-0.nightly-2024-04-03-065948 or any valid release. The MachineOSBuilder populates this field and validates that this is a valid stream. This is used as a label in the dockerfile that builds the OS image.",
- "type": "string"
- },
- "renderedImagePushSecret": {
- "description": "renderedImagePushSecret is the secret used to connect to a user registry. the final image push and pull secrets should be separate for security concerns. If the final image push secret is somehow exfiltrated, that gives someone the power to push images to the image repository. By comparison, if the final image pull secret gets exfiltrated, that only gives someone to pull images from the image repository. It's basically the principle of least permissions. this push secret will be used only by the MachineConfigController pod to push the image to the final destination. Not all nodes will need to push this image, most of them will only need to pull the image in order to use it.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.ImageSecretObjectReference"
- },
- "renderedImagePushspec": {
- "description": "renderedImagePushspec describes the location of the final image. the MachineOSConfig object will use the in cluster image registry configuration. if you wish to use a mirror or any other settings specific to registries.conf, please specify those in the cluster wide registries.conf. The format of the image pushspec is: host[:port][/namespace]/name:\u003ctag\u003e or svc_name.namespace.svc[:port]/repository/name:\u003ctag\u003e",
- "type": "string",
- "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "BuildInputs",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "ObjectMeta",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.BuildOutputs": {
- "description": "BuildOutputs holds all information needed to handle booting the image after a build",
+ "io.openshift.machine.v1beta1.Placement": {
+ "description": "Placement indicates where to create the instance in AWS",
"type": "object",
"properties": {
- "currentImagePullSecret": {
- "description": "currentImagePullSecret is the secret used to pull the final produced image. must live in the openshift-machine-config-operator namespace the final image push and pull secrets should be separate for security concerns. If the final image push secret is somehow exfiltrated, that gives someone the power to push images to the image repository. By comparison, if the final image pull secret gets exfiltrated, that only gives someone to pull images from the image repository. It's basically the principle of least permissions. this pull secret will be used on all nodes in the pool. These nodes will need to pull the final OS image and boot into it using rpm-ostree or bootc.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.ImageSecretObjectReference"
+ "availabilityZone": {
+ "description": "AvailabilityZone is the availability zone of the instance",
+ "type": "string"
+ },
+ "region": {
+ "description": "Region is the region to use to create the instance",
+ "type": "string"
+ },
+ "tenancy": {
+ "description": "Tenancy indicates if instance should run on shared or single-tenant hardware. There are supported 3 options: default, dedicated and host.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "BuildOutputs",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "Placement",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "fields-to-discriminateBy": {
- "currentImagePullSecret": "CurrentImagePullSecret"
- }
- }
- ]
+ }
},
- "io.openshift.machineconfiguration.v1alpha1.ImageSecretObjectReference": {
- "description": "Refers to the name of an image registry push/pull secret needed in the build process.",
+ "io.openshift.machine.v1beta1.ProviderSpec": {
+ "description": "ProviderSpec defines the configuration to use during node creation.",
"type": "object",
- "required": [
- "name"
- ],
"properties": {
- "name": {
- "description": "name is the name of the secret used to push or pull this MachineOSConfig object. this secret must be in the openshift-machine-config-operator namespace.",
- "type": "string",
- "default": ""
+ "value": {
+ "description": "Value is an inlined, serialized representation of the resource configuration. It is recommended that providers maintain their own versioned API types that should be serialized/deserialized from this field, akin to component config.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ImageSecretObjectReference",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "ProviderSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MCOObjectReference": {
- "description": "MCOObjectReference holds information about an object the MCO either owns or modifies in some way",
+ "io.openshift.machine.v1beta1.ResourceManagerTag": {
+ "description": "ResourceManagerTag is a tag to apply to GCP resources created for the cluster.",
"type": "object",
"required": [
- "name"
+ "parentID",
+ "key",
+ "value"
],
"properties": {
- "name": {
- "description": "name is the object name. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) It may consist of only alphanumeric characters, hyphens (-) and periods (.) and must be at most 253 characters in length.",
+ "key": {
+ "description": "key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty. Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `._-`.",
+ "type": "string",
+ "default": ""
+ },
+ "parentID": {
+ "description": "parentID is the ID of the hierarchical resource where the tags are defined e.g. at the Organization or the Project level. To find the Organization or Project ID ref https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects An OrganizationID can have a maximum of 32 characters and must consist of decimal numbers, and cannot have leading zeroes. A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.",
+ "type": "string",
+ "default": ""
+ },
+ "value": {
+ "description": "value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty. Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `_-.@%=+:,*#\u0026(){}[]` and spaces.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MCOObjectReference",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "ResourceManagerTag",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineConfigNode": {
- "description": "MachineConfigNode describes the health of the Machines on the system Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.machine.v1beta1.SecurityProfile": {
+ "description": "SecurityProfile specifies the Security profile settings for a virtual machine or virtual machine scale set.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec describes the configuration of the machine config node.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeSpec"
+ "encryptionAtHost": {
+ "description": "encryptionAtHost indicates whether Host Encryption should be enabled or disabled for a virtual machine or virtual machine scale set. This should be disabled when SecurityEncryptionType is set to DiskWithVMGuestState. Default is disabled.",
+ "type": "boolean"
},
- "status": {
- "description": "status describes the last observed state of this machine config node.",
+ "settings": {
+ "description": "settings specify the security type and the UEFI settings of the virtual machine. This field can be set for Confidential VMs and Trusted Launch for VMs.",
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeStatus"
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.SecuritySettings"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineConfigNode",
- "Scope": "Clustered"
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "SecurityProfile",
+ "Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeList": {
- "description": "MachineConfigNodeList describes all of the MachinesStates on the system\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.machine.v1beta1.SecuritySettings": {
+ "description": "SecuritySettings define the security type and the UEFI settings of the virtual machine.",
"type": "object",
- "required": [
- "metadata",
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNode"
- }
+ "confidentialVM": {
+ "description": "confidentialVM specifies the security configuration of the virtual machine. For more information regarding Confidential VMs, please refer to: https://learn.microsoft.com/azure/confidential-computing/confidential-vm-overview",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.ConfidentialVM"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "securityType": {
+ "description": "securityType specifies the SecurityType of the virtual machine. It has to be set to any specified value to enable UEFISettings. The default behavior is: UEFISettings will not be enabled unless this property is set.",
"type": "string"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "trustedLaunch": {
+ "description": "trustedLaunch specifies the security configuration of the virtual machine. For more information regarding TrustedLaunch for VMs, please refer to: https://learn.microsoft.com/azure/virtual-machines/trusted-launch",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.TrustedLaunch"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineConfigNodeList",
+ "Type": "nested",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "SecuritySettings",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "securityType",
+ "fields-to-discriminateBy": {
+ "confidentialVM": "ConfidentialVM",
+ "trustedLaunch": "TrustedLaunch"
+ }
+ }
+ ]
},
- "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeSpec": {
- "description": "MachineConfigNodeSpec describes the MachineConfigNode we are managing.",
+ "io.openshift.machine.v1beta1.SpotMarketOptions": {
+ "description": "SpotMarketOptions defines the options available to a user when configuring Machines to run on Spot instances. Most users should provide an empty struct.",
"type": "object",
- "required": [
- "node",
- "pool",
- "configVersion"
- ],
"properties": {
- "configVersion": {
- "description": "configVersion holds the desired config version for the node targeted by this machine config node resource. The desired version represents the machine config the node will attempt to update to. This gets set before the machine config operator validates the new machine config against the current machine config.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeSpecMachineConfigVersion"
- },
- "node": {
- "description": "node contains a reference to the node for this machine config node.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MCOObjectReference"
- },
- "pinnedImageSets": {
- "description": "pinnedImageSets holds the desired pinned image sets that this node should pin and pull.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeSpecPinnedImageSet"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "pool": {
- "description": "pool contains a reference to the machine config pool that this machine config node's referenced node belongs to.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MCOObjectReference"
+ "maxPrice": {
+ "description": "The maximum price the user is willing to pay for their instances Default: On-Demand price",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineConfigNodeSpec",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "SpotMarketOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeSpecMachineConfigVersion": {
- "description": "MachineConfigNodeSpecMachineConfigVersion holds the desired config version for the current observed machine config node. When Current is not equal to Desired; the MachineConfigOperator is in an upgrade phase and the machine config node will take account of upgrade related events. Otherwise they will be ignored given that certain operations happen both during the MCO's upgrade mode and the daily operations mode.",
+ "io.openshift.machine.v1beta1.SpotVMOptions": {
+ "description": "SpotVMOptions defines the options relevant to running the Machine on Spot VMs",
"type": "object",
- "required": [
- "desired"
- ],
"properties": {
- "desired": {
- "description": "desired is the name of the machine config that the the node should be upgraded to. This value is set when the machine config pool generates a new version of its rendered configuration. When this value is changed, the machine config daemon starts the node upgrade process. This value gets set in the machine config node spec once the machine config has been targeted for upgrade and before it is validated. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) It may consist of only alphanumeric characters, hyphens (-) and periods (.) and must be at most 253 characters in length.",
- "type": "string",
- "default": ""
+ "maxPrice": {
+ "description": "MaxPrice defines the maximum price the user is willing to pay for Spot VM instances",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineConfigNodeSpecMachineConfigVersion",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "SpotVMOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeSpecPinnedImageSet": {
+ "io.openshift.machine.v1beta1.TagSpecification": {
+ "description": "TagSpecification is the name/value pair for a tag",
"type": "object",
"required": [
- "name"
+ "name",
+ "value"
],
"properties": {
"name": {
- "description": "name is the name of the pinned image set. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) It may consist of only alphanumeric characters, hyphens (-) and periods (.) and must be at most 253 characters in length.",
+ "description": "Name of the tag",
+ "type": "string",
+ "default": ""
+ },
+ "value": {
+ "description": "Value of the tag",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineConfigNodeSpecPinnedImageSet",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "TagSpecification",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeStatus": {
- "description": "MachineConfigNodeStatus holds the reported information on a particular machine config node.",
+ "io.openshift.machine.v1beta1.TrustedLaunch": {
+ "description": "TrustedLaunch defines the UEFI settings for the virtual machine.",
"type": "object",
- "required": [
- "configVersion"
- ],
"properties": {
- "conditions": {
- "description": "conditions represent the observations of a machine config node's current state.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "configVersion": {
- "description": "configVersion describes the current and desired machine config for this node. The current version represents the current machine config for the node and is updated after a successful update. The desired version represents the machine config the node will attempt to update to. This desired machine config has been compared to the current machine config and has been validated by the machine config operator as one that is valid and that exists.",
+ "uefiSettings": {
+ "description": "uefiSettings specifies the security settings like secure boot and vTPM used while creating the virtual machine.",
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeStatusMachineConfigVersion"
- },
- "observedGeneration": {
- "description": "observedGeneration represents the generation observed by the controller. This field is updated when the controller observes a change to the desiredConfig in the configVersion of the machine config node spec.",
- "type": "integer",
- "format": "int64"
- },
- "pinnedImageSets": {
- "description": "pinnedImageSets describes the current and desired pinned image sets for this node. The current version is the generation of the pinned image set that has most recently been successfully pulled and pinned on this node. The desired version is the generation of the pinned image set that is targeted to be pulled and pinned on this node.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeStatusPinnedImageSet"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.UEFISettings"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineConfigNodeStatus",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "TrustedLaunch",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeStatusMachineConfigVersion": {
- "description": "MachineConfigNodeStatusMachineConfigVersion holds the current and desired config versions as last updated in the MCN status. When the current and desired versions are not matched, the machine config pool is processing an upgrade and the machine config node will monitor the upgrade process. When the current and desired versions do not match, the machine config node will ignore these events given that certain operations happen both during the MCO's upgrade mode and the daily operations mode.",
+ "io.openshift.machine.v1beta1.UEFISettings": {
+ "description": "UEFISettings specifies the security settings like secure boot and vTPM used while creating the virtual machine.",
"type": "object",
- "required": [
- "desired"
- ],
"properties": {
- "current": {
- "description": "current is the name of the machine config currently in use on the node. This value is updated once the machine config daemon has completed the update of the configuration for the node. This value should match the desired version unless an upgrade is in progress. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) It may consist of only alphanumeric characters, hyphens (-) and periods (.) and must be at most 253 characters in length.",
- "type": "string",
- "default": ""
+ "secureBoot": {
+ "description": "secureBoot specifies whether secure boot should be enabled on the virtual machine. Secure Boot verifies the digital signature of all boot components and halts the boot process if signature verification fails. If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.",
+ "type": "string"
},
- "desired": {
- "description": "desired is the MachineConfig the node wants to upgrade to. This value gets set in the machine config node status once the machine config has been validated against the current machine config. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) It may consist of only alphanumeric characters, hyphens (-) and periods (.) and must be at most 253 characters in length.",
- "type": "string",
- "default": ""
+ "virtualizedTrustedPlatformModule": {
+ "description": "virtualizedTrustedPlatformModule specifies whether vTPM should be enabled on the virtual machine. When enabled the virtualized trusted platform module measurements are used to create a known good boot integrity policy baseline. The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed. This is required to be enabled if SecurityEncryptionType is defined. If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineConfigNodeStatusMachineConfigVersion",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "UEFISettings",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeStatusPinnedImageSet": {
+ "io.openshift.machine.v1beta1.UnhealthyCondition": {
+ "description": "UnhealthyCondition represents a Node condition type and value with a timeout specified as a duration. When the named condition has been in the given status for at least the timeout value, a node is considered unhealthy.",
"type": "object",
"required": [
- "name"
+ "type",
+ "status",
+ "timeout"
],
"properties": {
- "currentGeneration": {
- "description": "currentGeneration is the generation of the pinned image set that has most recently been successfully pulled and pinned on this node.",
- "type": "integer",
- "format": "int32"
- },
- "desiredGeneration": {
- "description": "desiredGeneration version is the generation of the pinned image set that is targeted to be pulled and pinned on this node.",
- "type": "integer",
- "format": "int32"
- },
- "lastFailedGeneration": {
- "description": "lastFailedGeneration is the generation of the most recent pinned image set that failed to be pulled and pinned on this node.",
- "type": "integer",
- "format": "int32"
+ "status": {
+ "type": "string",
+ "default": ""
},
- "lastFailedGenerationErrors": {
- "description": "lastFailedGenerationErrors is a list of errors why the lastFailed generation failed to be pulled and pinned.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "timeout": {
+ "description": "Expects an unsigned duration string of decimal numbers each with optional fraction and a unit suffix, eg \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
},
- "name": {
- "description": "name is the name of the pinned image set. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) It may consist of only alphanumeric characters, hyphens (-) and periods (.) and must be at most 253 characters in length.",
+ "type": {
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineConfigNodeStatusPinnedImageSet",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "UnhealthyCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineConfigPoolReference": {
- "description": "Refers to the name of a MachineConfigPool (e.g., \"worker\", \"infra\", etc.): the MachineOSBuilder pod validates that the user has provided a valid pool",
+ "io.openshift.machine.v1beta1.VMDiskSecurityProfile": {
+ "description": "VMDiskSecurityProfile specifies the security profile settings for the managed disk. It can be set only for Confidential VMs.",
"type": "object",
- "required": [
- "name"
- ],
"properties": {
- "name": {
- "description": "name of the MachineConfigPool object.",
- "type": "string",
- "default": ""
+ "diskEncryptionSet": {
+ "description": "diskEncryptionSet specifies the customer managed disk encryption set resource id for the managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and VMGuest blob.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.DiskEncryptionSetParameters"
+ },
+ "securityEncryptionType": {
+ "description": "securityEncryptionType specifies the encryption type of the managed disk. It is set to DiskWithVMGuestState to encrypt the managed disk along with the VMGuestState blob, and to VMGuestStateOnly to encrypt the VMGuestState blob only. When set to VMGuestStateOnly, the vTPM should be enabled. When set to DiskWithVMGuestState, both SecureBoot and vTPM should be enabled. If the above conditions are not fulfilled, the VM will not be created and the respective error will be returned. It can be set only for Confidential VMs. Confidential VMs are defined by their SecurityProfile.SecurityType being set to ConfidentialVM, the SecurityEncryptionType of their OS disk being set to one of the allowed values and by enabling the respective SecurityProfile.UEFISettings of the VM (i.e. vTPM and SecureBoot), depending on the selected SecurityEncryptionType. For further details on Azure Confidential VMs, please refer to the respective documentation: https://learn.microsoft.com/azure/confidential-computing/confidential-vm-overview",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineConfigPoolReference",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "VMDiskSecurityProfile",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineOSBuild": {
- "description": "MachineOSBuild describes a build process managed and deployed by the MCO Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.machine.v1beta1.VSphereMachineProviderSpec": {
+ "description": "VSphereMachineProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an VSphere virtual machine. It is used by the vSphere machine actuator to create a single Machine. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "spec"
+ "template",
+ "network"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
+ "cloneMode": {
+ "description": "CloneMode specifies the type of clone operation. The LinkedClone mode is only support for templates that have at least one snapshot. If the template has no snapshots, then CloneMode defaults to FullClone. When LinkedClone mode is enabled the DiskGiB field is ignored as it is not possible to expand disks of linked clones. Defaults to FullClone. When using LinkedClone, if no snapshots exist for the source template, falls back to FullClone.",
+ "type": "string"
+ },
+ "credentialsSecret": {
+ "description": "CredentialsSecret is a reference to the secret with vSphere credentials.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "diskGiB": {
+ "description": "DiskGiB is the size of a virtual machine's disk, in GiB. Defaults to the analogue property value in the template from which this machine is cloned. This parameter will be ignored if 'LinkedClone' CloneMode is set.",
+ "type": "integer",
+ "format": "int32"
+ },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
+ "memoryMiB": {
+ "description": "MemoryMiB is the size of a virtual machine's memory, in MiB. Defaults to the analogue property value in the template from which this machine is cloned.",
+ "type": "integer",
+ "format": "int64"
+ },
"metadata": {
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "spec": {
- "description": "spec describes the configuration of the machine os build",
+ "network": {
+ "description": "Network is the network configuration for this machine's VM.",
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSBuildSpec"
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.NetworkSpec"
},
- "status": {
- "description": "status describes the lst observed state of this machine os build",
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSBuildStatus"
+ "numCPUs": {
+ "description": "NumCPUs is the number of virtual processors in a virtual machine. Defaults to the analogue property value in the template from which this machine is cloned.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "numCoresPerSocket": {
+ "description": "NumCPUs is the number of cores among which to distribute CPUs in this virtual machine. Defaults to the analogue property value in the template from which this machine is cloned.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "snapshot": {
+ "description": "Snapshot is the name of the snapshot from which the VM was cloned",
+ "type": "string",
+ "default": ""
+ },
+ "tagIDs": {
+ "description": "tagIDs is an optional set of tags to add to an instance. Specified tagIDs must use URN-notation instead of display names. A maximum of 10 tag IDs may be specified.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "template": {
+ "description": "Template is the name, inventory path, or instance UUID of the template used to clone new machines.",
+ "type": "string",
+ "default": ""
+ },
+ "userDataSecret": {
+ "description": "UserDataSecret contains a local reference to a secret that contains the UserData to apply to the instance",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "workspace": {
+ "description": "Workspace describes the workspace to use for the machine.",
+ "$ref": "#/definitions/io.openshift.machine.v1beta1.Workspace"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineOSBuild",
- "Scope": "Clustered"
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "VSphereMachineProviderSpec",
+ "Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineOSBuildList": {
- "description": "MachineOSBuildList describes all of the Builds on the system\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.machine.v1beta1.VSphereMachineProviderStatus": {
+ "description": "VSphereMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains VSphere-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "metadata",
- "items"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "items": {
+ "conditions": {
+ "description": "Conditions is a set of conditions associated with the Machine to indicate errors or other status",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSBuild"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
}
},
+ "instanceId": {
+ "description": "InstanceID is the ID of the instance in VSphere",
+ "type": "string"
+ },
+ "instanceState": {
+ "description": "InstanceState is the provisioning state of the VSphere Instance.",
+ "type": "string"
+ },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "taskRef": {
+ "description": "TaskRef is a managed object reference to a Task related to the machine. This value is set automatically at runtime and should not be set or modified by users.",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineOSBuildList",
+ "Type": "object",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "VSphereMachineProviderStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineOSBuildSpec": {
- "description": "MachineOSBuildSpec describes information about a build process primarily populated from a MachineOSConfig object.",
+ "io.openshift.machine.v1beta1.Workspace": {
+ "description": "WorkspaceConfig defines a workspace configuration for the vSphere cloud provider.",
"type": "object",
- "required": [
- "configGeneration",
- "desiredConfig",
- "machineOSConfig",
- "version",
- "renderedImagePushspec"
- ],
"properties": {
- "configGeneration": {
- "description": "configGeneration tracks which version of MachineOSConfig this build is based off of",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "datacenter": {
+ "description": "Datacenter is the datacenter in which VMs are created/located.",
+ "type": "string"
},
- "desiredConfig": {
- "description": "desiredConfig is the desired config we want to build an image for.",
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.RenderedMachineConfigReference"
+ "datastore": {
+ "description": "Datastore is the datastore in which VMs are created/located.",
+ "type": "string"
},
- "machineOSConfig": {
- "description": "machineOSConfig is the config object which the build is based off of",
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSConfigReference"
+ "folder": {
+ "description": "Folder is the folder in which VMs are created/located.",
+ "type": "string"
},
- "renderedImagePushspec": {
- "description": "renderedImagePushspec is set from the MachineOSConfig The format of the image pullspec is: host[:port][/namespace]/name:\u003ctag\u003e or svc_name.namespace.svc[:port]/repository/name:\u003ctag\u003e",
- "type": "string",
- "default": ""
+ "resourcePool": {
+ "description": "ResourcePool is the resource pool in which VMs are created/located.",
+ "type": "string"
},
- "version": {
- "description": "version tracks the newest MachineOSBuild for each MachineOSConfig",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "server": {
+ "description": "Server is the IP address or FQDN of the vSphere endpoint.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineOSBuildSpec",
+ "Group": "machine.openshift.io",
+ "Version": "v1beta1",
+ "Kind": "Workspace",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineOSBuildStatus": {
- "description": "MachineOSBuildStatus describes the state of a build and other helpful information.",
+ "io.openshift.machineconfiguration.v1.CertExpiry": {
+ "description": "ceryExpiry contains the bundle name and the expiry date",
"type": "object",
"required": [
- "buildStart"
+ "bundle",
+ "subject"
],
"properties": {
- "buildEnd": {
- "description": "buildEnd describes when the build ended.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "bundle": {
+ "description": "bundle is the name of the bundle in which the subject certificate resides",
+ "type": "string",
+ "default": ""
},
- "buildStart": {
- "description": "buildStart describes when the build started.",
+ "expiry": {
+ "description": "expiry is the date after which the certificate will no longer be valid",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "builderReference": {
- "description": "ImageBuilderType describes the image builder set in the MachineOSConfig",
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSBuilderReference"
- },
- "conditions": {
- "description": "conditions are state related conditions for the build. Valid types are: Prepared, Building, Failed, Interrupted, and Succeeded once a Build is marked as Failed, no future conditions can be set. This is enforced by the MCO.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "finalImagePullspec": {
- "description": "finalImagePushSpec describes the fully qualified pushspec produced by this build that the final image can be. Must be in sha format.",
- "type": "string"
- },
- "relatedObjects": {
- "description": "relatedObjects is a list of objects that are related to the build process.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.ObjectReference"
- }
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineOSBuildStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machineconfiguration.v1alpha1.MachineOSBuilderReference": {
- "description": "MachineOSBuilderReference describes which ImageBuilder backend to use for this build/",
- "type": "object",
- "required": [
- "imageBuilderType"
- ],
- "properties": {
- "buildPod": {
- "description": "relatedObjects is a list of objects that are related to the build process.",
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.ObjectReference"
- },
- "imageBuilderType": {
- "description": "ImageBuilderType describes the image builder set in the MachineOSConfig",
+ "subject": {
+ "description": "subject is the subject of the certificate",
"type": "string",
"default": ""
}
@@ -96266,21 +97011,13 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineOSBuilderReference",
+ "Version": "v1",
+ "Kind": "CertExpiry",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "imageBuilderType",
- "fields-to-discriminateBy": {
- "buildPod": "PodImageBuilder"
- }
- }
- ]
+ }
},
- "io.openshift.machineconfiguration.v1alpha1.MachineOSConfig": {
- "description": "MachineOSConfig describes the configuration for a build process managed by the MCO Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.machineconfiguration.v1.ContainerRuntimeConfig": {
+ "description": "ContainerRuntimeConfig describes a customized Container Runtime configuration.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"spec"
@@ -96299,28 +97036,62 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec describes the configuration of the machineosconfig",
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSConfigSpec"
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ContainerRuntimeConfigSpec"
},
"status": {
- "description": "status describes the status of the machineosconfig",
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSConfigStatus"
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ContainerRuntimeConfigStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineOSConfig",
+ "Version": "v1",
+ "Kind": "ContainerRuntimeConfig",
"Scope": "Clustered"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineOSConfigList": {
- "description": "MachineOSConfigList describes all configurations for image builds on the system\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.machineconfiguration.v1.ContainerRuntimeConfigCondition": {
+ "description": "ContainerRuntimeConfigCondition defines the state of the ContainerRuntimeConfig",
+ "type": "object",
+ "properties": {
+ "lastTransitionTime": {
+ "description": "lastTransitionTime is the time of the last update to the current status object.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "description": "message provides additional information about the current condition. This is only to be consumed by humans.",
+ "type": "string"
+ },
+ "reason": {
+ "description": "reason is the reason for the condition's last transition. Reasons are PascalCase",
+ "type": "string"
+ },
+ "status": {
+ "description": "status of the condition, one of True, False, Unknown.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "type specifies the state of the operator's reconciliation functionality.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "ContainerRuntimeConfigCondition",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.ContainerRuntimeConfigList": {
+ "description": "ContainerRuntimeConfigList is a list of ContainerRuntimeConfig resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -96332,7 +97103,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSConfig"
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ContainerRuntimeConfig"
}
},
"kind": {
@@ -96347,88 +97118,376 @@
"x-fabric8-info": {
"Type": "list",
"Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineOSConfigList",
+ "Version": "v1",
+ "Kind": "ContainerRuntimeConfigList",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineOSConfigReference": {
- "description": "MachineOSConfigReference refers to the MachineOSConfig this build is based off of",
+ "io.openshift.machineconfiguration.v1.ContainerRuntimeConfigSpec": {
+ "description": "ContainerRuntimeConfigSpec defines the desired state of ContainerRuntimeConfig",
"type": "object",
- "required": [
- "name"
- ],
"properties": {
- "name": {
- "description": "name of the MachineOSConfig",
- "type": "string",
- "default": ""
+ "containerRuntimeConfig": {
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ContainerRuntimeConfiguration"
+ },
+ "machineConfigPoolSelector": {
+ "description": "MachineConfigPoolSelector selects which pools the ContainerRuntimeConfig shoud apply to. A nil selector will result in no pools being selected.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineOSConfigReference",
+ "Version": "v1",
+ "Kind": "ContainerRuntimeConfigSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineOSConfigSpec": {
- "description": "MachineOSConfigSpec describes user-configurable options as well as information about a build process.",
+ "io.openshift.machineconfiguration.v1.ContainerRuntimeConfigStatus": {
+ "description": "ContainerRuntimeConfigStatus defines the observed state of a ContainerRuntimeConfig",
"type": "object",
- "required": [
- "machineConfigPool",
- "buildInputs"
- ],
"properties": {
- "buildInputs": {
- "description": "buildInputs is where user input options for the build live",
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.BuildInputs"
- },
- "buildOutputs": {
- "description": "buildOutputs is where user input options for the build live",
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.BuildOutputs"
+ "conditions": {
+ "description": "conditions represents the latest available observations of current state.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ContainerRuntimeConfigCondition"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "machineConfigPool": {
- "description": "machineConfigPool is the pool which the build is for",
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigPoolReference"
+ "observedGeneration": {
+ "description": "observedGeneration represents the generation observed by the controller.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineOSConfigSpec",
+ "Version": "v1",
+ "Kind": "ContainerRuntimeConfigStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineOSConfigStatus": {
- "description": "MachineOSConfigStatus describes the status this config object and relates it to the builds associated with this MachineOSConfig",
+ "io.openshift.machineconfiguration.v1.ContainerRuntimeConfiguration": {
+ "description": "ContainerRuntimeConfiguration defines the tuneables of the container runtime",
"type": "object",
"properties": {
- "conditions": {
- "description": "conditions are state related conditions for the config.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
+ "defaultRuntime": {
+ "description": "defaultRuntime is the name of the OCI runtime to be used as the default.",
+ "type": "string"
},
- "currentImagePullspec": {
- "description": "currentImagePullspec is the fully qualified image pull spec used by the MCO to pull down the new OSImage. This must include sha256.",
+ "logLevel": {
+ "description": "logLevel specifies the verbosity of the logs based on the level it is set to. Options are fatal, panic, error, warn, info, and debug.",
+ "type": "string"
+ },
+ "logSizeMax": {
+ "description": "logSizeMax specifies the Maximum size allowed for the container log file. Negative numbers indicate that no size limit is imposed. If it is positive, it must be \u003e= 8192 to match/exceed conmon's read buffer.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
+ },
+ "overlaySize": {
+ "description": "overlaySize specifies the maximum size of a container image. This flag can be used to set quota on the size of container images. (default: 10GB)",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"
+ },
+ "pidsLimit": {
+ "description": "pidsLimit specifies the maximum number of processes allowed in a container",
+ "type": "integer",
+ "format": "int64"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "ContainerRuntimeConfiguration",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.ControllerCertificate": {
+ "description": "ControllerCertificate contains info about a specific cert.",
+ "type": "object",
+ "required": [
+ "subject",
+ "signer",
+ "bundleFile"
+ ],
+ "properties": {
+ "bundleFile": {
+ "description": "bundleFile is the larger bundle a cert comes from",
+ "type": "string",
+ "default": ""
+ },
+ "notAfter": {
+ "description": "notAfter is the upper boundary for validity",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "notBefore": {
+ "description": "notBefore is the lower boundary for validity",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "signer": {
+ "description": "signer is the cert Issuer",
+ "type": "string",
+ "default": ""
+ },
+ "subject": {
+ "description": "subject is the cert subject",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "ControllerCertificate",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.ControllerConfig": {
+ "description": "ControllerConfig describes configuration for MachineConfigController. This is currently only used to drive the MachineConfig objects generated by the TemplateController.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ControllerConfigSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ControllerConfigStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "ControllerConfig",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.ControllerConfigList": {
+ "description": "ControllerConfigList is a list of ControllerConfig resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ControllerConfig"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "ControllerConfigList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.ControllerConfigSpec": {
+ "description": "ControllerConfigSpec is the spec for ControllerConfig resource.",
+ "type": "object",
+ "required": [
+ "clusterDNSIP",
+ "cloudProviderConfig",
+ "kubeAPIServerServingCAData",
+ "rootCAData",
+ "cloudProviderCAData",
+ "additionalTrustBundle",
+ "images",
+ "baseOSContainerImage",
+ "releaseImage",
+ "proxy",
+ "infra",
+ "dns",
+ "ipFamilies",
+ "network"
+ ],
+ "properties": {
+ "additionalTrustBundle": {
+ "description": "additionalTrustBundle is a certificate bundle that will be added to the nodes trusted certificate store.",
+ "type": "string",
+ "format": "byte"
+ },
+ "baseOSContainerImage": {
+ "description": "BaseOSContainerImage is the new-format container image for operating system updates.",
+ "type": "string",
+ "default": ""
+ },
+ "baseOSExtensionsContainerImage": {
+ "description": "BaseOSExtensionsContainerImage is the matching extensions container for the new-format container",
+ "type": "string",
+ "default": ""
+ },
+ "cloudProviderCAData": {
+ "description": "cloudProvider specifies the cloud provider CA data",
+ "type": "string",
+ "format": "byte"
+ },
+ "cloudProviderConfig": {
+ "description": "cloudProviderConfig is the configuration for the given cloud provider",
+ "type": "string",
+ "default": ""
+ },
+ "clusterDNSIP": {
+ "description": "clusterDNSIP is the cluster DNS IP address",
+ "type": "string",
+ "default": ""
+ },
+ "dns": {
+ "description": "dns holds the cluster dns details",
+ "$ref": "#/definitions/io.openshift.config.v1.DNS"
+ },
+ "etcdDiscoveryDomain": {
+ "description": "etcdDiscoveryDomain is deprecated, use Infra.Status.EtcdDiscoveryDomain instead",
+ "type": "string"
+ },
+ "imageRegistryBundleData": {
+ "description": "imageRegistryBundleData is the ImageRegistryData",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ImageRegistryBundle"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "imageRegistryBundleUserData": {
+ "description": "imageRegistryBundleUserData is Image Registry Data provided by the user",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ImageRegistryBundle"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "images": {
+ "description": "images is map of images that are used by the controller to render templates under ./templates/",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "infra": {
+ "description": "infra holds the infrastructure details",
+ "$ref": "#/definitions/io.openshift.config.v1.Infrastructure"
+ },
+ "internalRegistryPullSecret": {
+ "description": "internalRegistryPullSecret is the pull secret for the internal registry, used by rpm-ostree to pull images from the internal registry if present",
+ "type": "string",
+ "format": "byte"
+ },
+ "ipFamilies": {
+ "description": "ipFamilies indicates the IP families in use by the cluster network",
+ "type": "string",
+ "default": ""
+ },
+ "kubeAPIServerServingCAData": {
+ "description": "kubeAPIServerServingCAData managed Kubelet to API Server Cert... Rotated automatically",
+ "type": "string",
+ "format": "byte"
+ },
+ "network": {
+ "description": "Network contains additional network related information",
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.NetworkInfo"
+ },
+ "networkType": {
+ "description": "networkType holds the type of network the cluster is using XXX: this is temporary and will be dropped as soon as possible in favor of a better support to start network related services the proper way. Nobody is also changing this once the cluster is up and running the first time, so, disallow regeneration if this changes.",
+ "type": "string"
+ },
+ "osImageURL": {
+ "description": "OSImageURL is the old-format container image that contains the OS update payload.",
+ "type": "string",
+ "default": ""
+ },
+ "platform": {
+ "description": "platform is deprecated, use Infra.Status.PlatformStatus.Type instead",
"type": "string"
},
+ "proxy": {
+ "description": "proxy holds the current proxy configuration for the nodes",
+ "$ref": "#/definitions/io.openshift.config.v1.ProxyStatus"
+ },
+ "pullSecret": {
+ "description": "pullSecret is the default pull secret that needs to be installed on all machines.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "releaseImage": {
+ "description": "releaseImage is the image used when installing the cluster",
+ "type": "string",
+ "default": ""
+ },
+ "rootCAData": {
+ "description": "rootCAData specifies the root CA data",
+ "type": "string",
+ "format": "byte"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "ControllerConfigSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.ControllerConfigStatus": {
+ "description": "ControllerConfigStatus is the status for ControllerConfig",
+ "type": "object",
+ "properties": {
+ "conditions": {
+ "description": "conditions represents the latest available observations of current state.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ControllerConfigStatusCondition"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "controllerCertificates": {
+ "description": "controllerCertificates represents the latest available observations of the automatically rotating certificates in the MCO.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.ControllerCertificate"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
"observedGeneration": {
- "description": "observedGeneration represents the generation observed by the controller. this field is updated when the user changes the configuration in BuildSettings or the MCP this object is associated with.",
+ "description": "observedGeneration represents the generation observed by the controller.",
"type": "integer",
"format": "int64"
}
@@ -96436,25 +97495,39 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineOSConfigStatus",
+ "Version": "v1",
+ "Kind": "ControllerConfigStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineOSContainerfile": {
- "description": "MachineOSContainerfile contains all custom content the user wants built into the image",
+ "io.openshift.machineconfiguration.v1.ControllerConfigStatusCondition": {
+ "description": "ControllerConfigStatusCondition contains condition information for ControllerConfigStatus",
"type": "object",
"required": [
- "content"
+ "type",
+ "status",
+ "lastTransitionTime"
],
"properties": {
- "containerfileArch": {
- "description": "containerfileArch describes the architecture this containerfile is to be built for this arch is optional. If the user does not specify an architecture, it is assumed that the content can be applied to all architectures, or in a single arch cluster: the only architecture.",
+ "lastTransitionTime": {
+ "description": "lastTransitionTime is the time of the last update to the current status object.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "description": "message provides additional information about the current condition. This is only to be consumed by humans.",
+ "type": "string"
+ },
+ "reason": {
+ "description": "reason is the reason for the condition's last transition. Reasons are PascalCase",
+ "type": "string"
+ },
+ "status": {
+ "description": "status of the condition, one of True, False, Unknown.",
"type": "string",
"default": ""
},
- "content": {
- "description": "content is the custom content to be built",
+ "type": {
+ "description": "type specifies the state of the operator's reconciliation functionality.",
"type": "string",
"default": ""
}
@@ -96462,93 +97535,4880 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineOSContainerfile",
+ "Version": "v1",
+ "Kind": "ControllerConfigStatusCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.MachineOSImageBuilder": {
+ "io.openshift.machineconfiguration.v1.ImageRegistryBundle": {
+ "description": "ImageRegistryBundle contains information for writing image registry certificates",
"type": "object",
"required": [
- "imageBuilderType"
+ "file",
+ "data"
],
"properties": {
- "imageBuilderType": {
- "description": "imageBuilderType specifies the backend to be used to build the image. Valid options are: PodImageBuilder",
+ "data": {
+ "description": "data holds the contents of the bundle that will be written to the file location",
+ "type": "string",
+ "format": "byte"
+ },
+ "file": {
+ "description": "file holds the name of the file where the bundle will be written to disk",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryBundle",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.KubeletConfig": {
+ "description": "KubeletConfig describes a customized Kubelet configuration.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.KubeletConfigSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.KubeletConfigStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "KubeletConfig",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.KubeletConfigCondition": {
+ "description": "KubeletConfigCondition defines the state of the KubeletConfig",
+ "type": "object",
+ "properties": {
+ "lastTransitionTime": {
+ "description": "lastTransitionTime is the time of the last update to the current status object.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "description": "message provides additional information about the current condition. This is only to be consumed by humans.",
+ "type": "string"
+ },
+ "reason": {
+ "description": "reason is the reason for the condition's last transition. Reasons are PascalCase",
+ "type": "string"
+ },
+ "status": {
+ "description": "status of the condition, one of True, False, Unknown.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "type specifies the state of the operator's reconciliation functionality.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "MachineOSImageBuilder",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "KubeletConfigCondition",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.KubeletConfigList": {
+ "description": "KubeletConfigList is a list of KubeletConfig resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.KubeletConfig"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "KubeletConfigList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.KubeletConfigSpec": {
+ "description": "KubeletConfigSpec defines the desired state of KubeletConfig",
+ "type": "object",
+ "properties": {
+ "autoSizingReserved": {
+ "type": "boolean"
+ },
+ "kubeletConfig": {
+ "description": "kubeletConfig fields are defined in kubernetes upstream. Please refer to the types defined in the version/commit used by OpenShift of the upstream kubernetes. It's important to note that, since the fields of the kubelet configuration are directly fetched from upstream the validation of those values is handled directly by the kubelet. Please refer to the upstream version of the relevant kubernetes for the valid values of these fields. Invalid values of the kubelet configuration fields may render cluster nodes unusable.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "logLevel": {
+ "type": "integer",
+ "format": "int32"
+ },
+ "machineConfigPoolSelector": {
+ "description": "MachineConfigPoolSelector selects which pools the KubeletConfig shoud apply to. A nil selector will result in no pools being selected.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ },
+ "tlsSecurityProfile": {
+ "description": "If unset, the default is based on the apiservers.config.openshift.io/cluster resource. Note that only Old and Intermediate profiles are currently supported, and the maximum available minTLSVersion is VersionTLS12.",
+ "$ref": "#/definitions/io.openshift.config.v1.TLSSecurityProfile"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "KubeletConfigSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.KubeletConfigStatus": {
+ "description": "KubeletConfigStatus defines the observed state of a KubeletConfig",
+ "type": "object",
+ "properties": {
+ "conditions": {
+ "description": "conditions represents the latest available observations of current state.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.KubeletConfigCondition"
+ }
+ },
+ "observedGeneration": {
+ "description": "observedGeneration represents the generation observed by the controller.",
+ "type": "integer",
+ "format": "int64"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "KubeletConfigStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.MachineConfig": {
+ "description": "MachineConfig defines the configuration for a machine\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigSpec"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "MachineConfig",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.MachineConfigList": {
+ "description": "MachineConfigList is a list of MachineConfig resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfig"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "MachineConfigList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.MachineConfigPool": {
+ "description": "MachineConfigPool describes a pool of MachineConfigs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigPoolSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigPoolStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "MachineConfigPool",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.MachineConfigPoolCondition": {
+ "description": "MachineConfigPoolCondition contains condition information for an MachineConfigPool.",
+ "type": "object",
+ "properties": {
+ "lastTransitionTime": {
+ "description": "lastTransitionTime is the timestamp corresponding to the last status change of this condition.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "description": "message is a human readable description of the details of the last transition, complementing reason.",
+ "type": "string",
+ "default": ""
+ },
+ "reason": {
+ "description": "reason is a brief machine readable explanation for the condition's last transition.",
+ "type": "string",
+ "default": ""
+ },
+ "status": {
+ "description": "status of the condition, one of ('True', 'False', 'Unknown').",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "type of the condition, currently ('Done', 'Updating', 'Failed').",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "MachineConfigPoolCondition",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.MachineConfigPoolList": {
+ "description": "MachineConfigPoolList is a list of MachineConfigPool resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigPool"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "MachineConfigPoolList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.MachineConfigPoolSpec": {
+ "description": "MachineConfigPoolSpec is the spec for MachineConfigPool resource.",
+ "type": "object",
+ "properties": {
+ "configuration": {
+ "description": "The targeted MachineConfig object for the machine config pool.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigPoolStatusConfiguration"
+ },
+ "machineConfigSelector": {
+ "description": "machineConfigSelector specifies a label selector for MachineConfigs. Refer https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ on how label and selectors work.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ },
+ "maxUnavailable": {
+ "description": "maxUnavailable defines either an integer number or percentage of nodes in the pool that can go Unavailable during an update. This includes nodes Unavailable for any reason, including user initiated cordons, failing nodes, etc. The default value is 1.\n\nA value larger than 1 will mean multiple nodes going unavailable during the update, which may affect your workload stress on the remaining nodes. You cannot set this value to 0 to stop updates (it will default back to 1); to stop updates, use the 'paused' property instead. Drain will respect Pod Disruption Budgets (PDBs) such as etcd quorum guards, even if maxUnavailable is greater than one.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
+ },
+ "nodeSelector": {
+ "description": "nodeSelector specifies a label selector for Machines",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ },
+ "paused": {
+ "description": "paused specifies whether or not changes to this machine config pool should be stopped. This includes generating new desiredMachineConfig and update of machines.",
+ "type": "boolean",
+ "default": false
+ },
+ "pinnedImageSets": {
+ "description": "pinnedImageSets specifies a sequence of PinnedImageSetRef objects for the pool. Nodes within this pool will preload and pin images defined in the PinnedImageSet. Before pulling images the MachineConfigDaemon will ensure the total uncompressed size of all the images does not exceed available resources. If the total size of the images exceeds the available resources the controller will report a Degraded status to the MachineConfigPool and not attempt to pull any images. Also to help ensure the kubelet can mitigate storage risk, the pinned_image configuration and subsequent service reload will happen only after all of the images have been pulled for each set. Images from multiple PinnedImageSets are loaded and pinned sequentially as listed. Duplicate and existing images will be skipped.\n\nAny failure to prefetch or pin images will result in a Degraded pool. Resolving these failures is the responsibility of the user. The admin should be proactive in ensuring adequate storage and proper image authentication exists in advance.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.PinnedImageSetRef"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "MachineConfigPoolSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.MachineConfigPoolStatus": {
+ "description": "MachineConfigPoolStatus is the status for MachineConfigPool resource.",
+ "type": "object",
+ "properties": {
+ "certExpirys": {
+ "description": "certExpirys keeps track of important certificate expiration data",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.CertExpiry"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "conditions": {
+ "description": "conditions represents the latest available observations of current state.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigPoolCondition"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "configuration": {
+ "description": "configuration represents the current MachineConfig object for the machine config pool.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.MachineConfigPoolStatusConfiguration"
+ },
+ "degradedMachineCount": {
+ "description": "degradedMachineCount represents the total number of machines marked degraded (or unreconcilable). A node is marked degraded if applying a configuration failed..",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "machineCount": {
+ "description": "machineCount represents the total number of machines in the machine config pool.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "observedGeneration": {
+ "description": "observedGeneration represents the generation observed by the controller.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "poolSynchronizersStatus": {
+ "description": "poolSynchronizersStatus is the status of the machines managed by the pool synchronizers.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1.PoolSynchronizerStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "poolSynchronizerType"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "readyMachineCount": {
+ "description": "readyMachineCount represents the total number of ready machines targeted by the pool.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "unavailableMachineCount": {
+ "description": "unavailableMachineCount represents the total number of unavailable (non-ready) machines targeted by the pool. A node is marked unavailable if it is in updating state or NodeReady condition is false.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "updatedMachineCount": {
+ "description": "updatedMachineCount represents the total number of machines targeted by the pool that have the CurrentMachineConfig as their config.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "MachineConfigPoolStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.MachineConfigPoolStatusConfiguration": {
+ "description": "MachineConfigPoolStatusConfiguration stores the current configuration for the pool, and optionally also stores the list of MachineConfig objects used to generate the configuration.",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "API version of the referent.",
+ "type": "string"
+ },
+ "fieldPath": {
+ "description": "If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: \"spec.containers{name}\" (where \"name\" refers to the name of the container that triggered the event) or if no container name is specified \"spec.containers[2]\" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object.",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "name": {
+ "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names",
+ "type": "string"
+ },
+ "namespace": {
+ "description": "Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/",
+ "type": "string"
+ },
+ "resourceVersion": {
+ "description": "Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency",
+ "type": "string"
+ },
+ "source": {
+ "description": "source is the list of MachineConfig objects that were used to generate the single MachineConfig object specified in `content`.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "uid": {
+ "description": "UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "MachineConfigPoolStatusConfiguration",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.MachineConfigSpec": {
+ "description": "MachineConfigSpec is the spec for MachineConfig",
+ "type": "object",
+ "properties": {
+ "baseOSExtensionsContainerImage": {
+ "description": "BaseOSExtensionsContainerImage specifies the remote location that will be used to fetch the extensions container matching a new-format OS image",
+ "type": "string",
+ "default": ""
+ },
+ "config": {
+ "description": "Config is a Ignition Config object.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "extensions": {
+ "description": "extensions contains a list of additional features that can be enabled on host",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "fips": {
+ "description": "fips controls FIPS mode",
+ "type": "boolean",
+ "default": false
+ },
+ "kernelArguments": {
+ "description": "kernelArguments contains a list of kernel arguments to be added",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "kernelType": {
+ "description": "kernelType contains which kernel we want to be running like default (traditional), realtime, 64k-pages (aarch64 only).",
+ "type": "string",
+ "default": ""
+ },
+ "osImageURL": {
+ "description": "OSImageURL specifies the remote location that will be used to fetch the OS.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "MachineConfigSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.NetworkInfo": {
+ "description": "Network contains network related configuration",
+ "type": "object",
+ "required": [
+ "mtuMigration"
+ ],
+ "properties": {
+ "mtuMigration": {
+ "description": "MTUMigration contains the MTU migration configuration.",
+ "$ref": "#/definitions/io.openshift.config.v1.MTUMigration"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "NetworkInfo",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.PinnedImageSetRef": {
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "name": {
+ "description": "name is a reference to the name of a PinnedImageSet. Must adhere to RFC-1123 (https://tools.ietf.org/html/rfc1123). Made up of one of more period-separated (.) segments, where each segment consists of alphanumeric characters and hyphens (-), must begin and end with an alphanumeric character, and is at most 63 characters in length. The total length of the name must not exceed 253 characters.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "PinnedImageSetRef",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1.PoolSynchronizerStatus": {
+ "type": "object",
+ "required": [
+ "poolSynchronizerType",
+ "machineCount",
+ "updatedMachineCount",
+ "readyMachineCount",
+ "availableMachineCount",
+ "unavailableMachineCount"
+ ],
+ "properties": {
+ "availableMachineCount": {
+ "description": "availableMachineCount is the number of machines managed by the node synchronizer which are available.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "machineCount": {
+ "description": "machineCount is the number of machines that are managed by the node synchronizer.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change that has been applied.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "poolSynchronizerType": {
+ "description": "poolSynchronizerType describes the type of the pool synchronizer.",
+ "type": "string",
+ "default": ""
+ },
+ "readyMachineCount": {
+ "description": "readyMachineCount is the number of machines managed by the node synchronizer that are in a ready state.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "unavailableMachineCount": {
+ "description": "unavailableMachineCount is the number of machines managed by the node synchronizer but are unavailable.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "updatedMachineCount": {
+ "description": "updatedMachineCount is the number of machines that have been updated by the node synchronizer.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1",
+ "Kind": "PoolSynchronizerStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.BuildInputs": {
+ "description": "BuildInputs holds all of the information needed to trigger a build",
+ "type": "object",
+ "required": [
+ "baseImagePullSecret",
+ "imageBuilder",
+ "renderedImagePushSecret",
+ "renderedImagePushspec"
+ ],
+ "properties": {
+ "baseImagePullSecret": {
+ "description": "baseImagePullSecret is the secret used to pull the base image. must live in the openshift-machine-config-operator namespace",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.ImageSecretObjectReference"
+ },
+ "baseOSExtensionsImagePullspec": {
+ "description": "baseOSExtensionsImagePullspec is the base Extensions image used in the build process the MachineOSConfig object will use the in cluster image registry configuration. if you wish to use a mirror or any other settings specific to registries.conf, please specify those in the cluster wide registries.conf. The format of the image pullspec is: host[:port][/namespace]/name@sha256:\u003cdigest\u003e",
+ "type": "string"
+ },
+ "baseOSImagePullspec": {
+ "description": "baseOSImagePullspec is the base OSImage we use to build our custom image. the MachineOSConfig object will use the in cluster image registry configuration. if you wish to use a mirror or any other settings specific to registries.conf, please specify those in the cluster wide registries.conf. The format of the image pullspec is: host[:port][/namespace]/name@sha256:\u003cdigest\u003e",
+ "type": "string"
+ },
+ "containerFile": {
+ "description": "containerFile describes the custom data the user has specified to build into the image. this is also commonly called a Dockerfile and you can treat it as such. The content is the content of your Dockerfile.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSContainerfile"
+ },
+ "x-kubernetes-list-map-keys": [
+ "containerfileArch"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "containerfileArch",
+ "x-kubernetes-patch-strategy": "merge"
+ },
+ "imageBuilder": {
+ "description": "machineOSImageBuilder describes which image builder will be used in each build triggered by this MachineOSConfig",
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSImageBuilder"
+ },
+ "releaseVersion": {
+ "description": "releaseVersion is associated with the base OS Image. This is the version of Openshift that the Base Image is associated with. This field is populated from the machine-config-osimageurl configmap in the openshift-machine-config-operator namespace. It will come in the format: 4.16.0-0.nightly-2024-04-03-065948 or any valid release. The MachineOSBuilder populates this field and validates that this is a valid stream. This is used as a label in the dockerfile that builds the OS image.",
+ "type": "string"
+ },
+ "renderedImagePushSecret": {
+ "description": "renderedImagePushSecret is the secret used to connect to a user registry. the final image push and pull secrets should be separate for security concerns. If the final image push secret is somehow exfiltrated, that gives someone the power to push images to the image repository. By comparison, if the final image pull secret gets exfiltrated, that only gives someone to pull images from the image repository. It's basically the principle of least permissions. this push secret will be used only by the MachineConfigController pod to push the image to the final destination. Not all nodes will need to push this image, most of them will only need to pull the image in order to use it.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.ImageSecretObjectReference"
+ },
+ "renderedImagePushspec": {
+ "description": "renderedImagePushspec describes the location of the final image. the MachineOSConfig object will use the in cluster image registry configuration. if you wish to use a mirror or any other settings specific to registries.conf, please specify those in the cluster wide registries.conf. The format of the image pushspec is: host[:port][/namespace]/name:\u003ctag\u003e or svc_name.namespace.svc[:port]/repository/name:\u003ctag\u003e",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "BuildInputs",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.BuildOutputs": {
+ "description": "BuildOutputs holds all information needed to handle booting the image after a build",
+ "type": "object",
+ "properties": {
+ "currentImagePullSecret": {
+ "description": "currentImagePullSecret is the secret used to pull the final produced image. must live in the openshift-machine-config-operator namespace the final image push and pull secrets should be separate for security concerns. If the final image push secret is somehow exfiltrated, that gives someone the power to push images to the image repository. By comparison, if the final image pull secret gets exfiltrated, that only gives someone to pull images from the image repository. It's basically the principle of least permissions. this pull secret will be used on all nodes in the pool. These nodes will need to pull the final OS image and boot into it using rpm-ostree or bootc.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.ImageSecretObjectReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "BuildOutputs",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "fields-to-discriminateBy": {
+ "currentImagePullSecret": "CurrentImagePullSecret"
+ }
+ }
+ ]
+ },
+ "io.openshift.machineconfiguration.v1alpha1.ImageSecretObjectReference": {
+ "description": "Refers to the name of an image registry push/pull secret needed in the build process.",
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "name": {
+ "description": "name is the name of the secret used to push or pull this MachineOSConfig object. this secret must be in the openshift-machine-config-operator namespace.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ImageSecretObjectReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MCOObjectReference": {
+ "description": "MCOObjectReference holds information about an object the MCO either owns or modifies in some way",
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "name": {
+ "description": "name is the object name. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) It may consist of only alphanumeric characters, hyphens (-) and periods (.) and must be at most 253 characters in length.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MCOObjectReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineConfigNode": {
+ "description": "MachineConfigNode describes the health of the Machines on the system Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec describes the configuration of the machine config node.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeSpec"
+ },
+ "status": {
+ "description": "status describes the last observed state of this machine config node.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineConfigNode",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeList": {
+ "description": "MachineConfigNodeList describes all of the MachinesStates on the system\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNode"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineConfigNodeList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeSpec": {
+ "description": "MachineConfigNodeSpec describes the MachineConfigNode we are managing.",
+ "type": "object",
+ "required": [
+ "node",
+ "pool",
+ "configVersion"
+ ],
+ "properties": {
+ "configVersion": {
+ "description": "configVersion holds the desired config version for the node targeted by this machine config node resource. The desired version represents the machine config the node will attempt to update to. This gets set before the machine config operator validates the new machine config against the current machine config.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeSpecMachineConfigVersion"
+ },
+ "node": {
+ "description": "node contains a reference to the node for this machine config node.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MCOObjectReference"
+ },
+ "pinnedImageSets": {
+ "description": "pinnedImageSets holds the desired pinned image sets that this node should pin and pull.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeSpecPinnedImageSet"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "pool": {
+ "description": "pool contains a reference to the machine config pool that this machine config node's referenced node belongs to.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MCOObjectReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineConfigNodeSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeSpecMachineConfigVersion": {
+ "description": "MachineConfigNodeSpecMachineConfigVersion holds the desired config version for the current observed machine config node. When Current is not equal to Desired; the MachineConfigOperator is in an upgrade phase and the machine config node will take account of upgrade related events. Otherwise they will be ignored given that certain operations happen both during the MCO's upgrade mode and the daily operations mode.",
+ "type": "object",
+ "required": [
+ "desired"
+ ],
+ "properties": {
+ "desired": {
+ "description": "desired is the name of the machine config that the the node should be upgraded to. This value is set when the machine config pool generates a new version of its rendered configuration. When this value is changed, the machine config daemon starts the node upgrade process. This value gets set in the machine config node spec once the machine config has been targeted for upgrade and before it is validated. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) It may consist of only alphanumeric characters, hyphens (-) and periods (.) and must be at most 253 characters in length.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineConfigNodeSpecMachineConfigVersion",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeSpecPinnedImageSet": {
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "name": {
+ "description": "name is the name of the pinned image set. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) It may consist of only alphanumeric characters, hyphens (-) and periods (.) and must be at most 253 characters in length.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineConfigNodeSpecPinnedImageSet",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeStatus": {
+ "description": "MachineConfigNodeStatus holds the reported information on a particular machine config node.",
+ "type": "object",
+ "required": [
+ "configVersion"
+ ],
+ "properties": {
+ "conditions": {
+ "description": "conditions represent the observations of a machine config node's current state.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
+ },
+ "configVersion": {
+ "description": "configVersion describes the current and desired machine config for this node. The current version represents the current machine config for the node and is updated after a successful update. The desired version represents the machine config the node will attempt to update to. This desired machine config has been compared to the current machine config and has been validated by the machine config operator as one that is valid and that exists.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeStatusMachineConfigVersion"
+ },
+ "observedGeneration": {
+ "description": "observedGeneration represents the generation observed by the controller. This field is updated when the controller observes a change to the desiredConfig in the configVersion of the machine config node spec.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "pinnedImageSets": {
+ "description": "pinnedImageSets describes the current and desired pinned image sets for this node. The current version is the generation of the pinned image set that has most recently been successfully pulled and pinned on this node. The desired version is the generation of the pinned image set that is targeted to be pulled and pinned on this node.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeStatusPinnedImageSet"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineConfigNodeStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeStatusMachineConfigVersion": {
+ "description": "MachineConfigNodeStatusMachineConfigVersion holds the current and desired config versions as last updated in the MCN status. When the current and desired versions are not matched, the machine config pool is processing an upgrade and the machine config node will monitor the upgrade process. When the current and desired versions do not match, the machine config node will ignore these events given that certain operations happen both during the MCO's upgrade mode and the daily operations mode.",
+ "type": "object",
+ "required": [
+ "desired"
+ ],
+ "properties": {
+ "current": {
+ "description": "current is the name of the machine config currently in use on the node. This value is updated once the machine config daemon has completed the update of the configuration for the node. This value should match the desired version unless an upgrade is in progress. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) It may consist of only alphanumeric characters, hyphens (-) and periods (.) and must be at most 253 characters in length.",
+ "type": "string",
+ "default": ""
+ },
+ "desired": {
+ "description": "desired is the MachineConfig the node wants to upgrade to. This value gets set in the machine config node status once the machine config has been validated against the current machine config. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) It may consist of only alphanumeric characters, hyphens (-) and periods (.) and must be at most 253 characters in length.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineConfigNodeStatusMachineConfigVersion",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineConfigNodeStatusPinnedImageSet": {
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "currentGeneration": {
+ "description": "currentGeneration is the generation of the pinned image set that has most recently been successfully pulled and pinned on this node.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "desiredGeneration": {
+ "description": "desiredGeneration version is the generation of the pinned image set that is targeted to be pulled and pinned on this node.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "lastFailedGeneration": {
+ "description": "lastFailedGeneration is the generation of the most recent pinned image set that failed to be pulled and pinned on this node.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "lastFailedGenerationErrors": {
+ "description": "lastFailedGenerationErrors is a list of errors why the lastFailed generation failed to be pulled and pinned.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "name": {
+ "description": "name is the name of the pinned image set. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) It may consist of only alphanumeric characters, hyphens (-) and periods (.) and must be at most 253 characters in length.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineConfigNodeStatusPinnedImageSet",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineConfigPoolReference": {
+ "description": "Refers to the name of a MachineConfigPool (e.g., \"worker\", \"infra\", etc.): the MachineOSBuilder pod validates that the user has provided a valid pool",
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "name": {
+ "description": "name of the MachineConfigPool object.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineConfigPoolReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineOSBuild": {
+ "description": "MachineOSBuild describes a build process managed and deployed by the MCO Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec describes the configuration of the machine os build",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSBuildSpec"
+ },
+ "status": {
+ "description": "status describes the lst observed state of this machine os build",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSBuildStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineOSBuild",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineOSBuildList": {
+ "description": "MachineOSBuildList describes all of the Builds on the system\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSBuild"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineOSBuildList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineOSBuildSpec": {
+ "description": "MachineOSBuildSpec describes information about a build process primarily populated from a MachineOSConfig object.",
+ "type": "object",
+ "required": [
+ "configGeneration",
+ "desiredConfig",
+ "machineOSConfig",
+ "version",
+ "renderedImagePushspec"
+ ],
+ "properties": {
+ "configGeneration": {
+ "description": "configGeneration tracks which version of MachineOSConfig this build is based off of",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "desiredConfig": {
+ "description": "desiredConfig is the desired config we want to build an image for.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.RenderedMachineConfigReference"
+ },
+ "machineOSConfig": {
+ "description": "machineOSConfig is the config object which the build is based off of",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSConfigReference"
+ },
+ "renderedImagePushspec": {
+ "description": "renderedImagePushspec is set from the MachineOSConfig The format of the image pullspec is: host[:port][/namespace]/name:\u003ctag\u003e or svc_name.namespace.svc[:port]/repository/name:\u003ctag\u003e",
+ "type": "string",
+ "default": ""
+ },
+ "version": {
+ "description": "version tracks the newest MachineOSBuild for each MachineOSConfig",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineOSBuildSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineOSBuildStatus": {
+ "description": "MachineOSBuildStatus describes the state of a build and other helpful information.",
+ "type": "object",
+ "required": [
+ "buildStart"
+ ],
+ "properties": {
+ "buildEnd": {
+ "description": "buildEnd describes when the build ended.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "buildStart": {
+ "description": "buildStart describes when the build started.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "builderReference": {
+ "description": "ImageBuilderType describes the image builder set in the MachineOSConfig",
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSBuilderReference"
+ },
+ "conditions": {
+ "description": "conditions are state related conditions for the build. Valid types are: Prepared, Building, Failed, Interrupted, and Succeeded once a Build is marked as Failed, no future conditions can be set. This is enforced by the MCO.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
+ },
+ "finalImagePullspec": {
+ "description": "finalImagePushSpec describes the fully qualified pushspec produced by this build that the final image can be. Must be in sha format.",
+ "type": "string"
+ },
+ "relatedObjects": {
+ "description": "relatedObjects is a list of objects that are related to the build process.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.ObjectReference"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineOSBuildStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineOSBuilderReference": {
+ "description": "MachineOSBuilderReference describes which ImageBuilder backend to use for this build/",
+ "type": "object",
+ "required": [
+ "imageBuilderType"
+ ],
+ "properties": {
+ "buildPod": {
+ "description": "relatedObjects is a list of objects that are related to the build process.",
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.ObjectReference"
+ },
+ "imageBuilderType": {
+ "description": "ImageBuilderType describes the image builder set in the MachineOSConfig",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineOSBuilderReference",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "imageBuilderType",
+ "fields-to-discriminateBy": {
+ "buildPod": "PodImageBuilder"
+ }
+ }
+ ]
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineOSConfig": {
+ "description": "MachineOSConfig describes the configuration for a build process managed by the MCO Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec describes the configuration of the machineosconfig",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSConfigSpec"
+ },
+ "status": {
+ "description": "status describes the status of the machineosconfig",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSConfigStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineOSConfig",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineOSConfigList": {
+ "description": "MachineOSConfigList describes all configurations for image builds on the system\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineOSConfig"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineOSConfigList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineOSConfigReference": {
+ "description": "MachineOSConfigReference refers to the MachineOSConfig this build is based off of",
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "name": {
+ "description": "name of the MachineOSConfig",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineOSConfigReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineOSConfigSpec": {
+ "description": "MachineOSConfigSpec describes user-configurable options as well as information about a build process.",
+ "type": "object",
+ "required": [
+ "machineConfigPool",
+ "buildInputs"
+ ],
+ "properties": {
+ "buildInputs": {
+ "description": "buildInputs is where user input options for the build live",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.BuildInputs"
+ },
+ "buildOutputs": {
+ "description": "buildOutputs is where user input options for the build live",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.BuildOutputs"
+ },
+ "machineConfigPool": {
+ "description": "machineConfigPool is the pool which the build is for",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.MachineConfigPoolReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineOSConfigSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineOSConfigStatus": {
+ "description": "MachineOSConfigStatus describes the status this config object and relates it to the builds associated with this MachineOSConfig",
+ "type": "object",
+ "properties": {
+ "conditions": {
+ "description": "conditions are state related conditions for the config.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
+ },
+ "currentImagePullspec": {
+ "description": "currentImagePullspec is the fully qualified image pull spec used by the MCO to pull down the new OSImage. This must include sha256.",
+ "type": "string"
+ },
+ "observedGeneration": {
+ "description": "observedGeneration represents the generation observed by the controller. this field is updated when the user changes the configuration in BuildSettings or the MCP this object is associated with.",
+ "type": "integer",
+ "format": "int64"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineOSConfigStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineOSContainerfile": {
+ "description": "MachineOSContainerfile contains all custom content the user wants built into the image",
+ "type": "object",
+ "required": [
+ "content"
+ ],
+ "properties": {
+ "containerfileArch": {
+ "description": "containerfileArch describes the architecture this containerfile is to be built for this arch is optional. If the user does not specify an architecture, it is assumed that the content can be applied to all architectures, or in a single arch cluster: the only architecture.",
+ "type": "string",
+ "default": ""
+ },
+ "content": {
+ "description": "content is the custom content to be built",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineOSContainerfile",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.MachineOSImageBuilder": {
+ "type": "object",
+ "required": [
+ "imageBuilderType"
+ ],
+ "properties": {
+ "imageBuilderType": {
+ "description": "imageBuilderType specifies the backend to be used to build the image. Valid options are: PodImageBuilder",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "MachineOSImageBuilder",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.ObjectReference": {
+ "description": "ObjectReference contains enough information to let you inspect or modify the referred object.",
+ "type": "object",
+ "required": [
+ "group",
+ "resource",
+ "name"
+ ],
+ "properties": {
+ "group": {
+ "description": "group of the referent.",
+ "type": "string",
+ "default": ""
+ },
+ "name": {
+ "description": "name of the referent.",
+ "type": "string",
+ "default": ""
+ },
+ "namespace": {
+ "description": "namespace of the referent.",
+ "type": "string"
+ },
+ "resource": {
+ "description": "resource of the referent.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ObjectReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.PinnedImageRef": {
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "name": {
+ "description": "name is an OCI Image referenced by digest.\n\nThe format of the image ref is: host[:port][/namespace]/name@sha256:\u003cdigest\u003e",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PinnedImageRef",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.PinnedImageSet": {
+ "description": "PinnedImageSet describes a set of images that should be pinned by CRI-O and pulled to the nodes which are members of the declared MachineConfigPools.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec describes the configuration of this pinned image set.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.PinnedImageSetSpec"
+ },
+ "status": {
+ "description": "status describes the last observed state of this pinned image set.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.PinnedImageSetStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PinnedImageSet",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.PinnedImageSetList": {
+ "description": "PinnedImageSetList is a list of PinnedImageSet resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.PinnedImageSet"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PinnedImageSetList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.PinnedImageSetSpec": {
+ "description": "PinnedImageSetSpec defines the desired state of a PinnedImageSet.",
+ "type": "object",
+ "required": [
+ "pinnedImages"
+ ],
+ "properties": {
+ "pinnedImages": {
+ "description": "pinnedImages is a list of OCI Image referenced by digest that should be pinned and pre-loaded by the nodes of a MachineConfigPool. Translates into a new file inside the /etc/crio/crio.conf.d directory with content similar to this:\n\n pinned_images = [\n \"quay.io/openshift-release-dev/ocp-release@sha256:...\",\n \"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:...\",\n \"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:...\",\n ...\n ]\n\nThese image references should all be by digest, tags aren't allowed.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.PinnedImageRef"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PinnedImageSetSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.PinnedImageSetStatus": {
+ "description": "PinnedImageSetStatus describes the current state of a PinnedImageSet.",
+ "type": "object",
+ "properties": {
+ "conditions": {
+ "description": "conditions represent the observations of a pinned image set's current state.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PinnedImageSetStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.machineconfiguration.v1alpha1.RenderedMachineConfigReference": {
+ "description": "Refers to the name of a rendered MachineConfig (e.g., \"rendered-worker-ec40d2965ff81bce7cd7a7e82a680739\", etc.): the build targets this MachineConfig, this is often used to tell us whether we need an update.",
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "name": {
+ "description": "name is the name of the rendered MachineConfig object.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "machineconfiguration.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "RenderedMachineConfigReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.monitoring.v1.AlertRelabelConfig": {
+ "description": "AlertRelabelConfig defines a set of relabel configs for alerts.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec describes the desired state of this AlertRelabelConfig object.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.monitoring.v1.AlertRelabelConfigSpec"
+ },
+ "status": {
+ "description": "status describes the current state of this AlertRelabelConfig object.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.monitoring.v1.AlertRelabelConfigStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "monitoring.openshift.io",
+ "Version": "v1",
+ "Kind": "AlertRelabelConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.monitoring.v1.AlertRelabelConfigList": {
+ "description": "AlertRelabelConfigList is a list of AlertRelabelConfigs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "items is a list of AlertRelabelConfigs.",
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/io.openshift.monitoring.v1.AlertRelabelConfig"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "monitoring.openshift.io",
+ "Version": "v1",
+ "Kind": "AlertRelabelConfigList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.monitoring.v1.AlertRelabelConfigSpec": {
+ "description": "AlertRelabelConfigsSpec is the desired state of an AlertRelabelConfig resource.",
+ "type": "object",
+ "required": [
+ "configs"
+ ],
+ "properties": {
+ "configs": {
+ "description": "configs is a list of sequentially evaluated alert relabel configs.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.monitoring.v1.RelabelConfig"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "monitoring.openshift.io",
+ "Version": "v1",
+ "Kind": "AlertRelabelConfigSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.monitoring.v1.AlertRelabelConfigStatus": {
+ "description": "AlertRelabelConfigStatus is the status of an AlertRelabelConfig resource.",
+ "type": "object",
+ "properties": {
+ "conditions": {
+ "description": "conditions contains details on the state of the AlertRelabelConfig, may be empty.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "monitoring.openshift.io",
+ "Version": "v1",
+ "Kind": "AlertRelabelConfigStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.monitoring.v1.AlertingRule": {
+ "description": "AlertingRule represents a set of user-defined Prometheus rule groups containing alerting rules. This resource is the supported method for cluster admins to create alerts based on metrics recorded by the platform monitoring stack in OpenShift, i.e. the Prometheus instance deployed to the openshift-monitoring namespace. You might use this to create custom alerting rules not shipped with OpenShift based on metrics from components such as the node_exporter, which provides machine-level metrics such as CPU usage, or kube-state-metrics, which provides metrics on Kubernetes usage.\n\nThe API is mostly compatible with the upstream PrometheusRule type from the prometheus-operator. The primary difference being that recording rules are not allowed here -- only alerting rules. For each AlertingRule resource created, a corresponding PrometheusRule will be created in the openshift-monitoring namespace. OpenShift requires admins to use the AlertingRule resource rather than the upstream type in order to allow better OpenShift specific defaulting and validation, while not modifying the upstream APIs directly.\n\nYou can find upstream API documentation for PrometheusRule resources here:\n\nhttps://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec describes the desired state of this AlertingRule object.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.monitoring.v1.AlertingRuleSpec"
+ },
+ "status": {
+ "description": "status describes the current state of this AlertOverrides object.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.monitoring.v1.AlertingRuleStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "monitoring.openshift.io",
+ "Version": "v1",
+ "Kind": "AlertingRule",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.monitoring.v1.AlertingRuleList": {
+ "description": "AlertingRuleList is a list of AlertingRule objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "items is a list of AlertingRule objects.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.monitoring.v1.AlertingRule"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "monitoring.openshift.io",
+ "Version": "v1",
+ "Kind": "AlertingRuleList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.monitoring.v1.AlertingRuleSpec": {
+ "description": "AlertingRuleSpec is the desired state of an AlertingRule resource.",
+ "type": "object",
+ "required": [
+ "groups"
+ ],
+ "properties": {
+ "groups": {
+ "description": "groups is a list of grouped alerting rules. Rule groups are the unit at which Prometheus parallelizes rule processing. All rules in a single group share a configured evaluation interval. All rules in the group will be processed together on this interval, sequentially, and all rules will be processed.\n\nIt's common to group related alerting rules into a single AlertingRule resources, and within that resource, closely related alerts, or simply alerts with the same interval, into individual groups. You are also free to create AlertingRule resources with only a single rule group, but be aware that this can have a performance impact on Prometheus if the group is extremely large or has very complex query expressions to evaluate. Spreading very complex rules across multiple groups to allow them to be processed in parallel is also a common use-case.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.monitoring.v1.RuleGroup"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "monitoring.openshift.io",
+ "Version": "v1",
+ "Kind": "AlertingRuleSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.monitoring.v1.AlertingRuleStatus": {
+ "description": "AlertingRuleStatus is the status of an AlertingRule resource.",
+ "type": "object",
+ "properties": {
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "prometheusRule": {
+ "description": "prometheusRule is the generated PrometheusRule for this AlertingRule. Each AlertingRule instance results in a generated PrometheusRule object in the same namespace, which is always the openshift-monitoring namespace.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.monitoring.v1.PrometheusRuleRef"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "monitoring.openshift.io",
+ "Version": "v1",
+ "Kind": "AlertingRuleStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.monitoring.v1.PrometheusRuleRef": {
+ "description": "PrometheusRuleRef is a reference to an existing PrometheusRule object. Each AlertingRule instance results in a generated PrometheusRule object in the same namespace, which is always the openshift-monitoring namespace. This is used to point to the generated PrometheusRule object in the AlertingRule status.",
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "name": {
+ "description": "name of the referenced PrometheusRule.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "monitoring.openshift.io",
+ "Version": "v1",
+ "Kind": "PrometheusRuleRef",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.monitoring.v1.RelabelConfig": {
+ "description": "RelabelConfig allows dynamic rewriting of label sets for alerts. See Prometheus documentation: - https://prometheus.io/docs/prometheus/latest/configuration/configuration/#alert_relabel_configs - https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config",
+ "type": "object",
+ "properties": {
+ "action": {
+ "description": "action to perform based on regex matching. Must be one of: 'Replace', 'Keep', 'Drop', 'HashMod', 'LabelMap', 'LabelDrop', or 'LabelKeep'. Default is: 'Replace'",
+ "type": "string"
+ },
+ "modulus": {
+ "description": "modulus to take of the hash of the source label values. This can be combined with the 'HashMod' action to set 'target_label' to the 'modulus' of a hash of the concatenated 'source_labels'. This is only valid if sourceLabels is not empty and action is not 'LabelKeep' or 'LabelDrop'.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "regex": {
+ "description": "regex against which the extracted value is matched. Default is: '(.*)' regex is required for all actions except 'HashMod'",
+ "type": "string"
+ },
+ "replacement": {
+ "description": "replacement value against which a regex replace is performed if the regular expression matches. This is required if the action is 'Replace' or 'LabelMap' and forbidden for actions 'LabelKeep' and 'LabelDrop'. Regex capture groups are available. Default is: '$1'",
+ "type": "string"
+ },
+ "separator": {
+ "description": "separator placed between concatenated source label values. When omitted, Prometheus will use its default value of ';'.",
+ "type": "string"
+ },
+ "sourceLabels": {
+ "description": "sourceLabels select values from existing labels. Their content is concatenated using the configured separator and matched against the configured regular expression for the 'Replace', 'Keep', and 'Drop' actions. Not allowed for actions 'LabelKeep' and 'LabelDrop'.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "targetLabel": {
+ "description": "targetLabel to which the resulting value is written in a 'Replace' action. It is required for 'Replace' and 'HashMod' actions and forbidden for actions 'LabelKeep' and 'LabelDrop'. Regex capture groups are available.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "monitoring.openshift.io",
+ "Version": "v1",
+ "Kind": "RelabelConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.monitoring.v1.Rule": {
+ "description": "Rule describes an alerting rule. See Prometheus documentation: - https://www.prometheus.io/docs/prometheus/latest/configuration/alerting_rules",
+ "type": "object",
+ "required": [
+ "alert",
+ "expr"
+ ],
+ "properties": {
+ "alert": {
+ "description": "alert is the name of the alert. Must be a valid label value, i.e. may contain any Unicode character.",
+ "type": "string",
+ "default": ""
+ },
+ "annotations": {
+ "description": "annotations to add to each alert. These are values that can be used to store longer additional information that you won't query on, such as alert descriptions or runbook links.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "expr": {
+ "description": "expr is the PromQL expression to evaluate. Every evaluation cycle this is evaluated at the current time, and all resultant time series become pending or firing alerts. This is most often a string representing a PromQL expression, e.g.: mapi_current_pending_csr \u003e mapi_max_pending_csr In rare cases this could be a simple integer, e.g. a simple \"1\" if the intent is to create an alert that is always firing. This is sometimes used to create an always-firing \"Watchdog\" alert in order to ensure the alerting pipeline is functional.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
+ },
+ "for": {
+ "description": "for is the time period after which alerts are considered firing after first returning results. Alerts which have not yet fired for long enough are considered pending.",
+ "type": "string"
+ },
+ "labels": {
+ "description": "labels to add or overwrite for each alert. The results of the PromQL expression for the alert will result in an existing set of labels for the alert, after evaluating the expression, for any label specified here with the same name as a label in that set, the label here wins and overwrites the previous value. These should typically be short identifying values that may be useful to query against. A common example is the alert severity, where one sets `severity: warning` under the `labels` key:",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "monitoring.openshift.io",
+ "Version": "v1",
+ "Kind": "Rule",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.monitoring.v1.RuleGroup": {
+ "description": "RuleGroup is a list of sequentially evaluated alerting rules.",
+ "type": "object",
+ "required": [
+ "name",
+ "rules"
+ ],
+ "properties": {
+ "interval": {
+ "description": "interval is how often rules in the group are evaluated. If not specified, it defaults to the global.evaluation_interval configured in Prometheus, which itself defaults to 30 seconds. You can check if this value has been modified from the default on your cluster by inspecting the platform Prometheus configuration: The relevant field in that resource is: spec.evaluationInterval",
+ "type": "string"
+ },
+ "name": {
+ "description": "name is the name of the group.",
+ "type": "string",
+ "default": ""
+ },
+ "rules": {
+ "description": "rules is a list of sequentially evaluated alerting rules. Prometheus may process rule groups in parallel, but rules within a single group are always processed sequentially, and all rules are processed.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.monitoring.v1.Rule"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "monitoring.openshift.io",
+ "Version": "v1",
+ "Kind": "RuleGroup",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.cloud.v1.CloudPrivateIPConfig": {
+ "description": "CloudPrivateIPConfig performs an assignment of a private IP address to the primary NIC associated with cloud VMs. This is done by specifying the IP and Kubernetes node which the IP should be assigned to. This CRD is intended to be used by the network plugin which manages the cluster network. The spec side represents the desired state requested by the network plugin, and the status side represents the current state that this CRD's controller has executed. No users will have permission to modify it, and if a cluster-admin decides to edit it for some reason, their changes will be overwritten the next time the network plugin reconciles the object. Note: the CR's name must specify the requested private IP address (can be IPv4 or IPv6).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec is the definition of the desired private IP request.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.cloud.v1.CloudPrivateIPConfigSpec"
+ },
+ "status": {
+ "description": "status is the observed status of the desired private IP request. Read-only.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.cloud.v1.CloudPrivateIPConfigStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "cloud.network.openshift.io",
+ "Version": "v1",
+ "Kind": "CloudPrivateIPConfig",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.network.cloud.v1.CloudPrivateIPConfigList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). CloudPrivateIPConfigList is the list of CloudPrivateIPConfigList.",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "List of CloudPrivateIPConfig.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.cloud.v1.CloudPrivateIPConfig"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "cloud.network.openshift.io",
+ "Version": "v1",
+ "Kind": "CloudPrivateIPConfigList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.cloud.v1.CloudPrivateIPConfigSpec": {
+ "description": "CloudPrivateIPConfigSpec consists of a node name which the private IP should be assigned to.",
+ "type": "object",
+ "properties": {
+ "node": {
+ "description": "node is the node name, as specified by the Kubernetes field: node.metadata.name",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "cloud.network.openshift.io",
+ "Version": "v1",
+ "Kind": "CloudPrivateIPConfigSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.cloud.v1.CloudPrivateIPConfigStatus": {
+ "description": "CloudPrivateIPConfigStatus specifies the node assignment together with its assignment condition.",
+ "type": "object",
+ "required": [
+ "conditions"
+ ],
+ "properties": {
+ "conditions": {
+ "description": "condition is the assignment condition of the private IP and its status",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ }
+ },
+ "node": {
+ "description": "node is the node name, as specified by the Kubernetes field: node.metadata.name",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "cloud.network.openshift.io",
+ "Version": "v1",
+ "Kind": "CloudPrivateIPConfigStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1.ClusterNetwork": {
+ "description": "ClusterNetwork was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "serviceNetwork",
+ "clusterNetworks"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "clusterNetworks": {
+ "description": "ClusterNetworks is a list of ClusterNetwork objects that defines the global overlay network's L3 space by specifying a set of CIDR and netmasks that the SDN can allocate addresses from.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.v1.ClusterNetworkEntry"
+ }
+ },
+ "hostsubnetlength": {
+ "description": "HostSubnetLength is the number of bits of network to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pods",
+ "type": "integer",
+ "format": "int64"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "mtu": {
+ "description": "MTU is the MTU for the overlay network. This should be 50 less than the MTU of the network connecting the nodes. It is normally autodetected by the cluster network operator.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "network": {
+ "description": "Network is a CIDR string specifying the global overlay network's L3 space",
+ "type": "string"
+ },
+ "pluginName": {
+ "description": "PluginName is the name of the network plugin being used",
+ "type": "string"
+ },
+ "serviceNetwork": {
+ "description": "ServiceNetwork is the CIDR range that Service IP addresses are allocated from",
+ "type": "string",
+ "default": ""
+ },
+ "vxlanPort": {
+ "description": "VXLANPort sets the VXLAN destination port used by the cluster. It is set by the master configuration file on startup and cannot be edited manually. Valid values for VXLANPort are integers 1-65535 inclusive and if unset defaults to 4789. Changing VXLANPort allows users to resolve issues between openshift SDN and other software trying to use the same VXLAN destination port.",
+ "type": "integer",
+ "format": "int64"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "network.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterNetwork",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.network.v1.ClusterNetworkEntry": {
+ "description": "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.",
+ "type": "object",
+ "required": [
+ "CIDR",
+ "hostSubnetLength"
+ ],
+ "properties": {
+ "CIDR": {
+ "description": "CIDR defines the total range of a cluster networks address space.",
+ "type": "string",
+ "default": ""
+ },
+ "hostSubnetLength": {
+ "description": "HostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pods.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "network.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterNetworkEntry",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1.ClusterNetworkList": {
+ "description": "ClusterNetworkList is a collection of ClusterNetworks\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items is the list of cluster networks",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.v1.ClusterNetwork"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "network.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterNetworkList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1.EgressNetworkPolicy": {
+ "description": "EgressNetworkPolicy was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec is the specification of the current egress network policy",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.v1.EgressNetworkPolicySpec"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "network.openshift.io",
+ "Version": "v1",
+ "Kind": "EgressNetworkPolicy",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1.EgressNetworkPolicyList": {
+ "description": "EgressNetworkPolicyList is a collection of EgressNetworkPolicy\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "items is the list of policies",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.v1.EgressNetworkPolicy"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "network.openshift.io",
+ "Version": "v1",
+ "Kind": "EgressNetworkPolicyList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1.EgressNetworkPolicyPeer": {
+ "description": "EgressNetworkPolicyPeer specifies a target to apply egress network policy to",
+ "type": "object",
+ "properties": {
+ "cidrSelector": {
+ "description": "CIDRSelector is the CIDR range to allow/deny traffic to. If this is set, dnsName must be unset Ideally we would have liked to use the cidr openapi format for this property. But openshift-sdn only supports v4 while specifying the cidr format allows both v4 and v6 cidrs We are therefore using a regex pattern to validate instead.",
+ "type": "string"
+ },
+ "dnsName": {
+ "description": "DNSName is the domain name to allow/deny traffic to. If this is set, cidrSelector must be unset",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "network.openshift.io",
+ "Version": "v1",
+ "Kind": "EgressNetworkPolicyPeer",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1.EgressNetworkPolicyRule": {
+ "description": "EgressNetworkPolicyRule contains a single egress network policy rule",
+ "type": "object",
+ "required": [
+ "type",
+ "to"
+ ],
+ "properties": {
+ "to": {
+ "description": "to is the target that traffic is allowed/denied to",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.v1.EgressNetworkPolicyPeer"
+ },
+ "type": {
+ "description": "type marks this as an \"Allow\" or \"Deny\" rule",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "network.openshift.io",
+ "Version": "v1",
+ "Kind": "EgressNetworkPolicyRule",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1.EgressNetworkPolicySpec": {
+ "description": "EgressNetworkPolicySpec provides a list of policies on outgoing network traffic",
+ "type": "object",
+ "required": [
+ "egress"
+ ],
+ "properties": {
+ "egress": {
+ "description": "egress contains the list of egress policy rules",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.v1.EgressNetworkPolicyRule"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "network.openshift.io",
+ "Version": "v1",
+ "Kind": "EgressNetworkPolicySpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1.HostSubnet": {
+ "description": "HostSubnet was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "host",
+ "hostIP",
+ "subnet"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "egressCIDRs": {
+ "description": "EgressCIDRs is the list of CIDR ranges available for automatically assigning egress IPs to this node from. If this field is set then EgressIPs should be treated as read-only.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "egressIPs": {
+ "description": "EgressIPs is the list of automatic egress IP addresses currently hosted by this node. If EgressCIDRs is empty, this can be set by hand; if EgressCIDRs is set then the master will overwrite the value here with its own allocation of egress IPs.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "host": {
+ "description": "Host is the name of the node. (This is the same as the object's name, but both fields must be set.)",
+ "type": "string",
+ "default": ""
+ },
+ "hostIP": {
+ "description": "HostIP is the IP address to be used as a VTEP by other nodes in the overlay network",
+ "type": "string",
+ "default": ""
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "subnet": {
+ "description": "Subnet is the CIDR range of the overlay network assigned to the node for its pods",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "network.openshift.io",
+ "Version": "v1",
+ "Kind": "HostSubnet",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.network.v1.HostSubnetList": {
+ "description": "HostSubnetList is a collection of HostSubnets\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items is the list of host subnets",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.v1.HostSubnet"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "network.openshift.io",
+ "Version": "v1",
+ "Kind": "HostSubnetList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1.NetNamespace": {
+ "description": "NetNamespace was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "netname",
+ "netid"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "egressIPs": {
+ "description": "EgressIPs is a list of reserved IPs that will be used as the source for external traffic coming from pods in this namespace. (If empty, external traffic will be masqueraded to Node IPs.)",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "netid": {
+ "description": "NetID is the network identifier of the network namespace assigned to each overlay network packet. This can be manipulated with the \"oc adm pod-network\" commands.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "netname": {
+ "description": "NetName is the name of the network namespace. (This is the same as the object's name, but both fields must be set.)",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "network.openshift.io",
+ "Version": "v1",
+ "Kind": "NetNamespace",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.network.v1.NetNamespaceList": {
+ "description": "NetNamespaceList is a collection of NetNamespaces\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items is the list of net namespaces",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.v1.NetNamespace"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "network.openshift.io",
+ "Version": "v1",
+ "Kind": "NetNamespaceList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1alpha1.DNSNameResolver": {
+ "description": "DNSNameResolver stores the DNS name resolution information of a DNS name. It can be enabled by the TechPreviewNoUpgrade feature set. It can also be enabled by the feature gate DNSNameResolver when using CustomNoUpgrade feature set.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec is the specification of the desired behavior of the DNSNameResolver.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.v1alpha1.DNSNameResolverSpec"
+ },
+ "status": {
+ "description": "status is the most recently observed status of the DNSNameResolver.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.v1alpha1.DNSNameResolverStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "network.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "DNSNameResolver",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1alpha1.DNSNameResolverList": {
+ "description": "DNSNameResolverList contains a list of DNSNameResolvers.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "items gives the list of DNSNameResolvers.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.v1alpha1.DNSNameResolver"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "network.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "DNSNameResolverList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1alpha1.DNSNameResolverResolvedAddress": {
+ "description": "DNSNameResolverResolvedAddress describes the details of an IP address for a resolved DNS name.",
+ "type": "object",
+ "required": [
+ "ip",
+ "ttlSeconds",
+ "lastLookupTime"
+ ],
+ "properties": {
+ "ip": {
+ "description": "ip is an IP address associated with the dnsName. The validity of the IP address expires after lastLookupTime + ttlSeconds. To refresh the information, a DNS lookup will be performed upon the expiration of the IP address's validity. If the information is not refreshed then it will be removed with a grace period after the expiration of the IP address's validity.",
+ "type": "string",
+ "default": ""
+ },
+ "lastLookupTime": {
+ "description": "lastLookupTime is the timestamp when the last DNS lookup was completed successfully. The validity of the IP address expires after lastLookupTime + ttlSeconds. The value of this field will be updated to the current time on a successful DNS lookup. If the information is not refreshed then it will be removed with a grace period after the expiration of the IP address's validity.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "ttlSeconds": {
+ "description": "ttlSeconds is the time-to-live value of the IP address. The validity of the IP address expires after lastLookupTime + ttlSeconds. On a successful DNS lookup the value of this field will be updated with the current time-to-live value. If the information is not refreshed then it will be removed with a grace period after the expiration of the IP address's validity.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "network.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "DNSNameResolverResolvedAddress",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1alpha1.DNSNameResolverResolvedName": {
+ "description": "DNSNameResolverResolvedName describes the details of a resolved DNS name.",
+ "type": "object",
+ "required": [
+ "dnsName",
+ "resolvedAddresses"
+ ],
+ "properties": {
+ "conditions": {
+ "description": "conditions provide information about the state of the DNS name. Known .status.conditions.type is: \"Degraded\". \"Degraded\" is true when the last resolution failed for the DNS name, and false otherwise.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "dnsName": {
+ "description": "dnsName is the resolved DNS name matching the name field of DNSNameResolverSpec. This field can store both regular and wildcard DNS names which match the spec.name field. When the spec.name field contains a regular DNS name, this field will store the same regular DNS name after it is successfully resolved. When the spec.name field contains a wildcard DNS name, each resolvedName.dnsName will store the regular DNS names which match the wildcard DNS name and have been successfully resolved. If the wildcard DNS name can also be successfully resolved, then this field will store the wildcard DNS name as well.",
+ "type": "string",
+ "default": ""
+ },
+ "resolutionFailures": {
+ "description": "resolutionFailures keeps the count of how many consecutive times the DNS resolution failed for the dnsName. If the DNS resolution succeeds then the field will be set to zero. Upon every failure, the value of the field will be incremented by one. The details about the DNS name will be removed, if the value of resolutionFailures reaches 5 and the TTL of all the associated IP addresses have expired.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "resolvedAddresses": {
+ "description": "resolvedAddresses gives the list of associated IP addresses and their corresponding TTLs and last lookup times for the dnsName.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.v1alpha1.DNSNameResolverResolvedAddress"
+ },
+ "x-kubernetes-list-map-keys": [
+ "ip"
+ ],
+ "x-kubernetes-list-type": "map"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "network.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "DNSNameResolverResolvedName",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1alpha1.DNSNameResolverSpec": {
+ "description": "DNSNameResolverSpec is a desired state description of DNSNameResolver.",
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "name": {
+ "description": "name is the DNS name for which the DNS name resolution information will be stored. For a regular DNS name, only the DNS name resolution information of the regular DNS name will be stored. For a wildcard DNS name, the DNS name resolution information of all the DNS names that match the wildcard DNS name will be stored. For a wildcard DNS name, the '*' will match only one label. Additionally, only a single '*' can be used at the beginning of the wildcard DNS name. For example, '*.example.com.' will match 'sub1.example.com.' but won't match 'sub2.sub1.example.com.'",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "network.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "DNSNameResolverSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.network.v1alpha1.DNSNameResolverStatus": {
+ "description": "DNSNameResolverStatus defines the observed status of DNSNameResolver.",
+ "type": "object",
+ "properties": {
+ "resolvedNames": {
+ "description": "resolvedNames contains a list of matching DNS names and their corresponding IP addresses along with their TTL and last DNS lookup times.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.network.v1alpha1.DNSNameResolverResolvedName"
+ },
+ "x-kubernetes-list-map-keys": [
+ "dnsName"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "dnsName",
+ "x-kubernetes-patch-strategy": "merge"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "network.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "DNSNameResolverStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.oauth.v1.ClusterRoleScopeRestriction": {
+ "description": "ClusterRoleScopeRestriction describes restrictions on cluster role scopes",
+ "type": "object",
+ "required": [
+ "roleNames",
+ "namespaces",
+ "allowEscalation"
+ ],
+ "properties": {
+ "allowEscalation": {
+ "description": "AllowEscalation indicates whether you can request roles and their escalating resources",
+ "type": "boolean",
+ "default": false
+ },
+ "namespaces": {
+ "description": "Namespaces is the list of namespaces that can be referenced. * means any of them (including *)",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "roleNames": {
+ "description": "RoleNames is the list of cluster roles that can referenced. * means anything",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterRoleScopeRestriction",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.oauth.v1.OAuthAccessToken": {
+ "description": "OAuthAccessToken describes an OAuth access token. The name of a token must be prefixed with a `sha256~` string, must not contain \"/\" or \"%\" characters and must be at least 32 characters long.\n\nThe name of the token is constructed from the actual token by sha256-hashing it and using URL-safe unpadded base64-encoding (as described in RFC4648) on the hashed result.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "authorizeToken": {
+ "description": "AuthorizeToken contains the token that authorized this token",
+ "type": "string"
+ },
+ "clientName": {
+ "description": "ClientName references the client that created this token.",
+ "type": "string"
+ },
+ "expiresIn": {
+ "description": "ExpiresIn is the seconds from CreationTime before this token expires.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "inactivityTimeoutSeconds": {
+ "description": "InactivityTimeoutSeconds is the value in seconds, from the CreationTimestamp, after which this token can no longer be used. The value is automatically incremented when the token is used.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "redirectURI": {
+ "description": "RedirectURI is the redirection associated with the token.",
+ "type": "string"
+ },
+ "refreshToken": {
+ "description": "RefreshToken is the value by which this token can be renewed. Can be blank.",
+ "type": "string"
+ },
+ "scopes": {
+ "description": "Scopes is an array of the requested scopes.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "userName": {
+ "description": "UserName is the user name associated with this token",
+ "type": "string"
+ },
+ "userUID": {
+ "description": "UserUID is the unique UID associated with this token",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "OAuthAccessToken",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.oauth.v1.OAuthAccessTokenList": {
+ "description": "OAuthAccessTokenList is a collection of OAuth access tokens\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items is the list of OAuth access tokens",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.oauth.v1.OAuthAccessToken"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "OAuthAccessTokenList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.oauth.v1.OAuthAuthorizeToken": {
+ "description": "OAuthAuthorizeToken describes an OAuth authorization token\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "clientName": {
+ "description": "ClientName references the client that created this token.",
+ "type": "string"
+ },
+ "codeChallenge": {
+ "description": "CodeChallenge is the optional code_challenge associated with this authorization code, as described in rfc7636",
+ "type": "string"
+ },
+ "codeChallengeMethod": {
+ "description": "CodeChallengeMethod is the optional code_challenge_method associated with this authorization code, as described in rfc7636",
+ "type": "string"
+ },
+ "expiresIn": {
+ "description": "ExpiresIn is the seconds from CreationTime before this token expires.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "redirectURI": {
+ "description": "RedirectURI is the redirection associated with the token.",
+ "type": "string"
+ },
+ "scopes": {
+ "description": "Scopes is an array of the requested scopes.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "state": {
+ "description": "State data from request",
+ "type": "string"
+ },
+ "userName": {
+ "description": "UserName is the user name associated with this token",
+ "type": "string"
+ },
+ "userUID": {
+ "description": "UserUID is the unique UID associated with this token. UserUID and UserName must both match for this token to be valid.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "OAuthAuthorizeToken",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.oauth.v1.OAuthAuthorizeTokenList": {
+ "description": "OAuthAuthorizeTokenList is a collection of OAuth authorization tokens\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items is the list of OAuth authorization tokens",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.oauth.v1.OAuthAuthorizeToken"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "OAuthAuthorizeTokenList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.oauth.v1.OAuthClient": {
+ "description": "OAuthClient describes an OAuth client\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "properties": {
+ "accessTokenInactivityTimeoutSeconds": {
+ "description": "AccessTokenInactivityTimeoutSeconds overrides the default token inactivity timeout for tokens granted to this client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. This value needs to be set only if the default set in configuration is not appropriate for this client. Valid values are: - 0: Tokens for this client never time out - X: Tokens time out if there is no activity for X seconds The current minimum allowed value for X is 300 (5 minutes)\n\nWARNING: existing tokens' timeout will not be affected (lowered) by changing this value",
+ "type": "integer",
+ "format": "int32"
+ },
+ "accessTokenMaxAgeSeconds": {
+ "description": "AccessTokenMaxAgeSeconds overrides the default access token max age for tokens granted to this client. 0 means no expiration.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "additionalSecrets": {
+ "description": "AdditionalSecrets holds other secrets that may be used to identify the client. This is useful for rotation and for service account token validation",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "grantMethod": {
+ "description": "GrantMethod is a required field which determines how to handle grants for this client. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "redirectURIs": {
+ "description": "RedirectURIs is the valid redirection URIs associated with a client",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-patch-strategy": "merge"
+ },
+ "respondWithChallenges": {
+ "description": "RespondWithChallenges indicates whether the client wants authentication needed responses made in the form of challenges instead of redirects",
+ "type": "boolean"
+ },
+ "scopeRestrictions": {
+ "description": "ScopeRestrictions describes which scopes this client can request. Each requested scope is checked against each restriction. If any restriction matches, then the scope is allowed. If no restriction matches, then the scope is denied.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.oauth.v1.ScopeRestriction"
+ }
+ },
+ "secret": {
+ "description": "Secret is the unique secret associated with a client",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "OAuthClient",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.oauth.v1.OAuthClientAuthorization": {
+ "description": "OAuthClientAuthorization describes an authorization created by an OAuth client\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "clientName": {
+ "description": "ClientName references the client that created this authorization",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "scopes": {
+ "description": "Scopes is an array of the granted scopes.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "userName": {
+ "description": "UserName is the user name that authorized this client",
+ "type": "string"
+ },
+ "userUID": {
+ "description": "UserUID is the unique UID associated with this authorization. UserUID and UserName must both match for this authorization to be valid.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "OAuthClientAuthorization",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.oauth.v1.OAuthClientAuthorizationList": {
+ "description": "OAuthClientAuthorizationList is a collection of OAuth client authorizations\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items is the list of OAuth client authorizations",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.oauth.v1.OAuthClientAuthorization"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "OAuthClientAuthorizationList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.oauth.v1.OAuthClientList": {
+ "description": "OAuthClientList is a collection of OAuth clients\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items is the list of OAuth clients",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.oauth.v1.OAuthClient"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "OAuthClientList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.oauth.v1.OAuthRedirectReference": {
+ "description": "OAuthRedirectReference is a reference to an OAuth redirect object.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "reference": {
+ "description": "The reference to an redirect object in the current namespace.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.oauth.v1.RedirectReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "OAuthRedirectReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.oauth.v1.RedirectReference": {
+ "description": "RedirectReference specifies the target in the current namespace that resolves into redirect URIs. Only the 'Route' kind is currently allowed.",
+ "type": "object",
+ "required": [
+ "group",
+ "kind",
+ "name"
+ ],
+ "properties": {
+ "group": {
+ "description": "The group of the target that is being referred to.",
+ "type": "string",
+ "default": ""
+ },
+ "kind": {
+ "description": "The kind of the target that is being referred to. Currently, only 'Route' is allowed.",
+ "type": "string",
+ "default": ""
+ },
+ "name": {
+ "description": "The name of the target that is being referred to. e.g. name of the Route.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "RedirectReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.oauth.v1.ScopeRestriction": {
+ "description": "ScopeRestriction describe one restriction on scopes. Exactly one option must be non-nil.",
+ "type": "object",
+ "properties": {
+ "clusterRole": {
+ "description": "ClusterRole describes a set of restrictions for cluster role scoping.",
+ "$ref": "#/definitions/io.openshift.oauth.v1.ClusterRoleScopeRestriction"
+ },
+ "literals": {
+ "description": "ExactValues means the scope has to match a particular set of strings exactly",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "ScopeRestriction",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.oauth.v1.UserOAuthAccessToken": {
+ "description": "UserOAuthAccessToken is a virtual resource to mirror OAuthAccessTokens to the user the access token was issued for",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "authorizeToken": {
+ "description": "AuthorizeToken contains the token that authorized this token",
+ "type": "string"
+ },
+ "clientName": {
+ "description": "ClientName references the client that created this token.",
+ "type": "string"
+ },
+ "expiresIn": {
+ "description": "ExpiresIn is the seconds from CreationTime before this token expires.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "inactivityTimeoutSeconds": {
+ "description": "InactivityTimeoutSeconds is the value in seconds, from the CreationTimestamp, after which this token can no longer be used. The value is automatically incremented when the token is used.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "redirectURI": {
+ "description": "RedirectURI is the redirection associated with the token.",
+ "type": "string"
+ },
+ "refreshToken": {
+ "description": "RefreshToken is the value by which this token can be renewed. Can be blank.",
+ "type": "string"
+ },
+ "scopes": {
+ "description": "Scopes is an array of the requested scopes.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "userName": {
+ "description": "UserName is the user name associated with this token",
+ "type": "string"
+ },
+ "userUID": {
+ "description": "UserUID is the unique UID associated with this token",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "UserOAuthAccessToken",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.oauth.v1.UserOAuthAccessTokenList": {
+ "description": "UserOAuthAccessTokenList is a collection of access tokens issued on behalf of the requesting user\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.oauth.v1.UserOAuthAccessToken"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "oauth.openshift.io",
+ "Version": "v1",
+ "Kind": "UserOAuthAccessTokenList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.controlplane.v1alpha1.LogEntry": {
+ "description": "LogEntry records events",
+ "type": "object",
+ "required": [
+ "time",
+ "success"
+ ],
+ "properties": {
+ "latency": {
+ "description": "Latency records how long the action mentioned in the entry took.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "message": {
+ "description": "Message explaining status in a human readable format.",
+ "type": "string"
+ },
+ "reason": {
+ "description": "Reason for status in a machine readable format.",
+ "type": "string"
+ },
+ "success": {
+ "description": "Success indicates if the log entry indicates a success or failure.",
+ "type": "boolean",
+ "default": false
+ },
+ "time": {
+ "description": "Start time of check action.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "controlplane.operator.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "LogEntry",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.controlplane.v1alpha1.OutageEntry": {
+ "description": "OutageEntry records time period of an outage",
+ "type": "object",
+ "required": [
+ "start"
+ ],
+ "properties": {
+ "end": {
+ "description": "End of outage detected",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "endLogs": {
+ "description": "EndLogs contains log entries related to the end of this outage. Should contain the success entry that resolved the outage and possibly a few of the failure log entries that preceded it.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.LogEntry"
+ }
+ },
+ "message": {
+ "description": "Message summarizes outage details in a human readable format.",
+ "type": "string"
+ },
+ "start": {
+ "description": "Start of outage detected",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "startLogs": {
+ "description": "StartLogs contains log entries related to the start of this outage. Should contain the original failure, any entries where the failure mode changed.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.LogEntry"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "controlplane.operator.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "OutageEntry",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheck": {
+ "description": "PodNetworkConnectivityCheck\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "metadata",
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "Spec defines the source and target of the connectivity check",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckSpec"
+ },
+ "status": {
+ "description": "Status contains the observed status of the connectivity check",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "controlplane.operator.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PodNetworkConnectivityCheck",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckCondition": {
+ "description": "PodNetworkConnectivityCheckCondition represents the overall status of the pod network connectivity.",
+ "type": "object",
+ "required": [
+ "type",
+ "status",
+ "lastTransitionTime"
+ ],
+ "properties": {
+ "lastTransitionTime": {
+ "description": "Last time the condition transitioned from one status to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "description": "Message indicating details about last transition in a human readable format.",
+ "type": "string"
+ },
+ "reason": {
+ "description": "Reason for the condition's last status transition in a machine readable format.",
+ "type": "string"
+ },
+ "status": {
+ "description": "Status of the condition",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "Type of the condition",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "controlplane.operator.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PodNetworkConnectivityCheckCondition",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckList": {
+ "description": "PodNetworkConnectivityCheckList is a collection of PodNetworkConnectivityCheck\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items contains the items",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheck"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "controlplane.operator.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PodNetworkConnectivityCheckList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckSpec": {
+ "type": "object",
+ "required": [
+ "sourcePod",
+ "targetEndpoint"
+ ],
+ "properties": {
+ "sourcePod": {
+ "description": "SourcePod names the pod from which the condition will be checked",
+ "type": "string",
+ "default": ""
+ },
+ "targetEndpoint": {
+ "description": "EndpointAddress to check. A TCP address of the form host:port. Note that if host is a DNS name, then the check would fail if the DNS name cannot be resolved. Specify an IP address for host to bypass DNS name lookup.",
+ "type": "string",
+ "default": ""
+ },
+ "tlsClientCert": {
+ "description": "TLSClientCert, if specified, references a kubernetes.io/tls type secret with 'tls.crt' and 'tls.key' entries containing an optional TLS client certificate and key to be used when checking endpoints that require a client certificate in order to gracefully preform the scan without causing excessive logging in the endpoint process. The secret must exist in the same namespace as this resource.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "controlplane.operator.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PodNetworkConnectivityCheckSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckStatus": {
+ "type": "object",
+ "properties": {
+ "conditions": {
+ "description": "Conditions summarize the status of the check",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckCondition"
+ },
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
+ },
+ "failures": {
+ "description": "Failures contains logs of unsuccessful check actions",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.LogEntry"
+ }
+ },
+ "outages": {
+ "description": "Outages contains logs of time periods of outages",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.OutageEntry"
+ }
+ },
+ "successes": {
+ "description": "Successes contains logs successful check actions",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.LogEntry"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "controlplane.operator.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PodNetworkConnectivityCheckStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.AzureNetworkAccess": {
+ "description": "AzureNetworkAccess defines the network access properties for the storage account.",
+ "type": "object",
+ "properties": {
+ "internal": {
+ "description": "internal defines the vnet and subnet names to configure a private endpoint and connect it to the storage account in order to make it private. when type: Internal and internal is unset, the image registry operator will discover vnet and subnet names, and generate a private endpoint name.",
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.AzureNetworkAccessInternal"
+ },
+ "type": {
+ "description": "type is the network access level to be used for the storage account. type: Internal means the storage account will be private, type: External means the storage account will be publicly accessible. Internal storage accounts are only exposed within the cluster's vnet. External storage accounts are publicly exposed on the internet. When type: Internal is used, a vnetName, subNetName and privateEndpointName may optionally be specified. If unspecificed, the image registry operator will discover vnet and subnet names, and generate a privateEndpointName. Defaults to \"External\".",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "AzureNetworkAccess",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "internal": "Internal"
+ }
+ }
+ ]
+ },
+ "io.openshift.operator.imageregistry.v1.AzureNetworkAccessInternal": {
+ "type": "object",
+ "properties": {
+ "networkResourceGroupName": {
+ "description": "networkResourceGroupName is the resource group name where the cluster's vnet and subnet are. When omitted, the registry operator will use the cluster resource group (from in the infrastructure status). If you set a networkResourceGroupName on your install-config.yaml, that value will be used automatically (for clusters configured with publish:Internal). Note that both vnet and subnet must be in the same resource group. It must be between 1 and 90 characters in length and must consist only of alphanumeric characters, hyphens (-), periods (.) and underscores (_), and not end with a period.",
+ "type": "string"
+ },
+ "privateEndpointName": {
+ "description": "privateEndpointName is the name of the private endpoint for the registry. When provided, the registry will use it as the name of the private endpoint it will create for the storage account. When omitted, the registry will generate one. It must be between 2 and 64 characters in length and must consist only of alphanumeric characters, hyphens (-), periods (.) and underscores (_). It must start with an alphanumeric character and end with an alphanumeric character or an underscore.",
+ "type": "string"
+ },
+ "subnetName": {
+ "description": "subnetName is the name of the subnet the registry operates in. When omitted, the registry operator will discover and set this by using the `kubernetes.io_cluster.\u003ccluster-id\u003e` tag in the vnet resource, then using one of listed subnets. Advanced cluster network configurations that use network security groups to protect subnets should ensure the provided subnetName has access to Azure Storage service. It must be between 1 and 80 characters in length and must consist only of alphanumeric characters, hyphens (-), periods (.) and underscores (_).",
+ "type": "string"
+ },
+ "vnetName": {
+ "description": "vnetName is the name of the vnet the registry operates in. When omitted, the registry operator will discover and set this by using the `kubernetes.io_cluster.\u003ccluster-id\u003e` tag in the vnet resource. This tag is set automatically by the installer. Commonly, this will be the same vnet as the cluster. Advanced cluster network configurations should ensure the provided vnetName is the vnet of the nodes where the image registry pods are running from. It must be between 2 and 64 characters in length and must consist only of alphanumeric characters, hyphens (-), periods (.) and underscores (_). It must start with an alphanumeric character and end with an alphanumeric character or an underscore.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "AzureNetworkAccessInternal",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.Config": {
+ "description": "Config is the configuration object for a registry instance managed by the registry operator\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "metadata",
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistrySpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "Config",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ConfigList": {
+ "description": "ConfigList is a slice of Config objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.Config"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ConfigList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.EncryptionAlibaba": {
+ "description": "EncryptionAlibaba this a union type in kube parlance. Depending on the value for the AlibabaEncryptionMethod, different pointers may be used",
+ "type": "object",
+ "properties": {
+ "kms": {
+ "description": "KMS (key management service) is an encryption type that holds the struct for KMS KeyID",
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.KMSEncryptionAlibaba"
+ },
+ "method": {
+ "description": "Method defines the different encrytion modes available Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `AES256`.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "EncryptionAlibaba",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImagePruner": {
+ "description": "ImagePruner is the configuration object for an image registry pruner managed by the registry operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "metadata",
+ "spec"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImagePrunerSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImagePrunerStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImagePruner",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImagePrunerList": {
+ "description": "ImagePrunerList is a slice of ImagePruner objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImagePruner"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImagePrunerList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImagePrunerSpec": {
+ "description": "ImagePrunerSpec defines the specs for the running image pruner.",
+ "type": "object",
+ "properties": {
+ "affinity": {
+ "description": "affinity is a group of node affinity scheduling rules for the image pruner pod.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.Affinity"
+ },
+ "failedJobsHistoryLimit": {
+ "description": "failedJobsHistoryLimit specifies how many failed image pruner jobs to retain. Defaults to 3 if not set.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "ignoreInvalidImageReferences": {
+ "description": "ignoreInvalidImageReferences indicates whether the pruner can ignore errors while parsing image references.",
+ "type": "boolean"
+ },
+ "keepTagRevisions": {
+ "description": "keepTagRevisions specifies the number of image revisions for a tag in an image stream that will be preserved. Defaults to 3.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "keepYoungerThan": {
+ "description": "keepYoungerThan specifies the minimum age in nanoseconds of an image and its referrers for it to be considered a candidate for pruning. DEPRECATED: This field is deprecated in favor of keepYoungerThanDuration. If both are set, this field is ignored and keepYoungerThanDuration takes precedence.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "keepYoungerThanDuration": {
+ "description": "keepYoungerThanDuration specifies the minimum age of an image and its referrers for it to be considered a candidate for pruning. Defaults to 60m (60 minutes).",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "logLevel": {
+ "description": "logLevel sets the level of log output for the pruner job.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": "string"
+ },
+ "nodeSelector": {
+ "description": "nodeSelector defines the node selection constraints for the image pruner pod.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "resources": {
+ "description": "resources defines the resource requests and limits for the image pruner pod.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
+ },
+ "schedule": {
+ "description": "schedule specifies when to execute the job using standard cronjob syntax: https://wikipedia.org/wiki/Cron. Defaults to `0 0 * * *`.",
+ "type": "string",
+ "default": ""
+ },
+ "successfulJobsHistoryLimit": {
+ "description": "successfulJobsHistoryLimit specifies how many successful image pruner jobs to retain. Defaults to 3 if not set.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "suspend": {
+ "description": "suspend specifies whether or not to suspend subsequent executions of this cronjob. Defaults to false.",
+ "type": "boolean"
+ },
+ "tolerations": {
+ "description": "tolerations defines the node tolerations for the image pruner pod.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImagePrunerSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImagePrunerStatus": {
+ "description": "ImagePrunerStatus reports image pruner operational status.",
+ "type": "object",
+ "properties": {
+ "conditions": {
+ "description": "conditions is a list of conditions and their status.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ }
+ },
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change that has been applied.",
+ "type": "integer",
+ "format": "int64"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImagePrunerStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigProxy": {
+ "description": "ImageRegistryConfigProxy defines proxy configuration to be used by registry.",
+ "type": "object",
+ "properties": {
+ "http": {
+ "description": "http defines the proxy to be used by the image registry when accessing HTTP endpoints.",
+ "type": "string"
+ },
+ "https": {
+ "description": "https defines the proxy to be used by the image registry when accessing HTTPS endpoints.",
+ "type": "string"
+ },
+ "noProxy": {
+ "description": "noProxy defines a comma-separated list of host names that shouldn't go through any proxy.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigProxy",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigRequests": {
+ "description": "ImageRegistryConfigRequests defines registry limits on requests read and write.",
+ "type": "object",
+ "properties": {
+ "read": {
+ "description": "read defines limits for image registry's reads.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigRequestsLimits"
+ },
+ "write": {
+ "description": "write defines limits for image registry's writes.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigRequestsLimits"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigRequests",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigRequestsLimits": {
+ "description": "ImageRegistryConfigRequestsLimits holds configuration on the max, enqueued and waiting registry's API requests.",
+ "type": "object",
+ "properties": {
+ "maxInQueue": {
+ "description": "maxInQueue sets the maximum queued api requests to the registry.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "maxRunning": {
+ "description": "maxRunning sets the maximum in flight api requests to the registry.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "maxWaitInQueue": {
+ "description": "maxWaitInQueue sets the maximum time a request can wait in the queue before being rejected.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigRequestsLimits",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigRoute": {
+ "description": "ImageRegistryConfigRoute holds information on external route access to image registry.",
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "hostname": {
+ "description": "hostname for the route.",
+ "type": "string"
+ },
+ "name": {
+ "description": "name of the route to be created.",
+ "type": "string",
+ "default": ""
+ },
+ "secretName": {
+ "description": "secretName points to secret containing the certificates to be used by the route.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigRoute",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorage": {
+ "description": "ImageRegistryConfigStorage describes how the storage should be configured for the image registry.",
+ "type": "object",
+ "properties": {
+ "azure": {
+ "description": "azure represents configuration that uses Azure Blob Storage.",
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageAzure"
+ },
+ "emptyDir": {
+ "description": "emptyDir represents ephemeral storage on the pod's host node. WARNING: this storage cannot be used with more than 1 replica and is not suitable for production use. When the pod is removed from a node for any reason, the data in the emptyDir is deleted forever.",
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageEmptyDir"
+ },
+ "gcs": {
+ "description": "gcs represents configuration that uses Google Cloud Storage.",
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageGCS"
+ },
+ "ibmcos": {
+ "description": "ibmcos represents configuration that uses IBM Cloud Object Storage.",
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageIBMCOS"
+ },
+ "managementState": {
+ "description": "managementState indicates if the operator manages the underlying storage unit. If Managed the operator will remove the storage when this operator gets Removed.",
+ "type": "string"
+ },
+ "oss": {
+ "description": "Oss represents configuration that uses Alibaba Cloud Object Storage Service.",
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageAlibabaOSS"
+ },
+ "pvc": {
+ "description": "pvc represents configuration that uses a PersistentVolumeClaim.",
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStoragePVC"
+ },
+ "s3": {
+ "description": "s3 represents configuration that uses Amazon Simple Storage Service.",
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageS3"
+ },
+ "swift": {
+ "description": "swift represents configuration that uses OpenStack Object Storage.",
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageSwift"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigStorage",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageAlibabaOSS": {
+ "description": "ImageRegistryConfigStorageAlibabaOSS holds Alibaba Cloud OSS configuration. Configures the registry to use Alibaba Cloud Object Storage Service for backend storage. More about oss, you can look at the [official documentation](https://www.alibabacloud.com/help/product/31815.htm)",
+ "type": "object",
+ "properties": {
+ "bucket": {
+ "description": "Bucket is the bucket name in which you want to store the registry's data. About Bucket naming, more details you can look at the [official documentation](https://www.alibabacloud.com/help/doc-detail/257087.htm) Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default will be autogenerated in the form of \u003cclusterid\u003e-image-registry-\u003cregion\u003e-\u003crandom string 27 chars\u003e",
+ "type": "string"
+ },
+ "encryption": {
+ "description": "Encryption specifies whether you would like your data encrypted on the server side. More details, you can look cat the [official documentation](https://www.alibabacloud.com/help/doc-detail/117914.htm)",
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.EncryptionAlibaba"
+ },
+ "endpointAccessibility": {
+ "description": "EndpointAccessibility specifies whether the registry use the OSS VPC internal endpoint Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `Internal`.",
+ "type": "string"
+ },
+ "region": {
+ "description": "Region is the Alibaba Cloud Region in which your bucket exists. For a list of regions, you can look at the [official documentation](https://www.alibabacloud.com/help/doc-detail/31837.html). Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default will be based on the installed Alibaba Cloud Region.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigStorageAlibabaOSS",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageAzure": {
+ "description": "ImageRegistryConfigStorageAzure holds the information to configure the registry to use Azure Blob Storage for backend storage.",
+ "type": "object",
+ "properties": {
+ "accountName": {
+ "description": "accountName defines the account to be used by the registry.",
+ "type": "string"
+ },
+ "cloudName": {
+ "description": "cloudName is the name of the Azure cloud environment to be used by the registry. If empty, the operator will set it based on the infrastructure object.",
+ "type": "string"
+ },
+ "container": {
+ "description": "container defines Azure's container to be used by registry.",
+ "type": "string"
+ },
+ "networkAccess": {
+ "description": "networkAccess defines the network access properties for the storage account. Defaults to type: External.",
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.AzureNetworkAccess"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigStorageAzure",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageEmptyDir": {
+ "description": "ImageRegistryConfigStorageEmptyDir is an place holder to be used when when registry is leveraging ephemeral storage.",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigStorageEmptyDir",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageGCS": {
+ "description": "ImageRegistryConfigStorageGCS holds GCS configuration.",
+ "type": "object",
+ "properties": {
+ "bucket": {
+ "description": "bucket is the bucket name in which you want to store the registry's data. Optional, will be generated if not provided.",
+ "type": "string"
+ },
+ "keyID": {
+ "description": "keyID is the KMS key ID to use for encryption. Optional, buckets are encrypted by default on GCP. This allows for the use of a custom encryption key.",
+ "type": "string"
+ },
+ "projectID": {
+ "description": "projectID is the Project ID of the GCP project that this bucket should be associated with.",
+ "type": "string"
+ },
+ "region": {
+ "description": "region is the GCS location in which your bucket exists. Optional, will be set based on the installed GCS Region.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigStorageGCS",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageIBMCOS": {
+ "description": "ImageRegistryConfigStorageIBMCOS holds the information to configure the registry to use IBM Cloud Object Storage for backend storage.",
+ "type": "object",
+ "properties": {
+ "bucket": {
+ "description": "bucket is the bucket name in which you want to store the registry's data. Optional, will be generated if not provided.",
+ "type": "string"
+ },
+ "location": {
+ "description": "location is the IBM Cloud location in which your bucket exists. Optional, will be set based on the installed IBM Cloud location.",
+ "type": "string"
+ },
+ "resourceGroupName": {
+ "description": "resourceGroupName is the name of the IBM Cloud resource group that this bucket and its service instance is associated with. Optional, will be set based on the installed IBM Cloud resource group.",
+ "type": "string"
+ },
+ "resourceKeyCRN": {
+ "description": "resourceKeyCRN is the CRN of the IBM Cloud resource key that is created for the service instance. Commonly referred as a service credential and must contain HMAC type credentials. Optional, will be computed if not provided.",
+ "type": "string"
+ },
+ "serviceInstanceCRN": {
+ "description": "serviceInstanceCRN is the CRN of the IBM Cloud Object Storage service instance that this bucket is associated with. Optional, will be computed if not provided.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigStorageIBMCOS",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStoragePVC": {
+ "description": "ImageRegistryConfigStoragePVC holds Persistent Volume Claims data to be used by the registry.",
+ "type": "object",
+ "properties": {
+ "claim": {
+ "description": "claim defines the Persisent Volume Claim's name to be used.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigStoragePVC",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageS3": {
+ "description": "ImageRegistryConfigStorageS3 holds the information to configure the registry to use the AWS S3 service for backend storage https://docs.docker.com/registry/storage-drivers/s3/",
+ "type": "object",
+ "properties": {
+ "bucket": {
+ "description": "bucket is the bucket name in which you want to store the registry's data. Optional, will be generated if not provided.",
+ "type": "string"
+ },
+ "chunkSizeMiB": {
+ "description": "chunkSizeMiB defines the size of the multipart upload chunks of the S3 API. The S3 API requires multipart upload chunks to be at least 5MiB. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default value is 10 MiB. The value is an integer number of MiB. The minimum value is 5 and the maximum value is 5120 (5 GiB).",
+ "type": "integer",
+ "format": "int32"
+ },
+ "cloudFront": {
+ "description": "cloudFront configures Amazon Cloudfront as the storage middleware in a registry.",
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageS3CloudFront"
+ },
+ "encrypt": {
+ "description": "encrypt specifies whether the registry stores the image in encrypted format or not. Optional, defaults to false.",
+ "type": "boolean"
+ },
+ "keyID": {
+ "description": "keyID is the KMS key ID to use for encryption. Optional, Encrypt must be true, or this parameter is ignored.",
+ "type": "string"
+ },
+ "region": {
+ "description": "region is the AWS region in which your bucket exists. Optional, will be set based on the installed AWS Region.",
+ "type": "string"
+ },
+ "regionEndpoint": {
+ "description": "regionEndpoint is the endpoint for S3 compatible storage services. It should be a valid URL with scheme, e.g. https://s3.example.com. Optional, defaults based on the Region that is provided.",
+ "type": "string"
+ },
+ "trustedCA": {
+ "description": "trustedCA is a reference to a config map containing a CA bundle. The image registry and its operator use certificates from this bundle to verify S3 server certificates.\n\nThe namespace for the config map referenced by trustedCA is \"openshift-config\". The key for the bundle in the config map is \"ca-bundle.crt\".",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.S3TrustedCASource"
+ },
+ "virtualHostedStyle": {
+ "description": "virtualHostedStyle enables using S3 virtual hosted style bucket paths with a custom RegionEndpoint Optional, defaults to false.",
+ "type": "boolean",
+ "default": false
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigStorageS3",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageS3CloudFront": {
+ "description": "ImageRegistryConfigStorageS3CloudFront holds the configuration to use Amazon Cloudfront as the storage middleware in a registry. https://docs.docker.com/registry/configuration/#cloudfront",
+ "type": "object",
+ "required": [
+ "baseURL",
+ "privateKey",
+ "keypairID"
+ ],
+ "properties": {
+ "baseURL": {
+ "description": "baseURL contains the SCHEME://HOST[/PATH] at which Cloudfront is served.",
+ "type": "string",
+ "default": ""
+ },
+ "duration": {
+ "description": "duration is the duration of the Cloudfront session.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "keypairID": {
+ "description": "keypairID is key pair ID provided by AWS.",
+ "type": "string",
+ "default": ""
+ },
+ "privateKey": {
+ "description": "privateKey points to secret containing the private key, provided by AWS.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretKeySelector"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigStorageS3CloudFront",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageSwift": {
+ "description": "ImageRegistryConfigStorageSwift holds the information to configure the registry to use the OpenStack Swift service for backend storage https://docs.docker.com/registry/storage-drivers/swift/",
+ "type": "object",
+ "properties": {
+ "authURL": {
+ "description": "authURL defines the URL for obtaining an authentication token.",
+ "type": "string"
+ },
+ "authVersion": {
+ "description": "authVersion specifies the OpenStack Auth's version.",
+ "type": "string"
+ },
+ "container": {
+ "description": "container defines the name of Swift container where to store the registry's data.",
+ "type": "string"
+ },
+ "domain": {
+ "description": "domain specifies Openstack's domain name for Identity v3 API.",
+ "type": "string"
+ },
+ "domainID": {
+ "description": "domainID specifies Openstack's domain id for Identity v3 API.",
+ "type": "string"
+ },
+ "regionName": {
+ "description": "regionName defines Openstack's region in which container exists.",
+ "type": "string"
+ },
+ "tenant": {
+ "description": "tenant defines Openstack tenant name to be used by registry.",
+ "type": "string"
+ },
+ "tenantID": {
+ "description": "tenant defines Openstack tenant id to be used by registry.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryConfigStorageSwift",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistrySpec": {
+ "description": "ImageRegistrySpec defines the specs for the running registry.",
+ "type": "object",
+ "required": [
+ "managementState",
+ "replicas"
+ ],
+ "properties": {
+ "affinity": {
+ "description": "affinity is a group of node affinity scheduling rules for the image registry pod(s).",
+ "$ref": "#/definitions/io.k8s.api.core.v1.Affinity"
+ },
+ "defaultRoute": {
+ "description": "defaultRoute indicates whether an external facing route for the registry should be created using the default generated hostname.",
+ "type": "boolean"
+ },
+ "disableRedirect": {
+ "description": "disableRedirect controls whether to route all data through the Registry, rather than redirecting to the backend.",
+ "type": "boolean"
+ },
+ "httpSecret": {
+ "description": "httpSecret is the value needed by the registry to secure uploads, generated by default.",
+ "type": "string"
+ },
+ "logLevel": {
+ "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": "string"
+ },
+ "logging": {
+ "description": "logging is deprecated, use logLevel instead.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "managementState": {
+ "description": "managementState indicates whether and how the operator should manage the component",
+ "type": "string",
+ "default": ""
+ },
+ "nodeSelector": {
+ "description": "nodeSelector defines the node selection constraints for the registry pod.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "observedConfig": {
+ "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "operatorLogLevel": {
+ "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": "string"
+ },
+ "proxy": {
+ "description": "proxy defines the proxy to be used when calling master api, upstream registries, etc.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigProxy"
+ },
+ "readOnly": {
+ "description": "readOnly indicates whether the registry instance should reject attempts to push new images or delete existing ones.",
+ "type": "boolean"
+ },
+ "replicas": {
+ "description": "replicas determines the number of registry instances to run.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "requests": {
+ "description": "requests controls how many parallel requests a given registry instance will handle before queuing additional requests.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigRequests",
+ "x-kubernetes-map-type": "atomic"
+ },
+ "resources": {
+ "description": "resources defines the resource requests+limits for the registry pod.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements",
+ "x-kubernetes-map-type": "atomic"
+ },
+ "rolloutStrategy": {
+ "description": "rolloutStrategy defines rollout strategy for the image registry deployment.",
+ "type": "string"
+ },
+ "routes": {
+ "description": "routes defines additional external facing routes which should be created for the registry.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigRoute"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "storage": {
+ "description": "storage details for configuring registry storage, e.g. S3 bucket coordinates.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorage"
+ },
+ "tolerations": {
+ "description": "tolerations defines the tolerations for the registry pod.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "topologySpreadConstraints": {
+ "description": "topologySpreadConstraints specify how to spread matching pods among the given topology.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "unsupportedConfigOverrides": {
+ "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistrySpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.imageregistry.v1.ImageRegistryStatus": {
+ "description": "ImageRegistryStatus reports image registry operational status.",
+ "type": "object",
+ "required": [
+ "readyReplicas",
+ "storageManaged",
+ "storage"
+ ],
+ "properties": {
+ "conditions": {
+ "description": "conditions is a list of conditions and their status",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "generations": {
+ "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "group",
+ "resource",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "latestAvailableRevision": {
+ "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "type": "integer",
+ "format": "int32"
+ },
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
+ "type": "integer",
+ "format": "int64"
+ },
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "storage": {
+ "description": "storage indicates the current applied storage configuration of the registry.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorage"
+ },
+ "storageManaged": {
+ "description": "storageManaged is deprecated, please refer to Storage.managementState",
+ "type": "boolean",
+ "default": false
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ImageRegistryStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.ObjectReference": {
- "description": "ObjectReference contains enough information to let you inspect or modify the referred object.",
+ "io.openshift.operator.imageregistry.v1.KMSEncryptionAlibaba": {
"type": "object",
"required": [
- "group",
- "resource",
- "name"
+ "keyID"
],
"properties": {
- "group": {
- "description": "group of the referent.",
- "type": "string",
- "default": ""
- },
- "name": {
- "description": "name of the referent.",
- "type": "string",
- "default": ""
- },
- "namespace": {
- "description": "namespace of the referent.",
- "type": "string"
- },
- "resource": {
- "description": "resource of the referent.",
+ "keyID": {
+ "description": "KeyID holds the KMS encryption key ID",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ObjectReference",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "KMSEncryptionAlibaba",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.PinnedImageRef": {
+ "io.openshift.operator.imageregistry.v1.S3TrustedCASource": {
+ "description": "S3TrustedCASource references a config map with a CA certificate bundle in the \"openshift-config\" namespace. The key for the bundle in the config map is \"ca-bundle.crt\".",
"type": "object",
- "required": [
- "name"
- ],
"properties": {
"name": {
- "description": "name is an OCI Image referenced by digest.\n\nThe format of the image ref is: host[:port][/namespace]/name@sha256:\u003cdigest\u003e",
+ "description": "name is the metadata.name of the referenced config map. This field must adhere to standard config map naming restrictions. The name must consist solely of alphanumeric characters, hyphens (-) and periods (.). It has a maximum length of 253 characters. If this field is not specified or is empty string, the default trust bundle will be used.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PinnedImageRef",
+ "Group": "imageregistry.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "S3TrustedCASource",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.PinnedImageSet": {
- "description": "PinnedImageSet describes a set of images that should be pinned by CRI-O and pulled to the nodes which are members of the declared MachineConfigPools.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.operator.ingress.v1.DNSRecord": {
+ "description": "DNSRecord is a DNS record managed in the zones defined by dns.config.openshift.io/cluster .spec.publicZone and .spec.privateZone.\n\nCluster admin manipulation of this resource is not supported. This resource is only for internal communication of OpenShift operators.\n\nIf DNSManagementPolicy is \"Unmanaged\", the operator will not be responsible for managing the DNS records on the cloud provider.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "spec"
+ "spec",
+ "status"
],
"properties": {
"apiVersion": {
@@ -96560,33 +102420,33 @@
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec describes the configuration of this pinned image set.",
+ "description": "spec is the specification of the desired behavior of the dnsRecord.",
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.PinnedImageSetSpec"
+ "$ref": "#/definitions/io.openshift.operator.ingress.v1.DNSRecordSpec"
},
"status": {
- "description": "status describes the last observed state of this pinned image set.",
+ "description": "status is the most recently observed status of the dnsRecord.",
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.PinnedImageSetStatus"
+ "$ref": "#/definitions/io.openshift.operator.ingress.v1.DNSRecordStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PinnedImageSet",
- "Scope": "Clustered"
+ "Group": "ingress.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "DNSRecord",
+ "Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.PinnedImageSetList": {
- "description": "PinnedImageSetList is a list of PinnedImageSet resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.operator.ingress.v1.DNSRecordList": {
+ "description": "DNSRecordList contains a list of dnsrecords.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"items"
],
"properties": {
@@ -96598,7 +102458,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.PinnedImageSet"
+ "$ref": "#/definitions/io.openshift.operator.ingress.v1.DNSRecord"
}
},
"kind": {
@@ -96613,210 +102473,172 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PinnedImageSetList",
+ "Group": "ingress.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "DNSRecordList",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.PinnedImageSetSpec": {
- "description": "PinnedImageSetSpec defines the desired state of a PinnedImageSet.",
+ "io.openshift.operator.ingress.v1.DNSRecordSpec": {
+ "description": "DNSRecordSpec contains the details of a DNS record.",
"type": "object",
"required": [
- "pinnedImages"
+ "dnsName",
+ "targets",
+ "recordType",
+ "recordTTL"
],
"properties": {
- "pinnedImages": {
- "description": "pinnedImages is a list of OCI Image referenced by digest that should be pinned and pre-loaded by the nodes of a MachineConfigPool. Translates into a new file inside the /etc/crio/crio.conf.d directory with content similar to this:\n\n pinned_images = [\n \"quay.io/openshift-release-dev/ocp-release@sha256:...\",\n \"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:...\",\n \"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:...\",\n ...\n ]\n\nThese image references should all be by digest, tags aren't allowed.",
+ "dnsManagementPolicy": {
+ "description": "dnsManagementPolicy denotes the current policy applied on the DNS record. Records that have policy set as \"Unmanaged\" are ignored by the ingress operator. This means that the DNS record on the cloud provider is not managed by the operator, and the \"Published\" status condition will be updated to \"Unknown\" status, since it is externally managed. Any existing record on the cloud provider can be deleted at the discretion of the cluster admin.\n\nThis field defaults to Managed. Valid values are \"Managed\" and \"Unmanaged\".",
+ "type": "string",
+ "default": "Managed"
+ },
+ "dnsName": {
+ "description": "dnsName is the hostname of the DNS record",
+ "type": "string",
+ "default": ""
+ },
+ "recordTTL": {
+ "description": "recordTTL is the record TTL in seconds. If zero, the default is 30. RecordTTL will not be used in AWS regions Alias targets, but will be used in CNAME targets, per AWS API contract.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
+ },
+ "recordType": {
+ "description": "recordType is the DNS record type. For example, \"A\" or \"CNAME\".",
+ "type": "string",
+ "default": ""
+ },
+ "targets": {
+ "description": "targets are record targets.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.machineconfiguration.v1alpha1.PinnedImageRef"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PinnedImageSetSpec",
+ "Group": "ingress.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "DNSRecordSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.machineconfiguration.v1alpha1.PinnedImageSetStatus": {
- "description": "PinnedImageSetStatus describes the current state of a PinnedImageSet.",
+ "io.openshift.operator.ingress.v1.DNSRecordStatus": {
+ "description": "DNSRecordStatus is the most recently observed status of each record.",
"type": "object",
"properties": {
- "conditions": {
- "description": "conditions represent the observations of a pinned image set's current state.",
+ "observedGeneration": {
+ "description": "observedGeneration is the most recently observed generation of the DNSRecord. When the DNSRecord is updated, the controller updates the corresponding record in each managed zone. If an update for a particular zone fails, that failure is recorded in the status condition for the zone so that the controller can determine that it needs to retry the update for that specific zone.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "zones": {
+ "description": "zones are the status of the record in each zone.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PinnedImageSetStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.machineconfiguration.v1alpha1.RenderedMachineConfigReference": {
- "description": "Refers to the name of a rendered MachineConfig (e.g., \"rendered-worker-ec40d2965ff81bce7cd7a7e82a680739\", etc.): the build targets this MachineConfig, this is often used to tell us whether we need an update.",
- "type": "object",
- "required": [
- "name"
- ],
- "properties": {
- "name": {
- "description": "name is the name of the rendered MachineConfig object.",
- "type": "string",
- "default": ""
+ "$ref": "#/definitions/io.openshift.operator.ingress.v1.DNSZoneStatus"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "machineconfiguration.openshift.io",
- "Version": "v1alpha1",
- "Kind": "RenderedMachineConfigReference",
+ "Group": "ingress.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "DNSRecordStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.monitoring.v1.AlertRelabelConfig": {
- "description": "AlertRelabelConfig defines a set of relabel configs for alerts.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.ingress.v1.DNSZoneCondition": {
+ "description": "DNSZoneCondition is just the standard condition fields.",
"type": "object",
"required": [
- "spec"
+ "type",
+ "status"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "lastTransitionTime": {
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "message": {
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec describes the desired state of this AlertRelabelConfig object.",
- "default": {},
- "$ref": "#/definitions/io.openshift.monitoring.v1.AlertRelabelConfigSpec"
+ "reason": {
+ "type": "string"
},
"status": {
- "description": "status describes the current state of this AlertRelabelConfig object.",
- "default": {},
- "$ref": "#/definitions/io.openshift.monitoring.v1.AlertRelabelConfigStatus"
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "monitoring.openshift.io",
+ "Type": "nested",
+ "Group": "ingress.operator.openshift.io",
"Version": "v1",
- "Kind": "AlertRelabelConfig",
+ "Kind": "DNSZoneCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.monitoring.v1.AlertRelabelConfigList": {
- "description": "AlertRelabelConfigList is a list of AlertRelabelConfigs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.ingress.v1.DNSZoneStatus": {
+ "description": "DNSZoneStatus is the status of a record within a specific zone.",
"type": "object",
"required": [
- "items"
+ "dnsZone"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "description": "items is a list of AlertRelabelConfigs.",
+ "conditions": {
+ "description": "conditions are any conditions associated with the record in the zone.\n\nIf publishing the record succeeds, the \"Published\" condition will be set with status \"True\" and upon failure it will be set to \"False\" along with the reason and message describing the cause of the failure.",
"type": "array",
"items": {
- "$ref": "#/definitions/io.openshift.monitoring.v1.AlertRelabelConfig"
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.ingress.v1.DNSZoneCondition"
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "dnsZone": {
+ "description": "dnsZone is the zone where the record is published.",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "$ref": "#/definitions/io.openshift.config.v1.DNSZone"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "monitoring.openshift.io",
+ "Type": "nested",
+ "Group": "ingress.operator.openshift.io",
"Version": "v1",
- "Kind": "AlertRelabelConfigList",
+ "Kind": "DNSZoneStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.monitoring.v1.AlertRelabelConfigSpec": {
- "description": "AlertRelabelConfigsSpec is the desired state of an AlertRelabelConfig resource.",
+ "io.openshift.operator.network.v1.CertSpec": {
+ "description": "CertSpec defines common certificate configuration.",
"type": "object",
"required": [
- "configs"
+ "commonName"
],
"properties": {
- "configs": {
- "description": "configs is a list of sequentially evaluated alert relabel configs.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.monitoring.v1.RelabelConfig"
- }
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "monitoring.openshift.io",
- "Version": "v1",
- "Kind": "AlertRelabelConfigSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.monitoring.v1.AlertRelabelConfigStatus": {
- "description": "AlertRelabelConfigStatus is the status of an AlertRelabelConfig resource.",
- "type": "object",
- "properties": {
- "conditions": {
- "description": "conditions contains details on the state of the AlertRelabelConfig, may be empty.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- }
+ "commonName": {
+ "description": "commonName is the value in the certificate's CN",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "monitoring.openshift.io",
+ "Group": "network.operator.openshift.io",
"Version": "v1",
- "Kind": "AlertRelabelConfigStatus",
+ "Kind": "CertSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.monitoring.v1.AlertingRule": {
- "description": "AlertingRule represents a set of user-defined Prometheus rule groups containing alerting rules. This resource is the supported method for cluster admins to create alerts based on metrics recorded by the platform monitoring stack in OpenShift, i.e. the Prometheus instance deployed to the openshift-monitoring namespace. You might use this to create custom alerting rules not shipped with OpenShift based on metrics from components such as the node_exporter, which provides machine-level metrics such as CPU usage, or kube-state-metrics, which provides metrics on Kubernetes usage.\n\nThe API is mostly compatible with the upstream PrometheusRule type from the prometheus-operator. The primary difference being that recording rules are not allowed here -- only alerting rules. For each AlertingRule resource created, a corresponding PrometheusRule will be created in the openshift-monitoring namespace. OpenShift requires admins to use the AlertingRule resource rather than the upstream type in order to allow better OpenShift specific defaulting and validation, while not modifying the upstream APIs directly.\n\nYou can find upstream API documentation for PrometheusRule resources here:\n\nhttps://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.network.v1.EgressRouter": {
+ "description": "EgressRouter is a feature allowing the user to define an egress router that acts as a bridge between pods and external systems. The egress router runs a service that redirects egress traffic originating from a pod or a group of pods to a remote external system or multiple destinations as per configuration.\n\nIt is consumed by the cluster-network-operator. More specifically, given an EgressRouter CR with \u003cname\u003e, the CNO will create and manage: - A service called \u003cname\u003e - An egress pod called \u003cname\u003e - A NAD called \u003cname\u003e\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).\n\nEgressRouter is a single egressrouter pod configuration object.",
"type": "object",
"required": [
"spec"
@@ -96836,26 +102658,72 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec describes the desired state of this AlertingRule object.",
+ "description": "Specification of the desired egress router.",
"default": {},
- "$ref": "#/definitions/io.openshift.monitoring.v1.AlertingRuleSpec"
+ "$ref": "#/definitions/io.openshift.operator.network.v1.EgressRouterSpec"
},
"status": {
- "description": "status describes the current state of this AlertOverrides object.",
+ "description": "Observed status of EgressRouter.",
"default": {},
- "$ref": "#/definitions/io.openshift.monitoring.v1.AlertingRuleStatus"
+ "$ref": "#/definitions/io.openshift.operator.network.v1.EgressRouterStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "monitoring.openshift.io",
+ "Group": "network.operator.openshift.io",
"Version": "v1",
- "Kind": "AlertingRule",
+ "Kind": "EgressRouter",
"Scope": "Namespaced"
}
},
- "io.openshift.monitoring.v1.AlertingRuleList": {
- "description": "AlertingRuleList is a list of AlertingRule objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.network.v1.EgressRouterAddress": {
+ "description": "EgressRouterAddress contains a pair of IP CIDR and gateway to be configured on the router's interface",
+ "type": "object",
+ "required": [
+ "ip"
+ ],
+ "properties": {
+ "gateway": {
+ "description": "IP address of the next-hop gateway, if it cannot be automatically determined. Can be IPv4 or IPv6.",
+ "type": "string"
+ },
+ "ip": {
+ "description": "IP is the address to configure on the router's interface. Can be IPv4 or IPv6.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "network.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "EgressRouterAddress",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.network.v1.EgressRouterInterface": {
+ "description": "EgressRouterInterface contains the configuration of interface to create/use.",
+ "type": "object",
+ "required": [
+ "macvlan"
+ ],
+ "properties": {
+ "macvlan": {
+ "description": "Arguments specific to the interfaceType macvlan",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.network.v1.MacvlanConfig"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "network.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "EgressRouterInterface",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.network.v1.EgressRouterList": {
+ "description": "EgressRouterList is the list of egress router pods requested.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"items"
@@ -96866,11 +102734,10 @@
"type": "string"
},
"items": {
- "description": "items is a list of AlertingRule objects.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.monitoring.v1.AlertingRule"
+ "$ref": "#/definitions/io.openshift.operator.network.v1.EgressRouter"
}
},
"kind": {
@@ -96878,219 +102745,186 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "monitoring.openshift.io",
+ "Group": "network.operator.openshift.io",
"Version": "v1",
- "Kind": "AlertingRuleList",
+ "Kind": "EgressRouterList",
"Scope": "Namespaced"
}
},
- "io.openshift.monitoring.v1.AlertingRuleSpec": {
- "description": "AlertingRuleSpec is the desired state of an AlertingRule resource.",
+ "io.openshift.operator.network.v1.EgressRouterSpec": {
+ "description": "EgressRouterSpec contains the configuration for an egress router. Mode, networkInterface and addresses fields must be specified along with exactly one \"Config\" that matches the mode. Each config consists of parameters specific to that mode.",
"type": "object",
"required": [
- "groups"
+ "mode",
+ "networkInterface",
+ "addresses"
],
"properties": {
- "groups": {
- "description": "groups is a list of grouped alerting rules. Rule groups are the unit at which Prometheus parallelizes rule processing. All rules in a single group share a configured evaluation interval. All rules in the group will be processed together on this interval, sequentially, and all rules will be processed.\n\nIt's common to group related alerting rules into a single AlertingRule resources, and within that resource, closely related alerts, or simply alerts with the same interval, into individual groups. You are also free to create AlertingRule resources with only a single rule group, but be aware that this can have a performance impact on Prometheus if the group is extremely large or has very complex query expressions to evaluate. Spreading very complex rules across multiple groups to allow them to be processed in parallel is also a common use-case.",
+ "addresses": {
+ "description": "List of IP addresses to configure on the pod's secondary interface.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.monitoring.v1.RuleGroup"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "monitoring.openshift.io",
- "Version": "v1",
- "Kind": "AlertingRuleSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.monitoring.v1.AlertingRuleStatus": {
- "description": "AlertingRuleStatus is the status of an AlertingRule resource.",
- "type": "object",
- "properties": {
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with.",
- "type": "integer",
- "format": "int64"
+ "$ref": "#/definitions/io.openshift.operator.network.v1.EgressRouterAddress"
+ }
},
- "prometheusRule": {
- "description": "prometheusRule is the generated PrometheusRule for this AlertingRule. Each AlertingRule instance results in a generated PrometheusRule object in the same namespace, which is always the openshift-monitoring namespace.",
+ "mode": {
+ "description": "Mode depicts the mode that is used for the egress router. The default mode is \"Redirect\" and is the only supported mode currently.",
+ "type": "string",
+ "default": ""
+ },
+ "networkInterface": {
+ "description": "Specification of interface to create/use. The default is macvlan. Currently only macvlan is supported.",
"default": {},
- "$ref": "#/definitions/io.openshift.monitoring.v1.PrometheusRuleRef"
+ "$ref": "#/definitions/io.openshift.operator.network.v1.EgressRouterInterface"
+ },
+ "redirect": {
+ "description": "Redirect represents the configuration parameters specific to redirect mode.",
+ "$ref": "#/definitions/io.openshift.operator.network.v1.RedirectConfig"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "monitoring.openshift.io",
+ "Group": "network.operator.openshift.io",
"Version": "v1",
- "Kind": "AlertingRuleStatus",
+ "Kind": "EgressRouterSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.monitoring.v1.PrometheusRuleRef": {
- "description": "PrometheusRuleRef is a reference to an existing PrometheusRule object. Each AlertingRule instance results in a generated PrometheusRule object in the same namespace, which is always the openshift-monitoring namespace. This is used to point to the generated PrometheusRule object in the AlertingRule status.",
+ "io.openshift.operator.network.v1.EgressRouterStatus": {
+ "description": "EgressRouterStatus contains the observed status of EgressRouter. Read-only.",
"type": "object",
- "required": [
- "name"
- ],
"properties": {
- "name": {
- "description": "name of the referenced PrometheusRule.",
- "type": "string",
- "default": ""
+ "conditions": {
+ "description": "Observed status of the egress router",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.network.v1.EgressRouterStatusCondition"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "monitoring.openshift.io",
+ "Group": "network.operator.openshift.io",
"Version": "v1",
- "Kind": "PrometheusRuleRef",
+ "Kind": "EgressRouterStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.monitoring.v1.RelabelConfig": {
- "description": "RelabelConfig allows dynamic rewriting of label sets for alerts. See Prometheus documentation: - https://prometheus.io/docs/prometheus/latest/configuration/configuration/#alert_relabel_configs - https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config",
+ "io.openshift.operator.network.v1.EgressRouterStatusCondition": {
+ "description": "EgressRouterStatusCondition represents the state of the egress router's managed and monitored components.",
"type": "object",
+ "required": [
+ "type",
+ "status",
+ "lastTransitionTime"
+ ],
"properties": {
- "action": {
- "description": "action to perform based on regex matching. Must be one of: 'Replace', 'Keep', 'Drop', 'HashMod', 'LabelMap', 'LabelDrop', or 'LabelKeep'. Default is: 'Replace'",
- "type": "string"
- },
- "modulus": {
- "description": "modulus to take of the hash of the source label values. This can be combined with the 'HashMod' action to set 'target_label' to the 'modulus' of a hash of the concatenated 'source_labels'. This is only valid if sourceLabels is not empty and action is not 'LabelKeep' or 'LabelDrop'.",
- "type": "integer",
- "format": "int64"
- },
- "regex": {
- "description": "regex against which the extracted value is matched. Default is: '(.*)' regex is required for all actions except 'HashMod'",
- "type": "string"
+ "lastTransitionTime": {
+ "description": "LastTransitionTime is the time of the last update to the current status property.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "replacement": {
- "description": "replacement value against which a regex replace is performed if the regular expression matches. This is required if the action is 'Replace' or 'LabelMap' and forbidden for actions 'LabelKeep' and 'LabelDrop'. Regex capture groups are available. Default is: '$1'",
+ "message": {
+ "description": "Message provides additional information about the current condition. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.",
"type": "string"
},
- "separator": {
- "description": "separator placed between concatenated source label values. When omitted, Prometheus will use its default value of ';'.",
+ "reason": {
+ "description": "Reason is the CamelCase reason for the condition's current status.",
"type": "string"
},
- "sourceLabels": {
- "description": "sourceLabels select values from existing labels. Their content is concatenated using the configured separator and matched against the configured regular expression for the 'Replace', 'Keep', and 'Drop' actions. Not allowed for actions 'LabelKeep' and 'LabelDrop'.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "status": {
+ "description": "Status of the condition, one of True, False, Unknown.",
+ "type": "string",
+ "default": ""
},
- "targetLabel": {
- "description": "targetLabel to which the resulting value is written in a 'Replace' action. It is required for 'Replace' and 'HashMod' actions and forbidden for actions 'LabelKeep' and 'LabelDrop'. Regex capture groups are available.",
- "type": "string"
+ "type": {
+ "description": "Type specifies the aspect reported by this condition; one of Available, Progressing, Degraded",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "monitoring.openshift.io",
+ "Group": "network.operator.openshift.io",
"Version": "v1",
- "Kind": "RelabelConfig",
+ "Kind": "EgressRouterStatusCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.monitoring.v1.Rule": {
- "description": "Rule describes an alerting rule. See Prometheus documentation: - https://www.prometheus.io/docs/prometheus/latest/configuration/alerting_rules",
+ "io.openshift.operator.network.v1.L4RedirectRule": {
+ "description": "L4RedirectRule defines a DNAT redirection from a given port to a destination IP and port.",
"type": "object",
"required": [
- "alert",
- "expr"
+ "destinationIP",
+ "port",
+ "protocol"
],
"properties": {
- "alert": {
- "description": "alert is the name of the alert. Must be a valid label value, i.e. may contain any Unicode character.",
+ "destinationIP": {
+ "description": "IP specifies the remote destination's IP address. Can be IPv4 or IPv6.",
"type": "string",
"default": ""
},
- "annotations": {
- "description": "annotations to add to each alert. These are values that can be used to store longer additional information that you won't query on, such as alert descriptions or runbook links.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "expr": {
- "description": "expr is the PromQL expression to evaluate. Every evaluation cycle this is evaluated at the current time, and all resultant time series become pending or firing alerts. This is most often a string representing a PromQL expression, e.g.: mapi_current_pending_csr \u003e mapi_max_pending_csr In rare cases this could be a simple integer, e.g. a simple \"1\" if the intent is to create an alert that is always firing. This is sometimes used to create an always-firing \"Watchdog\" alert in order to ensure the alerting pipeline is functional.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
+ "port": {
+ "description": "Port is the port number to which clients should send traffic to be redirected.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "for": {
- "description": "for is the time period after which alerts are considered firing after first returning results. Alerts which have not yet fired for long enough are considered pending.",
- "type": "string"
+ "protocol": {
+ "description": "Protocol can be TCP, SCTP or UDP.",
+ "type": "string",
+ "default": ""
},
- "labels": {
- "description": "labels to add or overwrite for each alert. The results of the PromQL expression for the alert will result in an existing set of labels for the alert, after evaluating the expression, for any label specified here with the same name as a label in that set, the label here wins and overwrites the previous value. These should typically be short identifying values that may be useful to query against. A common example is the alert severity, where one sets `severity: warning` under the `labels` key:",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
+ "targetPort": {
+ "description": "TargetPort allows specifying the port number on the remote destination to which the traffic gets redirected to. If unspecified, the value from \"Port\" is used.",
+ "type": "integer",
+ "format": "int32"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "monitoring.openshift.io",
+ "Group": "network.operator.openshift.io",
"Version": "v1",
- "Kind": "Rule",
+ "Kind": "L4RedirectRule",
"Scope": "Namespaced"
}
},
- "io.openshift.monitoring.v1.RuleGroup": {
- "description": "RuleGroup is a list of sequentially evaluated alerting rules.",
+ "io.openshift.operator.network.v1.MacvlanConfig": {
+ "description": "MacvlanConfig consists of arguments specific to the macvlan EgressRouterInterfaceType",
"type": "object",
"required": [
- "name",
- "rules"
+ "mode"
],
"properties": {
- "interval": {
- "description": "interval is how often rules in the group are evaluated. If not specified, it defaults to the global.evaluation_interval configured in Prometheus, which itself defaults to 30 seconds. You can check if this value has been modified from the default on your cluster by inspecting the platform Prometheus configuration: The relevant field in that resource is: spec.evaluationInterval",
+ "master": {
+ "description": "Name of the master interface. Need not be specified if it can be inferred from the IP address.",
"type": "string"
},
- "name": {
- "description": "name is the name of the group.",
+ "mode": {
+ "description": "Mode depicts the mode that is used for the macvlan interface; one of Bridge|Private|VEPA|Passthru. The default mode is \"Bridge\".",
"type": "string",
"default": ""
- },
- "rules": {
- "description": "rules is a list of sequentially evaluated alerting rules. Prometheus may process rule groups in parallel, but rules within a single group are always processed sequentially, and all rules are processed.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.monitoring.v1.Rule"
- }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "monitoring.openshift.io",
+ "Group": "network.operator.openshift.io",
"Version": "v1",
- "Kind": "RuleGroup",
+ "Kind": "MacvlanConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.network.cloud.v1.CloudPrivateIPConfig": {
- "description": "CloudPrivateIPConfig performs an assignment of a private IP address to the primary NIC associated with cloud VMs. This is done by specifying the IP and Kubernetes node which the IP should be assigned to. This CRD is intended to be used by the network plugin which manages the cluster network. The spec side represents the desired state requested by the network plugin, and the status side represents the current state that this CRD's controller has executed. No users will have permission to modify it, and if a cluster-admin decides to edit it for some reason, their changes will be overwritten the next time the network plugin reconciles the object. Note: the CR's name must specify the requested private IP address (can be IPv4 or IPv6).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.network.v1.OperatorPKI": {
+ "description": "OperatorPKI is a simple certificate authority. It is not intended for external use - rather, it is internal to the network operator. The CNO creates a CA and a certificate signed by that CA. The certificate has both ClientAuth and ServerAuth extended usages enabled.\n\n\tMore specifically, given an OperatorPKI with \u003cname\u003e, the CNO will manage:\n\n- A Secret called \u003cname\u003e-ca with two data keys:\n - tls.key - the private key\n - tls.crt - the CA certificate\n\n- A ConfigMap called \u003cname\u003e-ca with a single data key:\n - cabundle.crt - the CA certificate(s)\n\n- A Secret called \u003cname\u003e-cert with two data keys:\n - tls.key - the private key\n - tls.crt - the certificate, signed by the CA\n\nThe CA certificate will have a validity of 10 years, rotated after 9. The target certificate will have a validity of 6 months, rotated after 3\n\nThe CA certificate will have a CommonName of \"\u003cnamespace\u003e_\u003cname\u003e-ca@\u003ctimestamp\u003e\", where \u003ctimestamp\u003e is the last rotation time.",
"type": "object",
"required": [
"spec"
@@ -97105,31 +102939,28 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec is the definition of the desired private IP request.",
"default": {},
- "$ref": "#/definitions/io.openshift.network.cloud.v1.CloudPrivateIPConfigSpec"
+ "$ref": "#/definitions/io.openshift.operator.network.v1.OperatorPKISpec"
},
"status": {
- "description": "status is the observed status of the desired private IP request. Read-only.",
"default": {},
- "$ref": "#/definitions/io.openshift.network.cloud.v1.CloudPrivateIPConfigStatus"
+ "$ref": "#/definitions/io.openshift.operator.network.v1.OperatorPKIStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "cloud.network.openshift.io",
+ "Group": "network.operator.openshift.io",
"Version": "v1",
- "Kind": "CloudPrivateIPConfig",
- "Scope": "Clustered"
+ "Kind": "OperatorPKI",
+ "Scope": "Namespaced"
}
},
- "io.openshift.network.cloud.v1.CloudPrivateIPConfigList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). CloudPrivateIPConfigList is the list of CloudPrivateIPConfigList.",
+ "io.openshift.operator.network.v1.OperatorPKIList": {
+ "description": "OperatorPKIList contains a list of OperatorPKI",
"type": "object",
"required": [
"items"
@@ -97140,11 +102971,10 @@
"type": "string"
},
"items": {
- "description": "List of CloudPrivateIPConfig.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.network.cloud.v1.CloudPrivateIPConfig"
+ "$ref": "#/definitions/io.openshift.operator.network.v1.OperatorPKI"
}
},
"kind": {
@@ -97152,91 +102982,87 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "cloud.network.openshift.io",
+ "Group": "network.operator.openshift.io",
"Version": "v1",
- "Kind": "CloudPrivateIPConfigList",
+ "Kind": "OperatorPKIList",
"Scope": "Namespaced"
}
},
- "io.openshift.network.cloud.v1.CloudPrivateIPConfigSpec": {
- "description": "CloudPrivateIPConfigSpec consists of a node name which the private IP should be assigned to.",
+ "io.openshift.operator.network.v1.OperatorPKISpec": {
+ "description": "OperatorPKISpec is the PKI configuration.",
"type": "object",
+ "required": [
+ "targetCert"
+ ],
"properties": {
- "node": {
- "description": "node is the node name, as specified by the Kubernetes field: node.metadata.name",
- "type": "string",
- "default": ""
+ "targetCert": {
+ "description": "targetCert configures the certificate signed by the CA. It will have both ClientAuth and ServerAuth enabled",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.network.v1.CertSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "cloud.network.openshift.io",
+ "Group": "network.operator.openshift.io",
"Version": "v1",
- "Kind": "CloudPrivateIPConfigSpec",
+ "Kind": "OperatorPKISpec",
"Scope": "Namespaced"
}
},
- "io.openshift.network.cloud.v1.CloudPrivateIPConfigStatus": {
- "description": "CloudPrivateIPConfigStatus specifies the node assignment together with its assignment condition.",
+ "io.openshift.operator.network.v1.OperatorPKIStatus": {
+ "description": "OperatorPKIStatus is not implemented.",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "network.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "OperatorPKIStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.network.v1.RedirectConfig": {
+ "description": "RedirectConfig represents the configuration parameters specific to redirect mode.",
"type": "object",
- "required": [
- "conditions"
- ],
"properties": {
- "conditions": {
- "description": "condition is the assignment condition of the private IP and its status",
+ "fallbackIP": {
+ "description": "FallbackIP specifies the remote destination's IP address. Can be IPv4 or IPv6. If no redirect rules are specified, all traffic from the router are redirected to this IP. If redirect rules are specified, then any connections on any other port (undefined in the rules) on the router will be redirected to this IP. If redirect rules are specified and no fallback IP is provided, connections on other ports will simply be rejected.",
+ "type": "string"
+ },
+ "redirectRules": {
+ "description": "List of L4RedirectRules that define the DNAT redirection from the pod to the destination in redirect mode.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ "$ref": "#/definitions/io.openshift.operator.network.v1.L4RedirectRule"
}
- },
- "node": {
- "description": "node is the node name, as specified by the Kubernetes field: node.metadata.name",
- "type": "string",
- "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "cloud.network.openshift.io",
+ "Group": "network.operator.openshift.io",
"Version": "v1",
- "Kind": "CloudPrivateIPConfigStatus",
+ "Kind": "RedirectConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.network.v1.ClusterNetwork": {
- "description": "ClusterNetwork was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.samples.v1.Config": {
+ "description": "Config contains the configuration and detailed condition status for the Samples Operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "serviceNetwork",
- "clusterNetworks"
+ "metadata",
+ "spec"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "clusterNetworks": {
- "description": "ClusterNetworks is a list of ClusterNetwork objects that defines the global overlay network's L3 space by specifying a set of CIDR and netmasks that the SDN can allocate addresses from.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.network.v1.ClusterNetworkEntry"
- }
- },
- "hostsubnetlength": {
- "description": "HostSubnetLength is the number of bits of network to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pods",
- "type": "integer",
- "format": "int64"
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
@@ -97246,70 +103072,71 @@
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "mtu": {
- "description": "MTU is the MTU for the overlay network. This should be 50 less than the MTU of the network connecting the nodes. It is normally autodetected by the cluster network operator.",
- "type": "integer",
- "format": "int64"
- },
- "network": {
- "description": "Network is a CIDR string specifying the global overlay network's L3 space",
- "type": "string"
- },
- "pluginName": {
- "description": "PluginName is the name of the network plugin being used",
- "type": "string"
- },
- "serviceNetwork": {
- "description": "ServiceNetwork is the CIDR range that Service IP addresses are allocated from",
- "type": "string",
- "default": ""
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.samples.v1.ConfigSpec"
},
- "vxlanPort": {
- "description": "VXLANPort sets the VXLAN destination port used by the cluster. It is set by the master configuration file on startup and cannot be edited manually. Valid values for VXLANPort are integers 1-65535 inclusive and if unset defaults to 4789. Changing VXLANPort allows users to resolve issues between openshift SDN and other software trying to use the same VXLAN destination port.",
- "type": "integer",
- "format": "int64"
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.samples.v1.ConfigStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "network.openshift.io",
+ "Group": "samples.operator.openshift.io",
"Version": "v1",
- "Kind": "ClusterNetwork",
+ "Kind": "Config",
"Scope": "Clustered"
}
},
- "io.openshift.network.v1.ClusterNetworkEntry": {
- "description": "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.",
+ "io.openshift.operator.samples.v1.ConfigCondition": {
+ "description": "ConfigCondition captures various conditions of the Config as entries are processed.",
"type": "object",
"required": [
- "CIDR",
- "hostSubnetLength"
+ "type",
+ "status"
],
"properties": {
- "CIDR": {
- "description": "CIDR defines the total range of a cluster networks address space.",
+ "lastTransitionTime": {
+ "description": "lastTransitionTime is the last time the condition transitioned from one status to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "lastUpdateTime": {
+ "description": "lastUpdateTime is the last time this condition was updated.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "description": "message is a human readable message indicating details about the transition.",
+ "type": "string"
+ },
+ "reason": {
+ "description": "reason is what caused the condition's last transition.",
+ "type": "string"
+ },
+ "status": {
+ "description": "status of the condition, one of True, False, Unknown.",
"type": "string",
"default": ""
},
- "hostSubnetLength": {
- "description": "HostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pods.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "type": {
+ "description": "type of condition.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.openshift.io",
+ "Group": "samples.operator.openshift.io",
"Version": "v1",
- "Kind": "ClusterNetworkEntry",
+ "Kind": "ConfigCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.network.v1.ClusterNetworkList": {
- "description": "ClusterNetworkList is a collection of ClusterNetworks\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.samples.v1.ConfigList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -97318,11 +103145,10 @@
"type": "string"
},
"items": {
- "description": "Items is the list of cluster networks",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.network.v1.ClusterNetwork"
+ "$ref": "#/definitions/io.openshift.operator.samples.v1.Config"
}
},
"kind": {
@@ -97337,659 +103163,500 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "network.openshift.io",
- "Version": "v1",
- "Kind": "ClusterNetworkList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.network.v1.EgressNetworkPolicy": {
- "description": "EgressNetworkPolicy was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "required": [
- "spec"
- ],
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec is the specification of the current egress network policy",
- "default": {},
- "$ref": "#/definitions/io.openshift.network.v1.EgressNetworkPolicySpec"
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "network.openshift.io",
+ "Group": "samples.operator.openshift.io",
"Version": "v1",
- "Kind": "EgressNetworkPolicy",
+ "Kind": "ConfigList",
"Scope": "Namespaced"
}
},
- "io.openshift.network.v1.EgressNetworkPolicyList": {
- "description": "EgressNetworkPolicyList is a collection of EgressNetworkPolicy\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.samples.v1.ConfigSpec": {
+ "description": "ConfigSpec contains the desired configuration and state for the Samples Operator, controlling various behavior around the imagestreams and templates it creates/updates in the openshift namespace.",
"type": "object",
- "required": [
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "description": "items is the list of policies",
+ "architectures": {
+ "description": "architectures determine which hardware architecture(s) to install, where x86_64, ppc64le, and s390x are the only supported choices currently.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.network.v1.EgressNetworkPolicy"
+ "type": "string",
+ "default": ""
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "managementState": {
+ "description": "managementState is top level on/off type of switch for all operators. When \"Managed\", this operator processes config and manipulates the samples accordingly. When \"Unmanaged\", this operator ignores any updates to the resources it watches. When \"Removed\", it reacts that same wasy as it does if the Config object is deleted, meaning any ImageStreams or Templates it manages (i.e. it honors the skipped lists) and the registry secret are deleted, along with the ConfigMap in the operator's namespace that represents the last config used to manipulate the samples,",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
- }
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "network.openshift.io",
- "Version": "v1",
- "Kind": "EgressNetworkPolicyList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.network.v1.EgressNetworkPolicyPeer": {
- "description": "EgressNetworkPolicyPeer specifies a target to apply egress network policy to",
- "type": "object",
- "properties": {
- "cidrSelector": {
- "description": "CIDRSelector is the CIDR range to allow/deny traffic to. If this is set, dnsName must be unset Ideally we would have liked to use the cidr openapi format for this property. But openshift-sdn only supports v4 while specifying the cidr format allows both v4 and v6 cidrs We are therefore using a regex pattern to validate instead.",
+ "samplesRegistry": {
+ "description": "samplesRegistry allows for the specification of which registry is accessed by the ImageStreams for their image content. Defaults on the content in https://github.com/openshift/library that are pulled into this github repository, but based on our pulling only ocp content it typically defaults to registry.redhat.io.",
"type": "string"
},
- "dnsName": {
- "description": "DNSName is the domain name to allow/deny traffic to. If this is set, cidrSelector must be unset",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "network.openshift.io",
- "Version": "v1",
- "Kind": "EgressNetworkPolicyPeer",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.network.v1.EgressNetworkPolicyRule": {
- "description": "EgressNetworkPolicyRule contains a single egress network policy rule",
- "type": "object",
- "required": [
- "type",
- "to"
- ],
- "properties": {
- "to": {
- "description": "to is the target that traffic is allowed/denied to",
- "default": {},
- "$ref": "#/definitions/io.openshift.network.v1.EgressNetworkPolicyPeer"
+ "skippedHelmCharts": {
+ "description": "skippedHelmCharts specifies names of helm charts that should NOT be managed. Admins can use this to allow them to delete content they don’t want. They will still have to MANUALLY DELETE the content but the operator will not recreate(or update) anything listed here. Few examples of the name of helmcharts which can be skipped are 'redhat-redhat-perl-imagestreams','redhat-redhat-nodejs-imagestreams','redhat-nginx-imagestreams', 'redhat-redhat-ruby-imagestreams','redhat-redhat-python-imagestreams','redhat-redhat-php-imagestreams', 'redhat-httpd-imagestreams','redhat-redhat-dotnet-imagestreams'. Rest of the names can be obtained from openshift console --\u003e helmcharts --\u003einstalled helmcharts. This will display the list of all the 12 helmcharts(of imagestreams)being installed by Samples Operator. The skippedHelmCharts must be a valid Kubernetes resource name. May contain only lowercase alphanumeric characters, hyphens and periods, and each period separated segment must begin and end with an alphanumeric character. It must be non-empty and at most 253 characters in length",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "set"
},
- "type": {
- "description": "type marks this as an \"Allow\" or \"Deny\" rule",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "network.openshift.io",
- "Version": "v1",
- "Kind": "EgressNetworkPolicyRule",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.network.v1.EgressNetworkPolicySpec": {
- "description": "EgressNetworkPolicySpec provides a list of policies on outgoing network traffic",
- "type": "object",
- "required": [
- "egress"
- ],
- "properties": {
- "egress": {
- "description": "egress contains the list of egress policy rules",
+ "skippedImagestreams": {
+ "description": "skippedImagestreams specifies names of image streams that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.network.v1.EgressNetworkPolicyRule"
+ "type": "string",
+ "default": ""
+ }
+ },
+ "skippedTemplates": {
+ "description": "skippedTemplates specifies names of templates that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
}
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.openshift.io",
+ "Group": "samples.operator.openshift.io",
"Version": "v1",
- "Kind": "EgressNetworkPolicySpec",
+ "Kind": "ConfigSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.network.v1.HostSubnet": {
- "description": "HostSubnet was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.samples.v1.ConfigStatus": {
+ "description": "ConfigStatus contains the actual configuration in effect, as well as various details that describe the state of the Samples Operator.",
"type": "object",
- "required": [
- "host",
- "hostIP",
- "subnet"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "egressCIDRs": {
- "description": "EgressCIDRs is the list of CIDR ranges available for automatically assigning egress IPs to this node from. If this field is set then EgressIPs should be treated as read-only.",
+ "architectures": {
+ "description": "architectures determine which hardware architecture(s) to install, where x86_64 and ppc64le are the supported choices.",
"type": "array",
"items": {
"type": "string",
"default": ""
- }
+ },
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "egressIPs": {
- "description": "EgressIPs is the list of automatic egress IP addresses currently hosted by this node. If EgressCIDRs is empty, this can be set by hand; if EgressCIDRs is set then the master will overwrite the value here with its own allocation of egress IPs.",
+ "conditions": {
+ "description": "conditions represents the available maintenance status of the sample imagestreams and templates.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
- }
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.samples.v1.ConfigCondition"
+ },
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "host": {
- "description": "Host is the name of the node. (This is the same as the object's name, but both fields must be set.)",
+ "managementState": {
+ "description": "managementState reflects the current operational status of the on/off switch for the operator. This operator compares the ManagementState as part of determining that we are turning the operator back on (i.e. \"Managed\") when it was previously \"Unmanaged\".",
"type": "string",
- "default": ""
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "hostIP": {
- "description": "HostIP is the IP address to be used as a VTEP by other nodes in the overlay network",
+ "samplesRegistry": {
+ "description": "samplesRegistry allows for the specification of which registry is accessed by the ImageStreams for their image content. Defaults on the content in https://github.com/openshift/library that are pulled into this github repository, but based on our pulling only ocp content it typically defaults to registry.redhat.io.",
"type": "string",
- "default": ""
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "skippedImagestreams": {
+ "description": "skippedImagestreams specifies names of image streams that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "skippedTemplates": {
+ "description": "skippedTemplates specifies names of templates that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
+ },
+ "version": {
+ "description": "version is the value of the operator's payload based version indicator when it was last successfully processed",
+ "type": "string",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "samples.operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ConfigStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.AWSCSIDriverConfigSpec": {
+ "description": "AWSCSIDriverConfigSpec defines properties that can be configured for the AWS CSI driver.",
+ "type": "object",
+ "properties": {
+ "efsVolumeMetrics": {
+ "description": "efsVolumeMetrics sets the configuration for collecting metrics from EFS volumes used by the EFS CSI Driver.",
+ "$ref": "#/definitions/io.openshift.operator.v1.AWSEFSVolumeMetrics"
},
- "subnet": {
- "description": "Subnet is the CIDR range of the overlay network assigned to the node for its pods",
- "type": "string",
- "default": ""
+ "kmsKeyARN": {
+ "description": "kmsKeyARN sets the cluster default storage class to encrypt volumes with a user-defined KMS key, rather than the default KMS key used by AWS. The value may be either the ARN or Alias ARN of a KMS key.",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "network.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "HostSubnet",
- "Scope": "Clustered"
+ "Kind": "AWSCSIDriverConfigSpec",
+ "Scope": "Namespaced"
}
},
- "io.openshift.network.v1.HostSubnetList": {
- "description": "HostSubnetList is a collection of HostSubnets\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.AWSClassicLoadBalancerParameters": {
+ "description": "AWSClassicLoadBalancerParameters holds configuration parameters for an AWS Classic load balancer.",
"type": "object",
- "required": [
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "description": "Items is the list of host subnets",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.network.v1.HostSubnet"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "connectionIdleTimeout": {
+ "description": "connectionIdleTimeout specifies the maximum time period that a connection may be idle before the load balancer closes the connection. The value must be parseable as a time duration value; see \u003chttps://pkg.go.dev/time#ParseDuration\u003e. A nil or zero value means no opinion, in which case a default value is used. The default value for this field is 60s. This default is subject to change.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "subnets": {
+ "description": "subnets specifies the subnets to which the load balancer will attach. The subnets may be specified by either their ID or name. The total number of subnets is limited to 10.\n\nIn order for the load balancer to be provisioned with subnets, each subnet must exist, each subnet must be from a different availability zone, and the load balancer service must be recreated to pick up new values.\n\nWhen omitted from the spec, the subnets will be auto-discovered for each availability zone. Auto-discovered subnets are not reported in the status of the IngressController object.",
+ "$ref": "#/definitions/io.openshift.operator.v1.AWSSubnets"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "network.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "HostSubnetList",
+ "Kind": "AWSClassicLoadBalancerParameters",
"Scope": "Namespaced"
}
},
- "io.openshift.network.v1.NetNamespace": {
- "description": "NetNamespace was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.AWSEFSVolumeMetrics": {
+ "description": "AWSEFSVolumeMetrics defines the configuration for volume metrics in the EFS CSI Driver.",
"type": "object",
"required": [
- "netname",
- "netid"
+ "state"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "egressIPs": {
- "description": "EgressIPs is a list of reserved IPs that will be used as the source for external traffic coming from pods in this namespace. (If empty, external traffic will be masqueraded to Node IPs.)",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "netid": {
- "description": "NetID is the network identifier of the network namespace assigned to each overlay network packet. This can be manipulated with the \"oc adm pod-network\" commands.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "recursiveWalk": {
+ "description": "recursiveWalk provides additional configuration for collecting volume metrics in the AWS EFS CSI Driver when the state is set to RecursiveWalk.",
+ "$ref": "#/definitions/io.openshift.operator.v1.AWSEFSVolumeMetricsRecursiveWalkConfig"
},
- "netname": {
- "description": "NetName is the name of the network namespace. (This is the same as the object's name, but both fields must be set.)",
+ "state": {
+ "description": "state defines the state of metric collection in the AWS EFS CSI Driver. This field is required and must be set to one of the following values: Disabled or RecursiveWalk. Disabled means no metrics collection will be performed. This is the default value. RecursiveWalk means the AWS EFS CSI Driver will recursively scan volumes to collect metrics. This process may result in high CPU and memory usage, depending on the volume size.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "network.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "NetNamespace",
- "Scope": "Clustered"
- }
+ "Kind": "AWSEFSVolumeMetrics",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "state",
+ "fields-to-discriminateBy": {
+ "recursiveWalk": "RecursiveWalk"
+ }
+ }
+ ]
},
- "io.openshift.network.v1.NetNamespaceList": {
- "description": "NetNamespaceList is a collection of NetNamespaces\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.AWSEFSVolumeMetricsRecursiveWalkConfig": {
+ "description": "AWSEFSVolumeMetricsRecursiveWalkConfig defines options for volume metrics in the EFS CSI Driver.",
"type": "object",
- "required": [
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "description": "Items is the list of net namespaces",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.network.v1.NetNamespace"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "fsRateLimit": {
+ "description": "fsRateLimit defines the rate limit, in goroutines per file system, for processing volume metrics. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 5. The valid range is from 1 to 100 goroutines.",
+ "type": "integer",
+ "format": "int32"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "refreshPeriodMinutes": {
+ "description": "refreshPeriodMinutes specifies the frequency, in minutes, at which volume metrics are refreshed. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 240. The valid range is from 1 to 43200 minutes (30 days).",
+ "type": "integer",
+ "format": "int32"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "network.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "NetNamespaceList",
+ "Kind": "AWSEFSVolumeMetricsRecursiveWalkConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.network.v1alpha1.DNSNameResolver": {
- "description": "DNSNameResolver stores the DNS name resolution information of a DNS name. It can be enabled by the TechPreviewNoUpgrade feature set. It can also be enabled by the feature gate DNSNameResolver when using CustomNoUpgrade feature set.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.operator.v1.AWSLoadBalancerParameters": {
+ "description": "AWSLoadBalancerParameters provides configuration settings that are specific to AWS load balancers.",
"type": "object",
"required": [
- "spec"
+ "type"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "classicLoadBalancer": {
+ "description": "classicLoadBalancerParameters holds configuration parameters for an AWS classic load balancer. Present only if type is Classic.",
+ "$ref": "#/definitions/io.openshift.operator.v1.AWSClassicLoadBalancerParameters"
},
- "spec": {
- "description": "spec is the specification of the desired behavior of the DNSNameResolver.",
- "default": {},
- "$ref": "#/definitions/io.openshift.network.v1alpha1.DNSNameResolverSpec"
+ "networkLoadBalancer": {
+ "description": "networkLoadBalancerParameters holds configuration parameters for an AWS network load balancer. Present only if type is NLB.",
+ "$ref": "#/definitions/io.openshift.operator.v1.AWSNetworkLoadBalancerParameters"
},
- "status": {
- "description": "status is the most recently observed status of the DNSNameResolver.",
- "default": {},
- "$ref": "#/definitions/io.openshift.network.v1alpha1.DNSNameResolverStatus"
+ "type": {
+ "description": "type is the type of AWS load balancer to instantiate for an ingresscontroller.\n\nValid values are:\n\n* \"Classic\": A Classic Load Balancer that makes routing decisions at either\n the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See\n the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb\n\n* \"NLB\": A Network Load Balancer that makes routing decisions at the\n transport layer (TCP/SSL). See the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "network.openshift.io",
- "Version": "v1alpha1",
- "Kind": "DNSNameResolver",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "AWSLoadBalancerParameters",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "classicLoadBalancer": "ClassicLoadBalancerParameters",
+ "networkLoadBalancer": "NetworkLoadBalancerParameters"
+ }
+ }
+ ]
},
- "io.openshift.network.v1alpha1.DNSNameResolverList": {
- "description": "DNSNameResolverList contains a list of DNSNameResolvers.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.operator.v1.AWSNetworkLoadBalancerParameters": {
+ "description": "AWSNetworkLoadBalancerParameters holds configuration parameters for an AWS Network load balancer. For Example: Setting AWS EIPs https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html",
"type": "object",
- "required": [
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "description": "items gives the list of DNSNameResolvers.",
+ "eipAllocations": {
+ "description": "eipAllocations is a list of IDs for Elastic IP (EIP) addresses that are assigned to the Network Load Balancer. The following restrictions apply:\n\neipAllocations can only be used with external scope, not internal. An EIP can be allocated to only a single IngressController. The number of EIP allocations must match the number of subnets that are used for the load balancer. Each EIP allocation must be unique. A maximum of 10 EIP allocations are permitted.\n\nSee https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html for general information about configuration, characteristics, and limitations of Elastic IP addresses.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.network.v1alpha1.DNSNameResolver"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "subnets": {
+ "description": "subnets specifies the subnets to which the load balancer will attach. The subnets may be specified by either their ID or name. The total number of subnets is limited to 10.\n\nIn order for the load balancer to be provisioned with subnets, each subnet must exist, each subnet must be from a different availability zone, and the load balancer service must be recreated to pick up new values.\n\nWhen omitted from the spec, the subnets will be auto-discovered for each availability zone. Auto-discovered subnets are not reported in the status of the IngressController object.",
+ "$ref": "#/definitions/io.openshift.operator.v1.AWSSubnets"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "network.openshift.io",
- "Version": "v1alpha1",
- "Kind": "DNSNameResolverList",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "AWSNetworkLoadBalancerParameters",
"Scope": "Namespaced"
}
},
- "io.openshift.network.v1alpha1.DNSNameResolverResolvedAddress": {
- "description": "DNSNameResolverResolvedAddress describes the details of an IP address for a resolved DNS name.",
+ "io.openshift.operator.v1.AWSSubnets": {
+ "description": "AWSSubnets contains a list of references to AWS subnets by ID or name.",
"type": "object",
- "required": [
- "ip",
- "ttlSeconds",
- "lastLookupTime"
- ],
"properties": {
- "ip": {
- "description": "ip is an IP address associated with the dnsName. The validity of the IP address expires after lastLookupTime + ttlSeconds. To refresh the information, a DNS lookup will be performed upon the expiration of the IP address's validity. If the information is not refreshed then it will be removed with a grace period after the expiration of the IP address's validity.",
- "type": "string",
- "default": ""
- },
- "lastLookupTime": {
- "description": "lastLookupTime is the timestamp when the last DNS lookup was completed successfully. The validity of the IP address expires after lastLookupTime + ttlSeconds. The value of this field will be updated to the current time on a successful DNS lookup. If the information is not refreshed then it will be removed with a grace period after the expiration of the IP address's validity.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "ids": {
+ "description": "ids specifies a list of AWS subnets by subnet ID. Subnet IDs must start with \"subnet-\", consist only of alphanumeric characters, must be exactly 24 characters long, must be unique, and the total number of subnets specified by ids and names must not exceed 10.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "ttlSeconds": {
- "description": "ttlSeconds is the time-to-live value of the IP address. The validity of the IP address expires after lastLookupTime + ttlSeconds. On a successful DNS lookup the value of this field will be updated with the current time-to-live value. If the information is not refreshed then it will be removed with a grace period after the expiration of the IP address's validity.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "names": {
+ "description": "names specifies a list of AWS subnets by subnet name. Subnet names must not start with \"subnet-\", must not include commas, must be under 256 characters in length, must be unique, and the total number of subnets specified by ids and names must not exceed 10.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.openshift.io",
- "Version": "v1alpha1",
- "Kind": "DNSNameResolverResolvedAddress",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "AWSSubnets",
"Scope": "Namespaced"
}
},
- "io.openshift.network.v1alpha1.DNSNameResolverResolvedName": {
- "description": "DNSNameResolverResolvedName describes the details of a resolved DNS name.",
+ "io.openshift.operator.v1.AccessLogging": {
+ "description": "AccessLogging describes how client requests should be logged.",
"type": "object",
"required": [
- "dnsName",
- "resolvedAddresses"
+ "destination"
],
"properties": {
- "conditions": {
- "description": "conditions provide information about the state of the DNS name. Known .status.conditions.type is: \"Degraded\". \"Degraded\" is true when the last resolution failed for the DNS name, and false otherwise.",
+ "destination": {
+ "description": "destination is where access logs go.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.LoggingDestination"
+ },
+ "httpCaptureCookies": {
+ "description": "httpCaptureCookies specifies HTTP cookies that should be captured in access logs. If this field is empty, no cookies are captured.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerCaptureHTTPCookie"
},
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
+ "x-kubernetes-list-type": "atomic"
},
- "dnsName": {
- "description": "dnsName is the resolved DNS name matching the name field of DNSNameResolverSpec. This field can store both regular and wildcard DNS names which match the spec.name field. When the spec.name field contains a regular DNS name, this field will store the same regular DNS name after it is successfully resolved. When the spec.name field contains a wildcard DNS name, each resolvedName.dnsName will store the regular DNS names which match the wildcard DNS name and have been successfully resolved. If the wildcard DNS name can also be successfully resolved, then this field will store the wildcard DNS name as well.",
- "type": "string",
- "default": ""
+ "httpCaptureHeaders": {
+ "description": "httpCaptureHeaders defines HTTP headers that should be captured in access logs. If this field is empty, no headers are captured.\n\nNote that this option only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). Headers cannot be captured for TLS passthrough connections.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerCaptureHTTPHeaders"
},
- "resolutionFailures": {
- "description": "resolutionFailures keeps the count of how many consecutive times the DNS resolution failed for the dnsName. If the DNS resolution succeeds then the field will be set to zero. Upon every failure, the value of the field will be incremented by one. The details about the DNS name will be removed, if the value of resolutionFailures reaches 5 and the TTL of all the associated IP addresses have expired.",
- "type": "integer",
- "format": "int32"
+ "httpLogFormat": {
+ "description": "httpLogFormat specifies the format of the log message for an HTTP request.\n\nIf this field is empty, log messages use the implementation's default HTTP log format. For HAProxy's default HTTP log format, see the HAProxy documentation: http://cbonte.github.io/haproxy-dconv/2.0/configuration.html#8.2.3\n\nNote that this format only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). It does not affect the log format for TLS passthrough connections.",
+ "type": "string"
},
- "resolvedAddresses": {
- "description": "resolvedAddresses gives the list of associated IP addresses and their corresponding TTLs and last lookup times for the dnsName.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.network.v1alpha1.DNSNameResolverResolvedAddress"
- },
- "x-kubernetes-list-map-keys": [
- "ip"
- ],
- "x-kubernetes-list-type": "map"
+ "logEmptyRequests": {
+ "description": "logEmptyRequests specifies how connections on which no request is received should be logged. Typically, these empty requests come from load balancers' health probes or Web browsers' speculative connections (\"preconnect\"), in which case logging these requests may be undesirable. However, these requests may also be caused by network errors, in which case logging empty requests may be useful for diagnosing the errors. In addition, these requests may be caused by port scans, in which case logging empty requests may aid in detecting intrusion attempts. Allowed values for this field are \"Log\" and \"Ignore\". The default value is \"Log\".",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.openshift.io",
- "Version": "v1alpha1",
- "Kind": "DNSNameResolverResolvedName",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "AccessLogging",
"Scope": "Namespaced"
}
},
- "io.openshift.network.v1alpha1.DNSNameResolverSpec": {
- "description": "DNSNameResolverSpec is a desired state description of DNSNameResolver.",
+ "io.openshift.operator.v1.AddPage": {
+ "description": "AddPage allows customizing actions on the Add page in developer perspective.",
"type": "object",
- "required": [
- "name"
- ],
"properties": {
- "name": {
- "description": "name is the DNS name for which the DNS name resolution information will be stored. For a regular DNS name, only the DNS name resolution information of the regular DNS name will be stored. For a wildcard DNS name, the DNS name resolution information of all the DNS names that match the wildcard DNS name will be stored. For a wildcard DNS name, the '*' will match only one label. Additionally, only a single '*' can be used at the beginning of the wildcard DNS name. For example, '*.example.com.' will match 'sub1.example.com.' but won't match 'sub2.sub1.example.com.'",
- "type": "string",
- "default": ""
+ "disabledActions": {
+ "description": "disabledActions is a list of actions that are not shown to users. Each action in the list is represented by its ID.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.openshift.io",
- "Version": "v1alpha1",
- "Kind": "DNSNameResolverSpec",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "AddPage",
"Scope": "Namespaced"
}
},
- "io.openshift.network.v1alpha1.DNSNameResolverStatus": {
- "description": "DNSNameResolverStatus defines the observed status of DNSNameResolver.",
+ "io.openshift.operator.v1.AdditionalNetworkDefinition": {
+ "description": "AdditionalNetworkDefinition configures an extra network that is available but not created by default. Instead, pods must request them by name. type must be specified, along with exactly one \"Config\" that matches the type.",
"type": "object",
+ "required": [
+ "type",
+ "name"
+ ],
"properties": {
- "resolvedNames": {
- "description": "resolvedNames contains a list of matching DNS names and their corresponding IP addresses along with their TTL and last DNS lookup times.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.network.v1alpha1.DNSNameResolverResolvedName"
- },
- "x-kubernetes-list-map-keys": [
- "dnsName"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "dnsName",
- "x-kubernetes-patch-strategy": "merge"
+ "name": {
+ "description": "name is the name of the network. This will be populated in the resulting CRD This must be unique.",
+ "type": "string",
+ "default": ""
+ },
+ "namespace": {
+ "description": "namespace is the namespace of the network. This will be populated in the resulting CRD If not given the network will be created in the default namespace.",
+ "type": "string"
+ },
+ "rawCNIConfig": {
+ "description": "rawCNIConfig is the raw CNI configuration json to create in the NetworkAttachmentDefinition CRD",
+ "type": "string"
+ },
+ "simpleMacvlanConfig": {
+ "description": "SimpleMacvlanConfig configures the macvlan interface in case of type:NetworkTypeSimpleMacvlan",
+ "$ref": "#/definitions/io.openshift.operator.v1.SimpleMacvlanConfig"
+ },
+ "type": {
+ "description": "type is the type of network The supported values are NetworkTypeRaw, NetworkTypeSimpleMacvlan",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.openshift.io",
- "Version": "v1alpha1",
- "Kind": "DNSNameResolverStatus",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "AdditionalNetworkDefinition",
"Scope": "Namespaced"
}
},
- "io.openshift.oauth.v1.ClusterRoleScopeRestriction": {
- "description": "ClusterRoleScopeRestriction describes restrictions on cluster role scopes",
+ "io.openshift.operator.v1.AdditionalRoutingCapabilities": {
+ "description": "AdditionalRoutingCapabilities describes components and relevant configuration providing advanced routing capabilities.",
"type": "object",
"required": [
- "roleNames",
- "namespaces",
- "allowEscalation"
+ "providers"
],
"properties": {
- "allowEscalation": {
- "description": "AllowEscalation indicates whether you can request roles and their escalating resources",
- "type": "boolean",
- "default": false
- },
- "namespaces": {
- "description": "Namespaces is the list of namespaces that can be referenced. * means any of them (including *)",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "roleNames": {
- "description": "RoleNames is the list of cluster roles that can referenced. * means anything",
+ "providers": {
+ "description": "providers is a set of enabled components that provide additional routing capabilities. Entries on this list must be unique. The only valid value is currrently \"FRR\" which provides FRR routing capabilities through the deployment of FRR.",
"type": "array",
"items": {
"type": "string",
"default": ""
- }
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "oauth.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ClusterRoleScopeRestriction",
+ "Kind": "AdditionalRoutingCapabilities",
"Scope": "Namespaced"
}
},
- "io.openshift.oauth.v1.OAuthAccessToken": {
- "description": "OAuthAccessToken describes an OAuth access token. The name of a token must be prefixed with a `sha256~` string, must not contain \"/\" or \"%\" characters and must be at least 32 characters long.\n\nThe name of the token is constructed from the actual token by sha256-hashing it and using URL-safe unpadded base64-encoding (as described in RFC4648) on the hashed result.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.Authentication": {
+ "description": "Authentication provides information to configure an operator to manage authentication.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
"apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "authorizeToken": {
- "description": "AuthorizeToken contains the token that authorized this token",
- "type": "string"
- },
- "clientName": {
- "description": "ClientName references the client that created this token.",
- "type": "string"
- },
- "expiresIn": {
- "description": "ExpiresIn is the seconds from CreationTime before this token expires.",
- "type": "integer",
- "format": "int64"
- },
- "inactivityTimeoutSeconds": {
- "description": "InactivityTimeoutSeconds is the value in seconds, from the CreationTimestamp, after which this token can no longer be used. The value is automatically incremented when the token is used.",
- "type": "integer",
- "format": "int32"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "redirectURI": {
- "description": "RedirectURI is the redirection associated with the token.",
- "type": "string"
- },
- "refreshToken": {
- "description": "RefreshToken is the value by which this token can be renewed. Can be blank.",
- "type": "string"
- },
- "scopes": {
- "description": "Scopes is an array of the requested scopes.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "userName": {
- "description": "UserName is the user name associated with this token",
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "userUID": {
- "description": "UserUID is the unique UID associated with this token",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.AuthenticationSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.AuthenticationStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "oauth.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "OAuthAccessToken",
+ "Kind": "Authentication",
"Scope": "Clustered"
}
},
- "io.openshift.oauth.v1.OAuthAccessTokenList": {
- "description": "OAuthAccessTokenList is a collection of OAuth access tokens\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.AuthenticationList": {
+ "description": "AuthenticationList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -97998,11 +103665,10 @@
"type": "string"
},
"items": {
- "description": "Items is the list of OAuth access tokens",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.oauth.v1.OAuthAccessToken"
+ "$ref": "#/definitions/io.openshift.operator.v1.Authentication"
}
},
"kind": {
@@ -98017,201 +103683,229 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "oauth.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "OAuthAccessTokenList",
+ "Kind": "AuthenticationList",
"Scope": "Namespaced"
}
},
- "io.openshift.oauth.v1.OAuthAuthorizeToken": {
- "description": "OAuthAuthorizeToken describes an OAuth authorization token\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.AuthenticationSpec": {
"type": "object",
+ "required": [
+ "managementState"
+ ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "clientName": {
- "description": "ClientName references the client that created this token.",
- "type": "string"
- },
- "codeChallenge": {
- "description": "CodeChallenge is the optional code_challenge associated with this authorization code, as described in rfc7636",
- "type": "string"
- },
- "codeChallengeMethod": {
- "description": "CodeChallengeMethod is the optional code_challenge_method associated with this authorization code, as described in rfc7636",
- "type": "string"
- },
- "expiresIn": {
- "description": "ExpiresIn is the seconds from CreationTime before this token expires.",
- "type": "integer",
- "format": "int64"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "redirectURI": {
- "description": "RedirectURI is the redirection associated with the token.",
+ "logLevel": {
+ "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "scopes": {
- "description": "Scopes is an array of the requested scopes.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "managementState": {
+ "description": "managementState indicates whether and how the operator should manage the component",
+ "type": "string",
+ "default": ""
},
- "state": {
- "description": "State data from request",
- "type": "string"
+ "observedConfig": {
+ "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
},
- "userName": {
- "description": "UserName is the user name associated with this token",
+ "operatorLogLevel": {
+ "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "userUID": {
- "description": "UserUID is the unique UID associated with this token. UserUID and UserName must both match for this token to be valid.",
- "type": "string"
+ "unsupportedConfigOverrides": {
+ "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "oauth.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "OAuthAuthorizeToken",
- "Scope": "Clustered"
+ "Kind": "AuthenticationSpec",
+ "Scope": "Namespaced"
}
},
- "io.openshift.oauth.v1.OAuthAuthorizeTokenList": {
- "description": "OAuthAuthorizeTokenList is a collection of OAuth authorization tokens\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.AuthenticationStatus": {
"type": "object",
"required": [
- "items"
+ "readyReplicas"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "conditions": {
+ "description": "conditions is a list of conditions and their status",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "items": {
- "description": "Items is the list of OAuth authorization tokens",
+ "generations": {
+ "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.oauth.v1.OAuthAuthorizeToken"
- }
+ "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "group",
+ "resource",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "latestAvailableRevision": {
+ "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "type": "integer",
+ "format": "int32"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "oauthAPIServer": {
+ "description": "OAuthAPIServer holds status specific only to oauth-apiserver",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "$ref": "#/definitions/io.openshift.operator.v1.OAuthAPIServerStatus"
+ },
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
+ "type": "integer",
+ "format": "int64"
+ },
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "oauth.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "OAuthAuthorizeTokenList",
+ "Kind": "AuthenticationStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.oauth.v1.OAuthClient": {
- "description": "OAuthClient describes an OAuth client\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.AzureCSIDriverConfigSpec": {
+ "description": "AzureCSIDriverConfigSpec defines properties that can be configured for the Azure CSI driver.",
"type": "object",
"properties": {
- "accessTokenInactivityTimeoutSeconds": {
- "description": "AccessTokenInactivityTimeoutSeconds overrides the default token inactivity timeout for tokens granted to this client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. This value needs to be set only if the default set in configuration is not appropriate for this client. Valid values are: - 0: Tokens for this client never time out - X: Tokens time out if there is no activity for X seconds The current minimum allowed value for X is 300 (5 minutes)\n\nWARNING: existing tokens' timeout will not be affected (lowered) by changing this value",
- "type": "integer",
- "format": "int32"
- },
- "accessTokenMaxAgeSeconds": {
- "description": "AccessTokenMaxAgeSeconds overrides the default access token max age for tokens granted to this client. 0 means no expiration.",
- "type": "integer",
- "format": "int32"
- },
- "additionalSecrets": {
- "description": "AdditionalSecrets holds other secrets that may be used to identify the client. This is useful for rotation and for service account token validation",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "diskEncryptionSet": {
+ "description": "diskEncryptionSet sets the cluster default storage class to encrypt volumes with a customer-managed encryption set, rather than the default platform-managed keys.",
+ "$ref": "#/definitions/io.openshift.operator.v1.AzureDiskEncryptionSet"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "AzureCSIDriverConfigSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.AzureDiskEncryptionSet": {
+ "description": "AzureDiskEncryptionSet defines the configuration for a disk encryption set.",
+ "type": "object",
+ "required": [
+ "subscriptionID",
+ "resourceGroup",
+ "name"
+ ],
+ "properties": {
+ "name": {
+ "description": "name is the name of the disk encryption set that will be set on the default storage class. The value should consist of only alphanumberic characters, underscores (_), hyphens, and be at most 80 characters in length.",
+ "type": "string",
+ "default": ""
},
- "grantMethod": {
- "description": "GrantMethod is a required field which determines how to handle grants for this client. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients",
- "type": "string"
+ "resourceGroup": {
+ "description": "resourceGroup defines the Azure resource group that contains the disk encryption set. The value should consist of only alphanumberic characters, underscores (_), parentheses, hyphens and periods. The value should not end in a period and be at most 90 characters in length.",
+ "type": "string",
+ "default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "subscriptionID": {
+ "description": "subscriptionID defines the Azure subscription that contains the disk encryption set. The value should meet the following conditions: 1. It should be a 128-bit number. 2. It should be 36 characters (32 hexadecimal characters and 4 hyphens) long. 3. It should be displayed in five groups separated by hyphens (-). 4. The first group should be 8 characters long. 5. The second, third, and fourth groups should be 4 characters long. 6. The fifth group should be 12 characters long. An Example SubscrionID: f2007bbf-f802-4a47-9336-cf7c6b89b378",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "AzureDiskEncryptionSet",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.CSIDriverConfigSpec": {
+ "description": "CSIDriverConfigSpec defines configuration spec that can be used to optionally configure a specific CSI Driver.",
+ "type": "object",
+ "required": [
+ "driverType"
+ ],
+ "properties": {
+ "aws": {
+ "description": "aws is used to configure the AWS CSI driver.",
+ "$ref": "#/definitions/io.openshift.operator.v1.AWSCSIDriverConfigSpec"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "azure": {
+ "description": "azure is used to configure the Azure CSI driver.",
+ "$ref": "#/definitions/io.openshift.operator.v1.AzureCSIDriverConfigSpec"
},
- "redirectURIs": {
- "description": "RedirectURIs is the valid redirection URIs associated with a client",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-patch-strategy": "merge"
+ "driverType": {
+ "description": "driverType indicates type of CSI driver for which the driverConfig is being applied to. Valid values are: AWS, Azure, GCP, IBMCloud, vSphere and omitted. Consumers should treat unknown values as a NO-OP.",
+ "type": "string",
+ "default": ""
},
- "respondWithChallenges": {
- "description": "RespondWithChallenges indicates whether the client wants authentication needed responses made in the form of challenges instead of redirects",
- "type": "boolean"
+ "gcp": {
+ "description": "gcp is used to configure the GCP CSI driver.",
+ "$ref": "#/definitions/io.openshift.operator.v1.GCPCSIDriverConfigSpec"
},
- "scopeRestrictions": {
- "description": "ScopeRestrictions describes which scopes this client can request. Each requested scope is checked against each restriction. If any restriction matches, then the scope is allowed. If no restriction matches, then the scope is denied.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.oauth.v1.ScopeRestriction"
- }
+ "ibmcloud": {
+ "description": "ibmcloud is used to configure the IBM Cloud CSI driver.",
+ "$ref": "#/definitions/io.openshift.operator.v1.IBMCloudCSIDriverConfigSpec"
},
- "secret": {
- "description": "Secret is the unique secret associated with a client",
- "type": "string"
+ "vSphere": {
+ "description": "vsphere is used to configure the vsphere CSI driver.",
+ "$ref": "#/definitions/io.openshift.operator.v1.VSphereCSIDriverConfigSpec"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "oauth.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "OAuthClient",
- "Scope": "Clustered"
- }
+ "Kind": "CSIDriverConfigSpec",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "driverType",
+ "fields-to-discriminateBy": {
+ "aws": "AWS",
+ "azure": "Azure",
+ "gcp": "GCP",
+ "ibmcloud": "IBMCloud",
+ "vSphere": "VSphere"
+ }
+ }
+ ]
},
- "io.openshift.oauth.v1.OAuthClientAuthorization": {
- "description": "OAuthClientAuthorization describes an authorization created by an OAuth client\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.CSISnapshotController": {
+ "description": "CSISnapshotController provides a means to configure an operator to manage the CSI snapshots. `cluster` is the canonical name.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "clientName": {
- "description": "ClientName references the client that created this authorization",
- "type": "string"
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
@@ -98221,33 +103915,27 @@
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "scopes": {
- "description": "Scopes is an array of the granted scopes.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "userName": {
- "description": "UserName is the user name that authorized this client",
- "type": "string"
+ "spec": {
+ "description": "spec holds user settable values for configuration",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.CSISnapshotControllerSpec"
},
- "userUID": {
- "description": "UserUID is the unique UID associated with this authorization. UserUID and UserName must both match for this authorization to be valid.",
- "type": "string"
+ "status": {
+ "description": "status holds observed values from the cluster. They may not be overridden.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.CSISnapshotControllerStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "oauth.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "OAuthClientAuthorization",
+ "Kind": "CSISnapshotController",
"Scope": "Clustered"
}
},
- "io.openshift.oauth.v1.OAuthClientAuthorizationList": {
- "description": "OAuthClientAuthorizationList is a collection of OAuth client authorizations\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.CSISnapshotControllerList": {
+ "description": "CSISnapshotControllerList contains a list of CSISnapshotControllers.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"items"
@@ -98258,11 +103946,10 @@
"type": "string"
},
"items": {
- "description": "Items is the list of OAuth client authorizations",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.oauth.v1.OAuthClientAuthorization"
+ "$ref": "#/definitions/io.openshift.operator.v1.CSISnapshotController"
}
},
"kind": {
@@ -98277,164 +103964,213 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "oauth.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "OAuthClientAuthorizationList",
+ "Kind": "CSISnapshotControllerList",
"Scope": "Namespaced"
}
},
- "io.openshift.oauth.v1.OAuthClientList": {
- "description": "OAuthClientList is a collection of OAuth clients\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.CSISnapshotControllerSpec": {
+ "description": "CSISnapshotControllerSpec is the specification of the desired behavior of the CSISnapshotController operator.",
"type": "object",
"required": [
- "items"
+ "managementState"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "logLevel": {
+ "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "items": {
- "description": "Items is the list of OAuth clients",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.oauth.v1.OAuthClient"
- }
+ "managementState": {
+ "description": "managementState indicates whether and how the operator should manage the component",
+ "type": "string",
+ "default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "observedConfig": {
+ "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "operatorLogLevel": {
+ "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "unsupportedConfigOverrides": {
+ "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "oauth.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "OAuthClientList",
+ "Kind": "CSISnapshotControllerSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.oauth.v1.OAuthRedirectReference": {
- "description": "OAuthRedirectReference is a reference to an OAuth redirect object.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.CSISnapshotControllerStatus": {
+ "description": "CSISnapshotControllerStatus defines the observed status of the CSISnapshotController operator.",
"type": "object",
+ "required": [
+ "readyReplicas"
+ ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "conditions": {
+ "description": "conditions is a list of conditions and their status",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "generations": {
+ "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "group",
+ "resource",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "latestAvailableRevision": {
+ "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "type": "integer",
+ "format": "int32"
},
- "reference": {
- "description": "The reference to an redirect object in the current namespace.",
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
+ "type": "integer",
+ "format": "int64"
+ },
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "CSISnapshotControllerStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.Capability": {
+ "description": "Capabilities contains set of UI capabilities and their state in the console UI.",
+ "type": "object",
+ "required": [
+ "name",
+ "visibility"
+ ],
+ "properties": {
+ "name": {
+ "description": "name is the unique name of a capability. Available capabilities are LightspeedButton and GettingStartedBanner.",
+ "type": "string",
+ "default": ""
+ },
+ "visibility": {
+ "description": "visibility defines the visibility state of the capability.",
"default": {},
- "$ref": "#/definitions/io.openshift.oauth.v1.RedirectReference"
+ "$ref": "#/definitions/io.openshift.operator.v1.CapabilityVisibility"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "oauth.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "OAuthRedirectReference",
+ "Kind": "Capability",
"Scope": "Namespaced"
}
},
- "io.openshift.oauth.v1.RedirectReference": {
- "description": "RedirectReference specifies the target in the current namespace that resolves into redirect URIs. Only the 'Route' kind is currently allowed.",
+ "io.openshift.operator.v1.CapabilityVisibility": {
+ "description": "CapabilityVisibility defines the criteria to enable/disable a capability.",
"type": "object",
"required": [
- "group",
- "kind",
- "name"
+ "state"
],
"properties": {
- "group": {
- "description": "The group of the target that is being referred to.",
- "type": "string",
- "default": ""
- },
- "kind": {
- "description": "The kind of the target that is being referred to. Currently, only 'Route' is allowed.",
- "type": "string",
- "default": ""
- },
- "name": {
- "description": "The name of the target that is being referred to. e.g. name of the Route.",
+ "state": {
+ "description": "state defines if the capability is enabled or disabled in the console UI. Enabling the capability in the console UI is represented by the \"Enabled\" value. Disabling the capability in the console UI is represented by the \"Disabled\" value.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "oauth.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "RedirectReference",
+ "Kind": "CapabilityVisibility",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "state",
+ "fields-to-discriminateBy": {}
+ }
+ ]
},
- "io.openshift.oauth.v1.ScopeRestriction": {
- "description": "ScopeRestriction describe one restriction on scopes. Exactly one option must be non-nil.",
+ "io.openshift.operator.v1.ClientTLS": {
+ "description": "ClientTLS specifies TLS configuration to enable client-to-server authentication, which can be used for mutual TLS.",
"type": "object",
+ "required": [
+ "clientCertificatePolicy",
+ "clientCA"
+ ],
"properties": {
- "clusterRole": {
- "description": "ClusterRole describes a set of restrictions for cluster role scoping.",
- "$ref": "#/definitions/io.openshift.oauth.v1.ClusterRoleScopeRestriction"
- },
- "literals": {
- "description": "ExactValues means the scope has to match a particular set of strings exactly",
+ "allowedSubjectPatterns": {
+ "description": "allowedSubjectPatterns specifies a list of regular expressions that should be matched against the distinguished name on a valid client certificate to filter requests. The regular expressions must use PCRE syntax. If this list is empty, no filtering is performed. If the list is nonempty, then at least one pattern must match a client certificate's distinguished name or else the ingress controller rejects the certificate and denies the connection.",
"type": "array",
"items": {
"type": "string",
"default": ""
- }
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "clientCA": {
+ "description": "clientCA specifies a configmap containing the PEM-encoded CA certificate bundle that should be used to verify a client's certificate. The administrator must create this configmap in the openshift-config namespace.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ },
+ "clientCertificatePolicy": {
+ "description": "clientCertificatePolicy specifies whether the ingress controller requires clients to provide certificates. This field accepts the values \"Required\" or \"Optional\".\n\nNote that the ingress controller only checks client certificates for edge-terminated and reencrypt TLS routes; it cannot check certificates for cleartext HTTP or passthrough TLS routes.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "oauth.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ScopeRestriction",
+ "Kind": "ClientTLS",
"Scope": "Namespaced"
}
},
- "io.openshift.oauth.v1.UserOAuthAccessToken": {
- "description": "UserOAuthAccessToken is a virtual resource to mirror OAuthAccessTokens to the user the access token was issued for",
+ "io.openshift.operator.v1.CloudCredential": {
+ "description": "CloudCredential provides a means to configure an operator to manage CredentialsRequests.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "authorizeToken": {
- "description": "AuthorizeToken contains the token that authorized this token",
- "type": "string"
- },
- "clientName": {
- "description": "ClientName references the client that created this token.",
- "type": "string"
- },
- "expiresIn": {
- "description": "ExpiresIn is the seconds from CreationTime before this token expires.",
- "type": "integer",
- "format": "int64"
- },
- "inactivityTimeoutSeconds": {
- "description": "InactivityTimeoutSeconds is the value in seconds, from the CreationTimestamp, after which this token can no longer be used. The value is automatically incremented when the token is used.",
- "type": "integer",
- "format": "int32"
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
@@ -98444,43 +104180,28 @@
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "redirectURI": {
- "description": "RedirectURI is the redirection associated with the token.",
- "type": "string"
- },
- "refreshToken": {
- "description": "RefreshToken is the value by which this token can be renewed. Can be blank.",
- "type": "string"
- },
- "scopes": {
- "description": "Scopes is an array of the requested scopes.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "userName": {
- "description": "UserName is the user name associated with this token",
- "type": "string"
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.CloudCredentialSpec"
},
- "userUID": {
- "description": "UserUID is the unique UID associated with this token",
- "type": "string"
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.CloudCredentialStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "oauth.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "UserOAuthAccessToken",
+ "Kind": "CloudCredential",
"Scope": "Clustered"
}
},
- "io.openshift.oauth.v1.UserOAuthAccessTokenList": {
- "description": "UserOAuthAccessTokenList is a collection of access tokens issued on behalf of the requesting user\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.CloudCredentialList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -98492,7 +104213,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.oauth.v1.UserOAuthAccessToken"
+ "$ref": "#/definitions/io.openshift.operator.v1.CloudCredential"
}
},
"kind": {
@@ -98507,99 +104228,120 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "oauth.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "UserOAuthAccessTokenList",
+ "Kind": "CloudCredentialList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.controlplane.v1alpha1.LogEntry": {
- "description": "LogEntry records events",
+ "io.openshift.operator.v1.CloudCredentialSpec": {
+ "description": "CloudCredentialSpec is the specification of the desired behavior of the cloud-credential-operator.",
"type": "object",
"required": [
- "time",
- "success"
+ "managementState"
],
"properties": {
- "latency": {
- "description": "Latency records how long the action mentioned in the entry took.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "message": {
- "description": "Message explaining status in a human readable format.",
+ "credentialsMode": {
+ "description": "CredentialsMode allows informing CCO that it should not attempt to dynamically determine the root cloud credentials capabilities, and it should just run in the specified mode. It also allows putting the operator into \"manual\" mode if desired. Leaving the field in default mode runs CCO so that the cluster's cloud credentials will be dynamically probed for capabilities (on supported clouds/platforms). Supported modes:\n AWS/Azure/GCP: \"\" (Default), \"Mint\", \"Passthrough\", \"Manual\"\n Others: Do not set value as other platforms only support running in \"Passthrough\"",
"type": "string"
},
- "reason": {
- "description": "Reason for status in a machine readable format.",
+ "logLevel": {
+ "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "success": {
- "description": "Success indicates if the log entry indicates a success or failure.",
- "type": "boolean",
- "default": false
+ "managementState": {
+ "description": "managementState indicates whether and how the operator should manage the component",
+ "type": "string",
+ "default": ""
},
- "time": {
- "description": "Start time of check action.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "observedConfig": {
+ "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "operatorLogLevel": {
+ "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": "string"
+ },
+ "unsupportedConfigOverrides": {
+ "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "controlplane.operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "LogEntry",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "CloudCredentialSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.controlplane.v1alpha1.OutageEntry": {
- "description": "OutageEntry records time period of an outage",
+ "io.openshift.operator.v1.CloudCredentialStatus": {
+ "description": "CloudCredentialStatus defines the observed status of the cloud-credential-operator.",
"type": "object",
"required": [
- "start"
+ "readyReplicas"
],
"properties": {
- "end": {
- "description": "End of outage detected",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "endLogs": {
- "description": "EndLogs contains log entries related to the end of this outage. Should contain the success entry that resolved the outage and possibly a few of the failure log entries that preceded it.",
+ "conditions": {
+ "description": "conditions is a list of conditions and their status",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.LogEntry"
- }
- },
- "message": {
- "description": "Message summarizes outage details in a human readable format.",
- "type": "string"
- },
- "start": {
- "description": "Start of outage detected",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "startLogs": {
- "description": "StartLogs contains log entries related to the start of this outage. Should contain the original failure, any entries where the failure mode changed.",
+ "generations": {
+ "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.LogEntry"
- }
+ "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "group",
+ "resource",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "latestAvailableRevision": {
+ "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "type": "integer",
+ "format": "int32"
+ },
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
+ "type": "integer",
+ "format": "int64"
+ },
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "controlplane.operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "OutageEntry",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "CloudCredentialStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheck": {
- "description": "PodNetworkConnectivityCheck\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.operator.v1.ClusterCSIDriver": {
+ "description": "ClusterCSIDriver object allows management and configuration of a CSI driver operator installed by default in OpenShift. Name of the object must be name of the CSI driver it operates. See CSIDriverName type for list of allowed values.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"spec"
],
"properties": {
@@ -98617,69 +104359,28 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "Spec defines the source and target of the connectivity check",
+ "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.ClusterCSIDriverSpec"
},
"status": {
- "description": "Status contains the observed status of the connectivity check",
+ "description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.ClusterCSIDriverStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "controlplane.operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PodNetworkConnectivityCheck",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckCondition": {
- "description": "PodNetworkConnectivityCheckCondition represents the overall status of the pod network connectivity.",
- "type": "object",
- "required": [
- "type",
- "status",
- "lastTransitionTime"
- ],
- "properties": {
- "lastTransitionTime": {
- "description": "Last time the condition transitioned from one status to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "Message indicating details about last transition in a human readable format.",
- "type": "string"
- },
- "reason": {
- "description": "Reason for the condition's last status transition in a machine readable format.",
- "type": "string"
- },
- "status": {
- "description": "Status of the condition",
- "type": "string",
- "default": ""
- },
- "type": {
- "description": "Type of the condition",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "controlplane.operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PodNetworkConnectivityCheckCondition",
- "Scope": "Namespaced"
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterCSIDriver",
+ "Scope": "Clustered"
}
},
- "io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckList": {
- "description": "PodNetworkConnectivityCheckList is a collection of PodNetworkConnectivityCheck\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.operator.v1.ClusterCSIDriverList": {
+ "description": "ClusterCSIDriverList contains a list of ClusterCSIDriver\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"items"
],
"properties": {
@@ -98688,11 +104389,10 @@
"type": "string"
},
"items": {
- "description": "Items contains the items",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheck"
+ "$ref": "#/definitions/io.openshift.operator.v1.ClusterCSIDriver"
}
},
"kind": {
@@ -98707,148 +104407,147 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "controlplane.operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PodNetworkConnectivityCheckList",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterCSIDriverList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckSpec": {
+ "io.openshift.operator.v1.ClusterCSIDriverSpec": {
+ "description": "ClusterCSIDriverSpec is the desired behavior of CSI driver operator",
"type": "object",
"required": [
- "sourcePod",
- "targetEndpoint"
+ "managementState"
],
"properties": {
- "sourcePod": {
- "description": "SourcePod names the pod from which the condition will be checked",
- "type": "string",
- "default": ""
+ "driverConfig": {
+ "description": "driverConfig can be used to specify platform specific driver configuration. When omitted, this means no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.CSIDriverConfigSpec"
},
- "targetEndpoint": {
- "description": "EndpointAddress to check. A TCP address of the form host:port. Note that if host is a DNS name, then the check would fail if the DNS name cannot be resolved. Specify an IP address for host to bypass DNS name lookup.",
+ "logLevel": {
+ "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": "string"
+ },
+ "managementState": {
+ "description": "managementState indicates whether and how the operator should manage the component",
"type": "string",
"default": ""
},
- "tlsClientCert": {
- "description": "TLSClientCert, if specified, references a kubernetes.io/tls type secret with 'tls.crt' and 'tls.key' entries containing an optional TLS client certificate and key to be used when checking endpoints that require a client certificate in order to gracefully preform the scan without causing excessive logging in the endpoint process. The secret must exist in the same namespace as this resource.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ "observedConfig": {
+ "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "operatorLogLevel": {
+ "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": "string"
+ },
+ "storageClassState": {
+ "description": "StorageClassState determines if CSI operator should create and manage storage classes. If this field value is empty or Managed - CSI operator will continuously reconcile storage class and create if necessary. If this field value is Unmanaged - CSI operator will not reconcile any previously created storage class. If this field value is Removed - CSI operator will delete the storage class it created previously. When omitted, this means the user has no opinion and the platform chooses a reasonable default, which is subject to change over time. The current default behaviour is Managed.",
+ "type": "string"
+ },
+ "unsupportedConfigOverrides": {
+ "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "controlplane.operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PodNetworkConnectivityCheckSpec",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ClusterCSIDriverSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckStatus": {
+ "io.openshift.operator.v1.ClusterCSIDriverStatus": {
+ "description": "ClusterCSIDriverStatus is the observed status of CSI driver operator",
"type": "object",
+ "required": [
+ "readyReplicas"
+ ],
"properties": {
"conditions": {
- "description": "Conditions summarize the status of the check",
+ "description": "conditions is a list of conditions and their status",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.PodNetworkConnectivityCheckCondition"
+ "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
},
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "failures": {
- "description": "Failures contains logs of unsuccessful check actions",
+ "generations": {
+ "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.LogEntry"
- }
+ "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "group",
+ "resource",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "outages": {
- "description": "Outages contains logs of time periods of outages",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.OutageEntry"
- }
+ "latestAvailableRevision": {
+ "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "type": "integer",
+ "format": "int32"
},
- "successes": {
- "description": "Successes contains logs successful check actions",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.controlplane.v1alpha1.LogEntry"
- }
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "controlplane.operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "PodNetworkConnectivityCheckStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.imageregistry.v1.AzureNetworkAccess": {
- "description": "AzureNetworkAccess defines the network access properties for the storage account.",
- "type": "object",
- "properties": {
- "internal": {
- "description": "internal defines the vnet and subnet names to configure a private endpoint and connect it to the storage account in order to make it private. when type: Internal and internal is unset, the image registry operator will discover vnet and subnet names, and generate a private endpoint name.",
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.AzureNetworkAccessInternal"
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
+ "type": "integer",
+ "format": "int64"
},
- "type": {
- "description": "type is the network access level to be used for the storage account. type: Internal means the storage account will be private, type: External means the storage account will be publicly accessible. Internal storage accounts are only exposed within the cluster's vnet. External storage accounts are publicly exposed on the internet. When type: Internal is used, a vnetName, subNetName and privateEndpointName may optionally be specified. If unspecificed, the image registry operator will discover vnet and subnet names, and generate a privateEndpointName. Defaults to \"External\".",
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
"type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AzureNetworkAccess",
+ "Kind": "ClusterCSIDriverStatus",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "internal": "Internal"
- }
- }
- ]
+ }
},
- "io.openshift.operator.imageregistry.v1.AzureNetworkAccessInternal": {
+ "io.openshift.operator.v1.ClusterNetworkEntry": {
+ "description": "ClusterNetworkEntry is a subnet from which to allocate PodIPs. A network of size HostPrefix (in CIDR notation) will be allocated when nodes join the cluster. If the HostPrefix field is not used by the plugin, it can be left unset. Not all network providers support multiple ClusterNetworks",
"type": "object",
+ "required": [
+ "cidr"
+ ],
"properties": {
- "networkResourceGroupName": {
- "description": "networkResourceGroupName is the resource group name where the cluster's vnet and subnet are. When omitted, the registry operator will use the cluster resource group (from in the infrastructure status). If you set a networkResourceGroupName on your install-config.yaml, that value will be used automatically (for clusters configured with publish:Internal). Note that both vnet and subnet must be in the same resource group. It must be between 1 and 90 characters in length and must consist only of alphanumeric characters, hyphens (-), periods (.) and underscores (_), and not end with a period.",
- "type": "string"
- },
- "privateEndpointName": {
- "description": "privateEndpointName is the name of the private endpoint for the registry. When provided, the registry will use it as the name of the private endpoint it will create for the storage account. When omitted, the registry will generate one. It must be between 2 and 64 characters in length and must consist only of alphanumeric characters, hyphens (-), periods (.) and underscores (_). It must start with an alphanumeric character and end with an alphanumeric character or an underscore.",
- "type": "string"
- },
- "subnetName": {
- "description": "subnetName is the name of the subnet the registry operates in. When omitted, the registry operator will discover and set this by using the `kubernetes.io_cluster.\u003ccluster-id\u003e` tag in the vnet resource, then using one of listed subnets. Advanced cluster network configurations that use network security groups to protect subnets should ensure the provided subnetName has access to Azure Storage service. It must be between 1 and 80 characters in length and must consist only of alphanumeric characters, hyphens (-), periods (.) and underscores (_).",
- "type": "string"
+ "cidr": {
+ "type": "string",
+ "default": ""
},
- "vnetName": {
- "description": "vnetName is the name of the vnet the registry operates in. When omitted, the registry operator will discover and set this by using the `kubernetes.io_cluster.\u003ccluster-id\u003e` tag in the vnet resource. This tag is set automatically by the installer. Commonly, this will be the same vnet as the cluster. Advanced cluster network configurations should ensure the provided vnetName is the vnet of the nodes where the image registry pods are running from. It must be between 2 and 64 characters in length and must consist only of alphanumeric characters, hyphens (-), periods (.) and underscores (_). It must start with an alphanumeric character and end with an alphanumeric character or an underscore.",
- "type": "string"
+ "hostPrefix": {
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AzureNetworkAccessInternal",
+ "Kind": "ClusterNetworkEntry",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.Config": {
- "description": "Config is the configuration object for a registry instance managed by the registry operator\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.Config": {
+ "description": "Config specifies the behavior of the config operator which is responsible for creating the initial configuration of other components on the cluster. The operator also handles installation, migration or synchronization of cloud configurations for AWS and Azure cloud based clusters\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -98869,24 +104568,26 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
+ "description": "spec is the specification of the desired behavior of the Config Operator.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistrySpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.ConfigSpec"
},
"status": {
+ "description": "status defines the observed status of the Config Operator.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.ConfigStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
"Kind": "Config",
"Scope": "Clustered"
}
},
- "io.openshift.operator.imageregistry.v1.ConfigList": {
- "description": "ConfigList is a slice of Config objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.ConfigList": {
+ "description": "ConfigList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -98898,10 +104599,11 @@
"type": "string"
},
"items": {
+ "description": "Items contains the items",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.Config"
+ "$ref": "#/definitions/io.openshift.operator.v1.Config"
}
},
"kind": {
@@ -98916,39 +104618,114 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
"Kind": "ConfigList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.EncryptionAlibaba": {
- "description": "EncryptionAlibaba this a union type in kube parlance. Depending on the value for the AlibabaEncryptionMethod, different pointers may be used",
+ "io.openshift.operator.v1.ConfigSpec": {
"type": "object",
+ "required": [
+ "managementState"
+ ],
"properties": {
- "kms": {
- "description": "KMS (key management service) is an encryption type that holds the struct for KMS KeyID",
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.KMSEncryptionAlibaba"
+ "logLevel": {
+ "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": "string"
},
- "method": {
- "description": "Method defines the different encrytion modes available Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `AES256`.",
+ "managementState": {
+ "description": "managementState indicates whether and how the operator should manage the component",
"type": "string",
"default": ""
+ },
+ "observedConfig": {
+ "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "operatorLogLevel": {
+ "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": "string"
+ },
+ "unsupportedConfigOverrides": {
+ "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "EncryptionAlibaba",
+ "Kind": "ConfigSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImagePruner": {
- "description": "ImagePruner is the configuration object for an image registry pruner managed by the registry operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.ConfigStatus": {
+ "type": "object",
+ "required": [
+ "readyReplicas"
+ ],
+ "properties": {
+ "conditions": {
+ "description": "conditions is a list of conditions and their status",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "generations": {
+ "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "group",
+ "resource",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "latestAvailableRevision": {
+ "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "type": "integer",
+ "format": "int32"
+ },
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
+ "type": "integer",
+ "format": "int64"
+ },
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ConfigStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.Console": {
+ "description": "Console provides a means to configure an operator to manage the console.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"spec"
],
"properties": {
@@ -98967,23 +104744,123 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImagePrunerSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.ConsoleSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImagePrunerStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.ConsoleStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImagePruner",
+ "Kind": "Console",
"Scope": "Clustered"
}
},
- "io.openshift.operator.imageregistry.v1.ImagePrunerList": {
- "description": "ImagePrunerList is a slice of ImagePruner objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.ConsoleConfigRoute": {
+ "description": "ConsoleConfigRoute holds information on external route access to console. DEPRECATED",
+ "type": "object",
+ "required": [
+ "hostname"
+ ],
+ "properties": {
+ "hostname": {
+ "description": "hostname is the desired custom domain under which console will be available.",
+ "type": "string",
+ "default": ""
+ },
+ "secret": {
+ "description": "secret points to secret in the openshift-config namespace that contains custom certificate and key and needs to be created manually by the cluster admin. Referenced Secret is required to contain following key value pairs: - \"tls.crt\" - to specifies custom certificate - \"tls.key\" - to specifies private key of the custom certificate If the custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleConfigRoute",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.ConsoleCustomization": {
+ "description": "ConsoleCustomization defines a list of optional configuration for the console UI.",
+ "type": "object",
+ "properties": {
+ "addPage": {
+ "description": "addPage allows customizing actions on the Add page in developer perspective.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.AddPage"
+ },
+ "brand": {
+ "description": "brand is the default branding of the web console which can be overridden by providing the brand field. There is a limited set of specific brand options. This field controls elements of the console such as the logo. Invalid value will prevent a console rollout.",
+ "type": "string"
+ },
+ "capabilities": {
+ "description": "capabilities defines an array of capabilities that can be interacted with in the console UI. Each capability defines a visual state that can be interacted with the console to render in the UI. Available capabilities are LightspeedButton and GettingStartedBanner. Each of the available capabilities may appear only once in the list.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.Capability"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "customLogoFile": {
+ "description": "customLogoFile replaces the default OpenShift logo in the masthead and about dialog. It is a reference to a ConfigMap in the openshift-config namespace. This can be created with a command like 'oc create configmap custom-logo --from-file=/path/to/file -n openshift-config'. Image size must be less than 1 MB due to constraints on the ConfigMap size. The ConfigMap key should include a file extension so that the console serves the file with the correct MIME type. Recommended logo specifications: Dimensions: Max height of 68px and max width of 200px SVG format preferred",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapFileReference"
+ },
+ "customProductName": {
+ "description": "customProductName is the name that will be displayed in page titles, logo alt text, and the about dialog instead of the normal OpenShift product name.",
+ "type": "string"
+ },
+ "developerCatalog": {
+ "description": "developerCatalog allows to configure the shown developer catalog categories (filters) and types (sub-catalogs).",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.DeveloperConsoleCatalogCustomization"
+ },
+ "documentationBaseURL": {
+ "description": "documentationBaseURL links to external documentation are shown in various sections of the web console. Providing documentationBaseURL will override the default documentation URL. Invalid value will prevent a console rollout.",
+ "type": "string"
+ },
+ "perspectives": {
+ "description": "perspectives allows enabling/disabling of perspective(s) that user can see in the Perspective switcher dropdown.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.Perspective"
+ },
+ "x-kubernetes-list-map-keys": [
+ "id"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "projectAccess": {
+ "description": "projectAccess allows customizing the available list of ClusterRoles in the Developer perspective Project access page which can be used by a project admin to specify roles to other users and restrict access within the project. If set, the list will replace the default ClusterRole options.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.ProjectAccess"
+ },
+ "quickStarts": {
+ "description": "quickStarts allows customization of available ConsoleQuickStart resources in console.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.QuickStarts"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleCustomization",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.ConsoleList": {
+ "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -98998,7 +104875,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImagePruner"
+ "$ref": "#/definitions/io.openshift.operator.v1.Console"
}
},
"kind": {
@@ -99013,597 +104890,799 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImagePrunerList",
+ "Kind": "ConsoleList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImagePrunerSpec": {
- "description": "ImagePrunerSpec defines the specs for the running image pruner.",
+ "io.openshift.operator.v1.ConsoleProviders": {
+ "description": "ConsoleProviders defines a list of optional additional providers of functionality to the console.",
"type": "object",
"properties": {
- "affinity": {
- "description": "affinity is a group of node affinity scheduling rules for the image pruner pod.",
- "$ref": "#/definitions/io.k8s.api.core.v1.Affinity"
- },
- "failedJobsHistoryLimit": {
- "description": "failedJobsHistoryLimit specifies how many failed image pruner jobs to retain. Defaults to 3 if not set.",
- "type": "integer",
- "format": "int32"
- },
- "ignoreInvalidImageReferences": {
- "description": "ignoreInvalidImageReferences indicates whether the pruner can ignore errors while parsing image references.",
- "type": "boolean"
- },
- "keepTagRevisions": {
- "description": "keepTagRevisions specifies the number of image revisions for a tag in an image stream that will be preserved. Defaults to 3.",
- "type": "integer",
- "format": "int32"
- },
- "keepYoungerThan": {
- "description": "keepYoungerThan specifies the minimum age in nanoseconds of an image and its referrers for it to be considered a candidate for pruning. DEPRECATED: This field is deprecated in favor of keepYoungerThanDuration. If both are set, this field is ignored and keepYoungerThanDuration takes precedence.",
- "type": "integer",
- "format": "int64"
+ "statuspage": {
+ "description": "statuspage contains ID for statuspage.io page that provides status info about.",
+ "$ref": "#/definitions/io.openshift.operator.v1.StatuspageProvider"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ConsoleProviders",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.ConsoleSpec": {
+ "description": "ConsoleSpec is the specification of the desired behavior of the Console.",
+ "type": "object",
+ "required": [
+ "managementState",
+ "providers"
+ ],
+ "properties": {
+ "customization": {
+ "description": "customization is used to optionally provide a small set of customization options to the web console.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.ConsoleCustomization"
},
- "keepYoungerThanDuration": {
- "description": "keepYoungerThanDuration specifies the minimum age of an image and its referrers for it to be considered a candidate for pruning. Defaults to 60m (60 minutes).",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "ingress": {
+ "description": "ingress allows to configure the alternative ingress for the console. This field is intended for clusters without ingress capability, where access to routes is not possible.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.Ingress"
},
"logLevel": {
- "description": "logLevel sets the level of log output for the pruner job.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "nodeSelector": {
- "description": "nodeSelector defines the node selection constraints for the image pruner pod.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "resources": {
- "description": "resources defines the resource requests and limits for the image pruner pod.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements"
- },
- "schedule": {
- "description": "schedule specifies when to execute the job using standard cronjob syntax: https://wikipedia.org/wiki/Cron. Defaults to `0 0 * * *`.",
+ "managementState": {
+ "description": "managementState indicates whether and how the operator should manage the component",
"type": "string",
"default": ""
},
- "successfulJobsHistoryLimit": {
- "description": "successfulJobsHistoryLimit specifies how many successful image pruner jobs to retain. Defaults to 3 if not set.",
- "type": "integer",
- "format": "int32"
+ "observedConfig": {
+ "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
},
- "suspend": {
- "description": "suspend specifies whether or not to suspend subsequent executions of this cronjob. Defaults to false.",
- "type": "boolean"
+ "operatorLogLevel": {
+ "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": "string"
},
- "tolerations": {
- "description": "tolerations defines the node tolerations for the image pruner pod.",
+ "plugins": {
+ "description": "plugins defines a list of enabled console plugin names.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
+ "type": "string",
+ "default": ""
}
+ },
+ "providers": {
+ "description": "providers contains configuration for using specific service providers.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.ConsoleProviders"
+ },
+ "route": {
+ "description": "route contains hostname and secret reference that contains the serving certificate. If a custom route is specified, a new route will be created with the provided hostname, under which console will be available. In case of custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed. In case of custom hostname points to an arbitrary domain, manual DNS configurations steps are necessary. The default console route will be maintained to reserve the default hostname for console if the custom route is removed. If not specified, default route will be used. DEPRECATED",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.ConsoleConfigRoute"
+ },
+ "unsupportedConfigOverrides": {
+ "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImagePrunerSpec",
+ "Kind": "ConsoleSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImagePrunerStatus": {
- "description": "ImagePrunerStatus reports image pruner operational status.",
+ "io.openshift.operator.v1.ConsoleStatus": {
+ "description": "ConsoleStatus defines the observed status of the Console.",
"type": "object",
+ "required": [
+ "readyReplicas"
+ ],
"properties": {
"conditions": {
- "description": "conditions is a list of conditions and their status.",
+ "description": "conditions is a list of conditions and their status",
"type": "array",
"items": {
"default": {},
"$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
- }
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "generations": {
+ "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "group",
+ "resource",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "latestAvailableRevision": {
+ "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "type": "integer",
+ "format": "int32"
},
"observedGeneration": {
- "description": "observedGeneration is the last generation change that has been applied.",
+ "description": "observedGeneration is the last generation change you've dealt with",
"type": "integer",
"format": "int64"
+ },
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImagePrunerStatus",
+ "Kind": "ConsoleStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigProxy": {
- "description": "ImageRegistryConfigProxy defines proxy configuration to be used by registry.",
+ "io.openshift.operator.v1.ContainerLoggingDestinationParameters": {
+ "description": "ContainerLoggingDestinationParameters describes parameters for the Container logging destination type.",
"type": "object",
"properties": {
- "http": {
- "description": "http defines the proxy to be used by the image registry when accessing HTTP endpoints.",
+ "maxLength": {
+ "description": "maxLength is the maximum length of the log message.\n\nValid values are integers in the range 480 to 8192, inclusive.\n\nWhen omitted, the default value is 1024.",
+ "type": "integer",
+ "format": "int32"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ContainerLoggingDestinationParameters",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.DNS": {
+ "description": "DNS manages the CoreDNS component to provide a name resolution service for pods and services in the cluster.\n\nThis supports the DNS-based service discovery specification: https://github.com/kubernetes/dns/blob/master/docs/specification.md\n\nMore details: https://kubernetes.io/docs/tasks/administer-cluster/coredns\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "https": {
- "description": "https defines the proxy to be used by the image registry when accessing HTTPS endpoints.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "noProxy": {
- "description": "noProxy defines a comma-separated list of host names that shouldn't go through any proxy.",
- "type": "string"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec is the specification of the desired behavior of the DNS.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.DNSSpec"
+ },
+ "status": {
+ "description": "status is the most recently observed status of the DNS.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.DNSStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "DNS",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.operator.v1.DNSCache": {
+ "description": "DNSCache defines the fields for configuring DNS caching.",
+ "type": "object",
+ "properties": {
+ "negativeTTL": {
+ "description": "negativeTTL is optional and specifies the amount of time that a negative response should be cached.\n\nIf configured, it must be a value of 1s (1 second) or greater up to a theoretical maximum of several years. This field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"100s\", \"1m30s\", \"12h30m10s\". Values that are fractions of a second are rounded down to the nearest second. If the configured value is less than 1s, the default value will be used. If not configured, the value will be 0s and OpenShift will use a default value of 30 seconds unless noted otherwise in the respective Corefile for your version of OpenShift. The default value of 30 seconds is subject to change.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "positiveTTL": {
+ "description": "positiveTTL is optional and specifies the amount of time that a positive response should be cached.\n\nIf configured, it must be a value of 1s (1 second) or greater up to a theoretical maximum of several years. This field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"100s\", \"1m30s\", \"12h30m10s\". Values that are fractions of a second are rounded down to the nearest second. If the configured value is less than 1s, the default value will be used. If not configured, the value will be 0s and OpenShift will use a default value of 900 seconds unless noted otherwise in the respective Corefile for your version of OpenShift. The default value of 900 seconds is subject to change.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigProxy",
+ "Kind": "DNSCache",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigRequests": {
- "description": "ImageRegistryConfigRequests defines registry limits on requests read and write.",
+ "io.openshift.operator.v1.DNSList": {
+ "description": "DNSList contains a list of DNS\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "read": {
- "description": "read defines limits for image registry's reads.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigRequestsLimits"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "write": {
- "description": "write defines limits for image registry's writes.",
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.DNS"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigRequestsLimits"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Type": "list",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigRequests",
+ "Kind": "DNSList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigRequestsLimits": {
- "description": "ImageRegistryConfigRequestsLimits holds configuration on the max, enqueued and waiting registry's API requests.",
+ "io.openshift.operator.v1.DNSNodePlacement": {
+ "description": "DNSNodePlacement describes the node scheduling configuration for DNS pods.",
"type": "object",
"properties": {
- "maxInQueue": {
- "description": "maxInQueue sets the maximum queued api requests to the registry.",
- "type": "integer",
- "format": "int32"
- },
- "maxRunning": {
- "description": "maxRunning sets the maximum in flight api requests to the registry.",
- "type": "integer",
- "format": "int32"
+ "nodeSelector": {
+ "description": "nodeSelector is the node selector applied to DNS pods.\n\nIf empty, the default is used, which is currently the following:\n\n kubernetes.io/os: linux\n\nThis default is subject to change.\n\nIf set, the specified selector is used and replaces the default.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
},
- "maxWaitInQueue": {
- "description": "maxWaitInQueue sets the maximum time a request can wait in the queue before being rejected.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "tolerations": {
+ "description": "tolerations is a list of tolerations applied to DNS pods.\n\nIf empty, the DNS operator sets a toleration for the \"node-role.kubernetes.io/master\" taint. This default is subject to change. Specifying tolerations without including a toleration for the \"node-role.kubernetes.io/master\" taint may be risky as it could lead to an outage if all worker nodes become unavailable.\n\nNote that the daemon controller adds some tolerations as well. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigRequestsLimits",
+ "Kind": "DNSNodePlacement",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigRoute": {
- "description": "ImageRegistryConfigRoute holds information on external route access to image registry.",
+ "io.openshift.operator.v1.DNSOverTLSConfig": {
+ "description": "DNSOverTLSConfig describes optional DNSTransportConfig fields that should be captured.",
"type": "object",
"required": [
- "name"
+ "serverName"
],
"properties": {
- "hostname": {
- "description": "hostname for the route.",
- "type": "string"
+ "caBundle": {
+ "description": "caBundle references a ConfigMap that must contain either a single CA Certificate or a CA Bundle. This allows cluster administrators to provide their own CA or CA bundle for validating the certificate of upstream resolvers.\n\n1. The configmap must contain a `ca-bundle.crt` key. 2. The value must be a PEM encoded CA certificate or CA bundle. 3. The administrator must create this configmap in the openshift-config namespace. 4. The upstream server certificate must contain a Subject Alternative Name (SAN) that matches ServerName.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
},
- "name": {
- "description": "name of the route to be created.",
+ "serverName": {
+ "description": "serverName is the upstream server to connect to when forwarding DNS queries. This is required when Transport is set to \"TLS\". ServerName will be validated against the DNS naming conventions in RFC 1123 and should match the TLS certificate installed in the upstream resolver(s).",
"type": "string",
"default": ""
- },
- "secretName": {
- "description": "secretName points to secret containing the certificates to be used by the route.",
- "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigRoute",
+ "Kind": "DNSOverTLSConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorage": {
- "description": "ImageRegistryConfigStorage describes how the storage should be configured for the image registry.",
+ "io.openshift.operator.v1.DNSSpec": {
+ "description": "DNSSpec is the specification of the desired behavior of the DNS.",
"type": "object",
"properties": {
- "azure": {
- "description": "azure represents configuration that uses Azure Blob Storage.",
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageAzure"
- },
- "emptyDir": {
- "description": "emptyDir represents ephemeral storage on the pod's host node. WARNING: this storage cannot be used with more than 1 replica and is not suitable for production use. When the pod is removed from a node for any reason, the data in the emptyDir is deleted forever.",
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageEmptyDir"
- },
- "gcs": {
- "description": "gcs represents configuration that uses Google Cloud Storage.",
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageGCS"
+ "cache": {
+ "description": "cache describes the caching configuration that applies to all server blocks listed in the Corefile. This field allows a cluster admin to optionally configure: * positiveTTL which is a duration for which positive responses should be cached. * negativeTTL which is a duration for which negative responses should be cached. If this is not configured, OpenShift will configure positive and negative caching with a default value that is subject to change. At the time of writing, the default positiveTTL is 900 seconds and the default negativeTTL is 30 seconds or as noted in the respective Corefile for your version of OpenShift.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.DNSCache"
},
- "ibmcos": {
- "description": "ibmcos represents configuration that uses IBM Cloud Object Storage.",
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageIBMCOS"
+ "logLevel": {
+ "description": "logLevel describes the desired logging verbosity for CoreDNS. Any one of the following values may be specified: * Normal logs errors from upstream resolvers. * Debug logs errors, NXDOMAIN responses, and NODATA responses. * Trace logs errors and all responses.\n Setting logLevel: Trace will produce extremely verbose logs.\nValid values are: \"Normal\", \"Debug\", \"Trace\". Defaults to \"Normal\".",
+ "type": "string"
},
"managementState": {
- "description": "managementState indicates if the operator manages the underlying storage unit. If Managed the operator will remove the storage when this operator gets Removed.",
+ "description": "managementState indicates whether the DNS operator should manage cluster DNS",
"type": "string"
},
- "oss": {
- "description": "Oss represents configuration that uses Alibaba Cloud Object Storage Service.",
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageAlibabaOSS"
+ "nodePlacement": {
+ "description": "nodePlacement provides explicit control over the scheduling of DNS pods.\n\nGenerally, it is useful to run a DNS pod on every node so that DNS queries are always handled by a local DNS pod instead of going over the network to a DNS pod on another node. However, security policies may require restricting the placement of DNS pods to specific nodes. For example, if a security policy prohibits pods on arbitrary nodes from communicating with the API, a node selector can be specified to restrict DNS pods to nodes that are permitted to communicate with the API. Conversely, if running DNS pods on nodes with a particular taint is desired, a toleration can be specified for that taint.\n\nIf unset, defaults are used. See nodePlacement for more details.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.DNSNodePlacement"
},
- "pvc": {
- "description": "pvc represents configuration that uses a PersistentVolumeClaim.",
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStoragePVC"
+ "operatorLogLevel": {
+ "description": "operatorLogLevel controls the logging level of the DNS Operator. Valid values are: \"Normal\", \"Debug\", \"Trace\". Defaults to \"Normal\". setting operatorLogLevel: Trace will produce extremely verbose logs.",
+ "type": "string"
},
- "s3": {
- "description": "s3 represents configuration that uses Amazon Simple Storage Service.",
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageS3"
+ "servers": {
+ "description": "servers is a list of DNS resolvers that provide name query delegation for one or more subdomains outside the scope of the cluster domain. If servers consists of more than one Server, longest suffix match will be used to determine the Server.\n\nFor example, if there are two Servers, one for \"foo.com\" and another for \"a.foo.com\", and the name query is for \"www.a.foo.com\", it will be routed to the Server with Zone \"a.foo.com\".\n\nIf this field is nil, no servers are created.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.Server"
+ }
},
- "swift": {
- "description": "swift represents configuration that uses OpenStack Object Storage.",
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageSwift"
+ "upstreamResolvers": {
+ "description": "upstreamResolvers defines a schema for configuring CoreDNS to proxy DNS messages to upstream resolvers for the case of the default (\".\") server\n\nIf this field is not specified, the upstream used will default to /etc/resolv.conf, with policy \"sequential\"",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.UpstreamResolvers"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigStorage",
+ "Kind": "DNSSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageAlibabaOSS": {
- "description": "ImageRegistryConfigStorageAlibabaOSS holds Alibaba Cloud OSS configuration. Configures the registry to use Alibaba Cloud Object Storage Service for backend storage. More about oss, you can look at the [official documentation](https://www.alibabacloud.com/help/product/31815.htm)",
+ "io.openshift.operator.v1.DNSStatus": {
+ "description": "DNSStatus defines the observed status of the DNS.",
"type": "object",
+ "required": [
+ "clusterIP",
+ "clusterDomain"
+ ],
"properties": {
- "bucket": {
- "description": "Bucket is the bucket name in which you want to store the registry's data. About Bucket naming, more details you can look at the [official documentation](https://www.alibabacloud.com/help/doc-detail/257087.htm) Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default will be autogenerated in the form of \u003cclusterid\u003e-image-registry-\u003cregion\u003e-\u003crandom string 27 chars\u003e",
- "type": "string"
- },
- "encryption": {
- "description": "Encryption specifies whether you would like your data encrypted on the server side. More details, you can look cat the [official documentation](https://www.alibabacloud.com/help/doc-detail/117914.htm)",
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.EncryptionAlibaba"
+ "clusterDomain": {
+ "description": "clusterDomain is the local cluster DNS domain suffix for DNS services. This will be a subdomain as defined in RFC 1034, section 3.5: https://tools.ietf.org/html/rfc1034#section-3.5 Example: \"cluster.local\"\n\nMore info: https://kubernetes.io/docs/concepts/services-networking/dns-pod-service",
+ "type": "string",
+ "default": ""
},
- "endpointAccessibility": {
- "description": "EndpointAccessibility specifies whether the registry use the OSS VPC internal endpoint Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `Internal`.",
- "type": "string"
+ "clusterIP": {
+ "description": "clusterIP is the service IP through which this DNS is made available.\n\nIn the case of the default DNS, this will be a well known IP that is used as the default nameserver for pods that are using the default ClusterFirst DNS policy.\n\nIn general, this IP can be specified in a pod's spec.dnsConfig.nameservers list or used explicitly when performing name resolution from within the cluster. Example: dig foo.com @\u003cservice IP\u003e\n\nMore info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies",
+ "type": "string",
+ "default": ""
},
- "region": {
- "description": "Region is the Alibaba Cloud Region in which your bucket exists. For a list of regions, you can look at the [official documentation](https://www.alibabacloud.com/help/doc-detail/31837.html). Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default will be based on the installed Alibaba Cloud Region.",
- "type": "string"
+ "conditions": {
+ "description": "conditions provide information about the state of the DNS on the cluster.\n\nThese are the supported DNS conditions:\n\n * Available\n - True if the following conditions are met:\n * DNS controller daemonset is available.\n - False if any of those conditions are unsatisfied.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ },
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigStorageAlibabaOSS",
+ "Kind": "DNSStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageAzure": {
- "description": "ImageRegistryConfigStorageAzure holds the information to configure the registry to use Azure Blob Storage for backend storage.",
+ "io.openshift.operator.v1.DNSTransportConfig": {
+ "description": "DNSTransportConfig groups related configuration parameters used for configuring forwarding to upstream resolvers that support DNS-over-TLS.",
"type": "object",
"properties": {
- "accountName": {
- "description": "accountName defines the account to be used by the registry.",
- "type": "string"
- },
- "cloudName": {
- "description": "cloudName is the name of the Azure cloud environment to be used by the registry. If empty, the operator will set it based on the infrastructure object.",
- "type": "string"
+ "tls": {
+ "description": "tls contains the additional configuration options to use when Transport is set to \"TLS\".",
+ "$ref": "#/definitions/io.openshift.operator.v1.DNSOverTLSConfig"
},
- "container": {
- "description": "container defines Azure's container to be used by registry.",
+ "transport": {
+ "description": "transport allows cluster administrators to opt-in to using a DNS-over-TLS connection between cluster DNS and an upstream resolver(s). Configuring TLS as the transport at this level without configuring a CABundle will result in the system certificates being used to verify the serving certificate of the upstream resolver(s).\n\nPossible values: \"\" (empty) - This means no explicit choice has been made and the platform chooses the default which is subject to change over time. The current default is \"Cleartext\". \"Cleartext\" - Cluster admin specified cleartext option. This results in the same functionality as an empty value but may be useful when a cluster admin wants to be more explicit about the transport, or wants to switch from \"TLS\" to \"Cleartext\" explicitly. \"TLS\" - This indicates that DNS queries should be sent over a TLS connection. If Transport is set to TLS, you MUST also set ServerName. If a port is not included with the upstream IP, port 853 will be tried by default per RFC 7858 section 3.1; https://datatracker.ietf.org/doc/html/rfc7858#section-3.1.",
"type": "string"
- },
- "networkAccess": {
- "description": "networkAccess defines the network access properties for the storage account. Defaults to type: External.",
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.AzureNetworkAccess"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigStorageAzure",
+ "Kind": "DNSTransportConfig",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "transport",
+ "fields-to-discriminateBy": {
+ "tls": "TLS"
+ }
+ }
+ ]
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageEmptyDir": {
- "description": "ImageRegistryConfigStorageEmptyDir is an place holder to be used when when registry is leveraging ephemeral storage.",
+ "io.openshift.operator.v1.DefaultNetworkDefinition": {
+ "description": "DefaultNetworkDefinition represents a single network plugin's configuration. type must be specified, along with exactly one \"Config\" that matches the type.",
"type": "object",
+ "required": [
+ "type"
+ ],
+ "properties": {
+ "openshiftSDNConfig": {
+ "description": "openShiftSDNConfig was previously used to configure the openshift-sdn plugin. DEPRECATED: OpenShift SDN is no longer supported.",
+ "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftSDNConfig"
+ },
+ "ovnKubernetesConfig": {
+ "description": "ovnKubernetesConfig configures the ovn-kubernetes plugin.",
+ "$ref": "#/definitions/io.openshift.operator.v1.OVNKubernetesConfig"
+ },
+ "type": {
+ "description": "type is the type of network All NetworkTypes are supported except for NetworkTypeRaw",
+ "type": "string",
+ "default": ""
+ }
+ },
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigStorageEmptyDir",
+ "Kind": "DefaultNetworkDefinition",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageGCS": {
- "description": "ImageRegistryConfigStorageGCS holds GCS configuration.",
+ "io.openshift.operator.v1.DeveloperConsoleCatalogCategory": {
+ "description": "DeveloperConsoleCatalogCategory for the developer console catalog.",
"type": "object",
+ "required": [
+ "id",
+ "label"
+ ],
"properties": {
- "bucket": {
- "description": "bucket is the bucket name in which you want to store the registry's data. Optional, will be generated if not provided.",
- "type": "string"
+ "id": {
+ "description": "ID is an identifier used in the URL to enable deep linking in console. ID is required and must have 1-32 URL safe (A-Z, a-z, 0-9, - and _) characters.",
+ "type": "string",
+ "default": ""
},
- "keyID": {
- "description": "keyID is the KMS key ID to use for encryption. Optional, buckets are encrypted by default on GCP. This allows for the use of a custom encryption key.",
- "type": "string"
+ "label": {
+ "description": "label defines a category display label. It is required and must have 1-64 characters.",
+ "type": "string",
+ "default": ""
},
- "projectID": {
- "description": "projectID is the Project ID of the GCP project that this bucket should be associated with.",
- "type": "string"
+ "subcategories": {
+ "description": "subcategories defines a list of child categories.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.DeveloperConsoleCatalogCategoryMeta"
+ }
},
- "region": {
- "description": "region is the GCS location in which your bucket exists. Optional, will be set based on the installed GCS Region.",
- "type": "string"
+ "tags": {
+ "description": "tags is a list of strings that will match the category. A selected category show all items which has at least one overlapping tag between category and item.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigStorageGCS",
+ "Kind": "DeveloperConsoleCatalogCategory",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageIBMCOS": {
- "description": "ImageRegistryConfigStorageIBMCOS holds the information to configure the registry to use IBM Cloud Object Storage for backend storage.",
+ "io.openshift.operator.v1.DeveloperConsoleCatalogCategoryMeta": {
+ "description": "DeveloperConsoleCatalogCategoryMeta are the key identifiers of a developer catalog category.",
"type": "object",
+ "required": [
+ "id",
+ "label"
+ ],
"properties": {
- "bucket": {
- "description": "bucket is the bucket name in which you want to store the registry's data. Optional, will be generated if not provided.",
- "type": "string"
- },
- "location": {
- "description": "location is the IBM Cloud location in which your bucket exists. Optional, will be set based on the installed IBM Cloud location.",
- "type": "string"
- },
- "resourceGroupName": {
- "description": "resourceGroupName is the name of the IBM Cloud resource group that this bucket and its service instance is associated with. Optional, will be set based on the installed IBM Cloud resource group.",
- "type": "string"
+ "id": {
+ "description": "ID is an identifier used in the URL to enable deep linking in console. ID is required and must have 1-32 URL safe (A-Z, a-z, 0-9, - and _) characters.",
+ "type": "string",
+ "default": ""
},
- "resourceKeyCRN": {
- "description": "resourceKeyCRN is the CRN of the IBM Cloud resource key that is created for the service instance. Commonly referred as a service credential and must contain HMAC type credentials. Optional, will be computed if not provided.",
- "type": "string"
+ "label": {
+ "description": "label defines a category display label. It is required and must have 1-64 characters.",
+ "type": "string",
+ "default": ""
},
- "serviceInstanceCRN": {
- "description": "serviceInstanceCRN is the CRN of the IBM Cloud Object Storage service instance that this bucket is associated with. Optional, will be computed if not provided.",
- "type": "string"
+ "tags": {
+ "description": "tags is a list of strings that will match the category. A selected category show all items which has at least one overlapping tag between category and item.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigStorageIBMCOS",
+ "Kind": "DeveloperConsoleCatalogCategoryMeta",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStoragePVC": {
- "description": "ImageRegistryConfigStoragePVC holds Persistent Volume Claims data to be used by the registry.",
+ "io.openshift.operator.v1.DeveloperConsoleCatalogCustomization": {
+ "description": "DeveloperConsoleCatalogCustomization allow cluster admin to configure developer catalog.",
"type": "object",
"properties": {
- "claim": {
- "description": "claim defines the Persisent Volume Claim's name to be used.",
- "type": "string"
+ "categories": {
+ "description": "categories which are shown in the developer catalog.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.DeveloperConsoleCatalogCategory"
+ }
+ },
+ "types": {
+ "description": "types allows enabling or disabling of sub-catalog types that user can see in the Developer catalog. When omitted, all the sub-catalog types will be shown.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.DeveloperConsoleCatalogTypes"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigStoragePVC",
+ "Kind": "DeveloperConsoleCatalogCustomization",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageS3": {
- "description": "ImageRegistryConfigStorageS3 holds the information to configure the registry to use the AWS S3 service for backend storage https://docs.docker.com/registry/storage-drivers/s3/",
+ "io.openshift.operator.v1.DeveloperConsoleCatalogTypes": {
+ "description": "DeveloperConsoleCatalogTypes defines the state of the sub-catalog types.",
"type": "object",
"properties": {
- "bucket": {
- "description": "bucket is the bucket name in which you want to store the registry's data. Optional, will be generated if not provided.",
- "type": "string"
- },
- "chunkSizeMiB": {
- "description": "chunkSizeMiB defines the size of the multipart upload chunks of the S3 API. The S3 API requires multipart upload chunks to be at least 5MiB. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default value is 10 MiB. The value is an integer number of MiB. The minimum value is 5 and the maximum value is 5120 (5 GiB).",
- "type": "integer",
- "format": "int32"
- },
- "cloudFront": {
- "description": "cloudFront configures Amazon Cloudfront as the storage middleware in a registry.",
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageS3CloudFront"
- },
- "encrypt": {
- "description": "encrypt specifies whether the registry stores the image in encrypted format or not. Optional, defaults to false.",
- "type": "boolean"
- },
- "keyID": {
- "description": "keyID is the KMS key ID to use for encryption. Optional, Encrypt must be true, or this parameter is ignored.",
- "type": "string"
- },
- "region": {
- "description": "region is the AWS region in which your bucket exists. Optional, will be set based on the installed AWS Region.",
- "type": "string"
- },
- "regionEndpoint": {
- "description": "regionEndpoint is the endpoint for S3 compatible storage services. It should be a valid URL with scheme, e.g. https://s3.example.com. Optional, defaults based on the Region that is provided.",
- "type": "string"
+ "disabled": {
+ "description": "disabled is a list of developer catalog types (sub-catalogs IDs) that are not shown to users. Types (sub-catalogs) are added via console plugins, the available types (sub-catalog IDs) are available in the console on the cluster configuration page, or when editing the YAML in the console. Example: \"Devfile\", \"HelmChart\", \"BuilderImage\" If the list is empty or all the available sub-catalog types are added, then the complete developer catalog should be hidden.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "set"
},
- "trustedCA": {
- "description": "trustedCA is a reference to a config map containing a CA bundle. The image registry and its operator use certificates from this bundle to verify S3 server certificates.\n\nThe namespace for the config map referenced by trustedCA is \"openshift-config\". The key for the bundle in the config map is \"ca-bundle.crt\".",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.S3TrustedCASource"
+ "enabled": {
+ "description": "enabled is a list of developer catalog types (sub-catalogs IDs) that will be shown to users. Types (sub-catalogs) are added via console plugins, the available types (sub-catalog IDs) are available in the console on the cluster configuration page, or when editing the YAML in the console. Example: \"Devfile\", \"HelmChart\", \"BuilderImage\" If the list is non-empty, a new type will not be shown to the user until it is added to list. If the list is empty the complete developer catalog will be shown.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "set"
},
- "virtualHostedStyle": {
- "description": "virtualHostedStyle enables using S3 virtual hosted style bucket paths with a custom RegionEndpoint Optional, defaults to false.",
- "type": "boolean",
- "default": false
+ "state": {
+ "description": "state defines if a list of catalog types should be enabled or disabled.",
+ "type": "string",
+ "default": "Enabled"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigStorageS3",
+ "Kind": "DeveloperConsoleCatalogTypes",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "state",
+ "fields-to-discriminateBy": {
+ "disabled": "Disabled",
+ "enabled": "Enabled"
+ }
+ }
+ ]
+ },
+ "io.openshift.operator.v1.EgressIPConfig": {
+ "description": "EgressIPConfig defines the configuration knobs for egressip",
+ "type": "object",
+ "properties": {
+ "reachabilityTotalTimeoutSeconds": {
+ "description": "reachabilityTotalTimeout configures the EgressIP node reachability check total timeout in seconds. If the EgressIP node cannot be reached within this timeout, the node is declared down. Setting a large value may cause the EgressIP feature to react slowly to node changes. In particular, it may react slowly for EgressIP nodes that really have a genuine problem and are unreachable. When omitted, this means the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 1 second. A value of 0 disables the EgressIP node's reachability check.",
+ "type": "integer",
+ "format": "int64"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "EgressIPConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageS3CloudFront": {
- "description": "ImageRegistryConfigStorageS3CloudFront holds the configuration to use Amazon Cloudfront as the storage middleware in a registry. https://docs.docker.com/registry/configuration/#cloudfront",
+ "io.openshift.operator.v1.EndpointPublishingStrategy": {
+ "description": "EndpointPublishingStrategy is a way to publish the endpoints of an IngressController, and represents the type and any additional configuration for a specific type.",
"type": "object",
"required": [
- "baseURL",
- "privateKey",
- "keypairID"
+ "type"
],
"properties": {
- "baseURL": {
- "description": "baseURL contains the SCHEME://HOST[/PATH] at which Cloudfront is served.",
- "type": "string",
- "default": ""
+ "hostNetwork": {
+ "description": "hostNetwork holds parameters for the HostNetwork endpoint publishing strategy. Present only if type is HostNetwork.",
+ "$ref": "#/definitions/io.openshift.operator.v1.HostNetworkStrategy"
},
- "duration": {
- "description": "duration is the duration of the Cloudfront session.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "loadBalancer": {
+ "description": "loadBalancer holds parameters for the load balancer. Present only if type is LoadBalancerService.",
+ "$ref": "#/definitions/io.openshift.operator.v1.LoadBalancerStrategy"
},
- "keypairID": {
- "description": "keypairID is key pair ID provided by AWS.",
+ "nodePort": {
+ "description": "nodePort holds parameters for the NodePortService endpoint publishing strategy. Present only if type is NodePortService.",
+ "$ref": "#/definitions/io.openshift.operator.v1.NodePortStrategy"
+ },
+ "private": {
+ "description": "private holds parameters for the Private endpoint publishing strategy. Present only if type is Private.",
+ "$ref": "#/definitions/io.openshift.operator.v1.PrivateStrategy"
+ },
+ "type": {
+ "description": "type is the publishing strategy to use. Valid values are:\n\n* LoadBalancerService\n\nPublishes the ingress controller using a Kubernetes LoadBalancer Service.\n\nIn this configuration, the ingress controller deployment uses container networking. A LoadBalancer Service is created to publish the deployment.\n\nSee: https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer\n\nIf domain is set, a wildcard DNS record will be managed to point at the LoadBalancer Service's external name. DNS records are managed only in DNS zones defined by dns.config.openshift.io/cluster .spec.publicZone and .spec.privateZone.\n\nWildcard DNS management is currently supported only on the AWS, Azure, and GCP platforms.\n\n* HostNetwork\n\nPublishes the ingress controller on node ports where the ingress controller is deployed.\n\nIn this configuration, the ingress controller deployment uses host networking, bound to node ports 80 and 443. The user is responsible for configuring an external load balancer to publish the ingress controller via the node ports.\n\n* Private\n\nDoes not publish the ingress controller.\n\nIn this configuration, the ingress controller deployment uses container networking, and is not explicitly published. The user must manually publish the ingress controller.\n\n* NodePortService\n\nPublishes the ingress controller using a Kubernetes NodePort Service.\n\nIn this configuration, the ingress controller deployment uses container networking. A NodePort Service is created to publish the deployment. The specific node ports are dynamically allocated by OpenShift; however, to support static port allocations, user changes to the node port field of the managed NodePort Service will preserved.",
"type": "string",
"default": ""
- },
- "privateKey": {
- "description": "privateKey points to secret containing the private key, provided by AWS.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.SecretKeySelector"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigStorageS3CloudFront",
+ "Kind": "EndpointPublishingStrategy",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "hostNetwork": "HostNetwork",
+ "loadBalancer": "LoadBalancer",
+ "nodePort": "NodePort",
+ "private": "Private"
+ }
+ }
+ ]
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorageSwift": {
- "description": "ImageRegistryConfigStorageSwift holds the information to configure the registry to use the OpenStack Swift service for backend storage https://docs.docker.com/registry/storage-drivers/swift/",
+ "io.openshift.operator.v1.Etcd": {
+ "description": "Etcd provides information to configure an operator to manage etcd.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "metadata",
+ "spec"
+ ],
"properties": {
- "authURL": {
- "description": "authURL defines the URL for obtaining an authentication token.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "authVersion": {
- "description": "authVersion specifies the OpenStack Auth's version.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "container": {
- "description": "container defines the name of Swift container where to store the registry's data.",
- "type": "string"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "domain": {
- "description": "domain specifies Openstack's domain name for Identity v3 API.",
- "type": "string"
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.EtcdSpec"
},
- "domainID": {
- "description": "domainID specifies Openstack's domain id for Identity v3 API.",
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.EtcdStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "Etcd",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.operator.v1.EtcdList": {
+ "description": "KubeAPISOperatorConfigList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "metadata",
+ "items"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "regionName": {
- "description": "regionName defines Openstack's region in which container exists.",
- "type": "string"
+ "items": {
+ "description": "Items contains the items",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.Etcd"
+ }
},
- "tenant": {
- "description": "tenant defines Openstack tenant name to be used by registry.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "tenantID": {
- "description": "tenant defines Openstack tenant id to be used by registry.",
- "type": "string"
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Type": "list",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryConfigStorageSwift",
+ "Kind": "EtcdList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistrySpec": {
- "description": "ImageRegistrySpec defines the specs for the running registry.",
+ "io.openshift.operator.v1.EtcdSpec": {
"type": "object",
"required": [
"managementState",
- "replicas"
+ "forceRedeploymentReason"
],
"properties": {
- "affinity": {
- "description": "affinity is a group of node affinity scheduling rules for the image registry pod(s).",
- "$ref": "#/definitions/io.k8s.api.core.v1.Affinity"
+ "backendQuotaGiB": {
+ "description": "backendQuotaGiB sets the etcd backend storage size limit in gibibytes. The value should be an integer not less than 8 and not more than 32. When not specified, the default value is 8.",
+ "type": "integer",
+ "format": "int32",
+ "default": 8
},
- "defaultRoute": {
- "description": "defaultRoute indicates whether an external facing route for the registry should be created using the default generated hostname.",
- "type": "boolean"
+ "controlPlaneHardwareSpeed": {
+ "description": "HardwareSpeed allows user to change the etcd tuning profile which configures the latency parameters for heartbeat interval and leader election timeouts allowing the cluster to tolerate longer round-trip-times between etcd members. Valid values are \"\", \"Standard\" and \"Slower\".\n\t\"\" means no opinion and the platform is left to choose a reasonable default\n\twhich is subject to change without notice.\n\nPossible enum values:\n - `\"Slower\"` provides more tolerance for slower hardware and/or higher latency networks. Sets (values subject to change): ETCD_HEARTBEAT_INTERVAL: 5x Standard ETCD_LEADER_ELECTION_TIMEOUT: 2.5x Standard\n - `\"Standard\"` provides the normal tolerances for hardware speed and latency. Currently sets (values subject to change at any time): ETCD_HEARTBEAT_INTERVAL: 100ms ETCD_LEADER_ELECTION_TIMEOUT: 1000ms",
+ "type": "string",
+ "default": "",
+ "enum": [
+ "Slower",
+ "Standard"
+ ]
},
- "disableRedirect": {
- "description": "disableRedirect controls whether to route all data through the Registry, rather than redirecting to the backend.",
- "type": "boolean"
+ "failedRevisionLimit": {
+ "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
+ "type": "integer",
+ "format": "int32"
},
- "httpSecret": {
- "description": "httpSecret is the value needed by the registry to secure uploads, generated by default.",
- "type": "string"
+ "forceRedeploymentReason": {
+ "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.",
+ "type": "string",
+ "default": ""
},
"logLevel": {
"description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "logging": {
- "description": "logging is deprecated, use logLevel instead.",
- "type": "integer",
- "format": "int64"
- },
"managementState": {
"description": "managementState indicates whether and how the operator should manage the component",
"type": "string",
"default": ""
},
- "nodeSelector": {
- "description": "nodeSelector defines the node selection constraints for the registry pod.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
"observedConfig": {
"description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
@@ -99612,67 +105691,10 @@
"description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "proxy": {
- "description": "proxy defines the proxy to be used when calling master api, upstream registries, etc.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigProxy"
- },
- "readOnly": {
- "description": "readOnly indicates whether the registry instance should reject attempts to push new images or delete existing ones.",
- "type": "boolean"
- },
- "replicas": {
- "description": "replicas determines the number of registry instances to run.",
+ "succeededRevisionLimit": {
+ "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
"type": "integer",
- "format": "int32",
- "default": 0
- },
- "requests": {
- "description": "requests controls how many parallel requests a given registry instance will handle before queuing additional requests.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigRequests",
- "x-kubernetes-map-type": "atomic"
- },
- "resources": {
- "description": "resources defines the resource requests+limits for the registry pod.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements",
- "x-kubernetes-map-type": "atomic"
- },
- "rolloutStrategy": {
- "description": "rolloutStrategy defines rollout strategy for the image registry deployment.",
- "type": "string"
- },
- "routes": {
- "description": "routes defines additional external facing routes which should be created for the registry.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigRoute"
- },
- "x-kubernetes-list-type": "atomic"
- },
- "storage": {
- "description": "storage details for configuring registry storage, e.g. S3 bucket coordinates.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorage"
- },
- "tolerations": {
- "description": "tolerations defines the tolerations for the registry pod.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
- },
- "x-kubernetes-list-type": "atomic"
- },
- "topologySpreadConstraints": {
- "description": "topologySpreadConstraints specify how to spread matching pods among the given topology.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint"
- },
- "x-kubernetes-list-type": "atomic"
+ "format": "int32"
},
"unsupportedConfigOverrides": {
"description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
@@ -99681,19 +105703,17 @@
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistrySpec",
+ "Kind": "EtcdSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.ImageRegistryStatus": {
- "description": "ImageRegistryStatus reports image registry operational status.",
+ "io.openshift.operator.v1.EtcdStatus": {
"type": "object",
"required": [
"readyReplicas",
- "storageManaged",
- "storage"
+ "controlPlaneHardwareSpeed"
],
"properties": {
"conditions": {
@@ -99708,6 +105728,15 @@
],
"x-kubernetes-list-type": "map"
},
+ "controlPlaneHardwareSpeed": {
+ "description": "Possible enum values:\n - `\"Slower\"` provides more tolerance for slower hardware and/or higher latency networks. Sets (values subject to change): ETCD_HEARTBEAT_INTERVAL: 5x Standard ETCD_LEADER_ELECTION_TIMEOUT: 2.5x Standard\n - `\"Standard\"` provides the normal tolerances for hardware speed and latency. Currently sets (values subject to change at any time): ETCD_HEARTBEAT_INTERVAL: 100ms ETCD_LEADER_ELECTION_TIMEOUT: 1000ms",
+ "type": "string",
+ "default": "",
+ "enum": [
+ "Slower",
+ "Standard"
+ ]
+ },
"generations": {
"description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
"type": "array",
@@ -99728,6 +105757,22 @@
"type": "integer",
"format": "int32"
},
+ "latestAvailableRevisionReason": {
+ "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment",
+ "type": "string"
+ },
+ "nodeStatuses": {
+ "description": "nodeStatuses track the deployment values and errors across individual nodes",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "nodeName"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
"observedGeneration": {
"description": "observedGeneration is the last generation change you've dealt with",
"type": "integer",
@@ -99739,16 +105784,6 @@
"format": "int32",
"default": 0
},
- "storage": {
- "description": "storage indicates the current applied storage configuration of the registry.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.imageregistry.v1.ImageRegistryConfigStorage"
- },
- "storageManaged": {
- "description": "storageManaged is deprecated, please refer to Storage.managementState",
- "type": "boolean",
- "default": false
- },
"version": {
"description": "version is the level this availability applies to",
"type": "string"
@@ -99756,576 +105791,641 @@
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ImageRegistryStatus",
+ "Kind": "EtcdStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.KMSEncryptionAlibaba": {
+ "io.openshift.operator.v1.ExportNetworkFlows": {
+ "type": "object",
+ "properties": {
+ "ipfix": {
+ "description": "ipfix defines IPFIX configuration.",
+ "$ref": "#/definitions/io.openshift.operator.v1.IPFIXConfig"
+ },
+ "netFlow": {
+ "description": "netFlow defines the NetFlow configuration.",
+ "$ref": "#/definitions/io.openshift.operator.v1.NetFlowConfig"
+ },
+ "sFlow": {
+ "description": "sFlow defines the SFlow configuration.",
+ "$ref": "#/definitions/io.openshift.operator.v1.SFlowConfig"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ExportNetworkFlows",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.FeaturesMigration": {
+ "type": "object",
+ "properties": {
+ "egressFirewall": {
+ "description": "egressFirewall specified whether or not the Egress Firewall configuration was migrated. DEPRECATED: network type migration is no longer supported.",
+ "type": "boolean"
+ },
+ "egressIP": {
+ "description": "egressIP specified whether or not the Egress IP configuration was migrated. DEPRECATED: network type migration is no longer supported.",
+ "type": "boolean"
+ },
+ "multicast": {
+ "description": "multicast specified whether or not the multicast configuration was migrated. DEPRECATED: network type migration is no longer supported.",
+ "type": "boolean"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "FeaturesMigration",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.ForwardPlugin": {
+ "description": "ForwardPlugin defines a schema for configuring the CoreDNS forward plugin.",
"type": "object",
"required": [
- "keyID"
+ "upstreams"
],
"properties": {
- "keyID": {
- "description": "KeyID holds the KMS encryption key ID",
+ "policy": {
+ "description": "policy is used to determine the order in which upstream servers are selected for querying. Any one of the following values may be specified:\n\n* \"Random\" picks a random upstream server for each query. * \"RoundRobin\" picks upstream servers in a round-robin order, moving to the next server for each new query. * \"Sequential\" tries querying upstream servers in a sequential order until one responds, starting with the first server for each new query.\n\nThe default value is \"Random\"",
+ "type": "string"
+ },
+ "protocolStrategy": {
+ "description": "protocolStrategy specifies the protocol to use for upstream DNS requests. Valid values for protocolStrategy are \"TCP\" and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is to use the protocol of the original client request. \"TCP\" specifies that the platform should use TCP for all upstream DNS requests, even if the client request uses UDP. \"TCP\" is useful for UDP-specific issues such as those created by non-compliant upstream resolvers, but may consume more bandwidth or increase DNS response time. Note that protocolStrategy only affects the protocol of DNS requests that CoreDNS makes to upstream resolvers. It does not affect the protocol of DNS requests between clients and CoreDNS.",
"type": "string",
"default": ""
+ },
+ "transportConfig": {
+ "description": "transportConfig is used to configure the transport type, server name, and optional custom CA or CA bundle to use when forwarding DNS requests to an upstream resolver.\n\nThe default value is \"\" (empty) which results in a standard cleartext connection being used when forwarding DNS requests to an upstream resolver.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.DNSTransportConfig"
+ },
+ "upstreams": {
+ "description": "upstreams is a list of resolvers to forward name queries for subdomains of Zones. Each instance of CoreDNS performs health checking of Upstreams. When a healthy upstream returns an error during the exchange, another resolver is tried from Upstreams. The Upstreams are selected in the order specified in Policy. Each upstream is represented by an IP address or IP:port if the upstream listens on a port other than 53.\n\nA maximum of 15 upstreams is allowed per ForwardPlugin.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KMSEncryptionAlibaba",
+ "Kind": "ForwardPlugin",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.imageregistry.v1.S3TrustedCASource": {
- "description": "S3TrustedCASource references a config map with a CA certificate bundle in the \"openshift-config\" namespace. The key for the bundle in the config map is \"ca-bundle.crt\".",
+ "io.openshift.operator.v1.GCPCSIDriverConfigSpec": {
+ "description": "GCPCSIDriverConfigSpec defines properties that can be configured for the GCP CSI driver.",
"type": "object",
"properties": {
- "name": {
- "description": "name is the metadata.name of the referenced config map. This field must adhere to standard config map naming restrictions. The name must consist solely of alphanumeric characters, hyphens (-) and periods (.). It has a maximum length of 253 characters. If this field is not specified or is empty string, the default trust bundle will be used.",
- "type": "string",
- "default": ""
+ "kmsKey": {
+ "description": "kmsKey sets the cluster default storage class to encrypt volumes with customer-supplied encryption keys, rather than the default keys managed by GCP.",
+ "$ref": "#/definitions/io.openshift.operator.v1.GCPKMSKeyReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "imageregistry.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "S3TrustedCASource",
+ "Kind": "GCPCSIDriverConfigSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.ingress.v1.DNSRecord": {
- "description": "DNSRecord is a DNS record managed in the zones defined by dns.config.openshift.io/cluster .spec.publicZone and .spec.privateZone.\n\nCluster admin manipulation of this resource is not supported. This resource is only for internal communication of OpenShift operators.\n\nIf DNSManagementPolicy is \"Unmanaged\", the operator will not be responsible for managing the DNS records on the cloud provider.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.GCPKMSKeyReference": {
+ "description": "GCPKMSKeyReference gathers required fields for looking up a GCP KMS Key",
"type": "object",
"required": [
- "spec",
- "status"
+ "name",
+ "keyRing",
+ "projectID"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "keyRing": {
+ "description": "keyRing is the name of the KMS Key Ring which the KMS Key belongs to. The value should correspond to an existing KMS key ring and should consist of only alphanumeric characters, hyphens (-) and underscores (_), and be at most 63 characters in length.",
+ "type": "string",
+ "default": ""
+ },
+ "location": {
+ "description": "location is the GCP location in which the Key Ring exists. The value must match an existing GCP location, or \"global\". Defaults to global, if not set.",
"type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "name": {
+ "description": "name is the name of the customer-managed encryption key to be used for disk encryption. The value should correspond to an existing KMS key and should consist of only alphanumeric characters, hyphens (-) and underscores (_), and be at most 63 characters in length.",
+ "type": "string",
+ "default": ""
+ },
+ "projectID": {
+ "description": "projectID is the ID of the Project in which the KMS Key Ring exists. It must be 6 to 30 lowercase letters, digits, or hyphens. It must start with a letter. Trailing hyphens are prohibited.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "GCPKMSKeyReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.GCPLoadBalancerParameters": {
+ "description": "GCPLoadBalancerParameters provides configuration settings that are specific to GCP load balancers.",
+ "type": "object",
+ "properties": {
+ "clientAccess": {
+ "description": "clientAccess describes how client access is restricted for internal load balancers.\n\nValid values are: * \"Global\": Specifying an internal load balancer with Global client access\n allows clients from any region within the VPC to communicate with the load\n balancer.\n\n https://cloud.google.com/kubernetes-engine/docs/how-to/internal-load-balancing#global_access\n\n* \"Local\": Specifying an internal load balancer with Local client access\n means only clients within the same region (and VPC) as the GCP load balancer\n can communicate with the load balancer. Note that this is the default behavior.\n\n https://cloud.google.com/load-balancing/docs/internal#client_access",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "GCPLoadBalancerParameters",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.GatewayConfig": {
+ "description": "GatewayConfig holds node gateway-related parsed config file parameters and command-line overrides",
+ "type": "object",
+ "properties": {
+ "ipForwarding": {
+ "description": "IPForwarding controls IP forwarding for all traffic on OVN-Kubernetes managed interfaces (such as br-ex). By default this is set to Restricted, and Kubernetes related traffic is still forwarded appropriately, but other IP traffic will not be routed by the OCP node. If there is a desire to allow the host to forward traffic across OVN-Kubernetes managed interfaces, then set this field to \"Global\". The supported values are \"Restricted\" and \"Global\".",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "ipv4": {
+ "description": "ipv4 allows users to configure IP settings for IPv4 connections. When omitted, this means no opinion and the default configuration is used. Check individual members fields within ipv4 for details of default values.",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "$ref": "#/definitions/io.openshift.operator.v1.IPv4GatewayConfig"
},
- "spec": {
- "description": "spec is the specification of the desired behavior of the dnsRecord.",
+ "ipv6": {
+ "description": "ipv6 allows users to configure IP settings for IPv6 connections. When omitted, this means no opinion and the default configuration is used. Check individual members fields within ipv6 for details of default values.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.ingress.v1.DNSRecordSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.IPv6GatewayConfig"
},
- "status": {
- "description": "status is the most recently observed status of the dnsRecord.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.ingress.v1.DNSRecordStatus"
+ "routingViaHost": {
+ "description": "RoutingViaHost allows pod egress traffic to exit via the ovn-k8s-mp0 management port into the host before sending it out. If this is not set, traffic will always egress directly from OVN to outside without touching the host stack. Setting this to true means hardware offload will not be supported. Default is false if GatewayConfig is specified.",
+ "type": "boolean"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "ingress.operator.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "DNSRecord",
+ "Kind": "GatewayConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.ingress.v1.DNSRecordList": {
- "description": "DNSRecordList contains a list of dnsrecords.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.GatherStatus": {
+ "description": "gatherStatus provides information about the last known gather event.",
+ "type": "object",
+ "properties": {
+ "gatherers": {
+ "description": "gatherers is a list of active gatherers (and their statuses) in the last gathering.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.GathererStatus"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "lastGatherDuration": {
+ "description": "lastGatherDuration is the total time taken to process all gatherers during the last gather event.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "lastGatherTime": {
+ "description": "lastGatherTime is the last time when Insights data gathering finished. An empty value means that no data has been gathered yet.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "GatherStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.GathererStatus": {
+ "description": "gathererStatus represents information about a particular data gatherer.",
"type": "object",
"required": [
- "items"
+ "conditions",
+ "name",
+ "lastGatherDuration"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
+ "conditions": {
+ "description": "conditions provide details on the status of each gatherer.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.ingress.v1.DNSRecord"
- }
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "lastGatherDuration": {
+ "description": "lastGatherDuration represents the time spent gathering.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "name": {
+ "description": "name is the name of the gatherer.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "ingress.operator.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "DNSRecordList",
+ "Kind": "GathererStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.ingress.v1.DNSRecordSpec": {
- "description": "DNSRecordSpec contains the details of a DNS record.",
+ "io.openshift.operator.v1.GenerationStatus": {
+ "description": "GenerationStatus keeps track of the generation for a given resource so that decisions about forced updates can be made.",
"type": "object",
"required": [
- "dnsName",
- "targets",
- "recordType",
- "recordTTL"
+ "group",
+ "resource",
+ "namespace",
+ "name",
+ "lastGeneration",
+ "hash"
],
"properties": {
- "dnsManagementPolicy": {
- "description": "dnsManagementPolicy denotes the current policy applied on the DNS record. Records that have policy set as \"Unmanaged\" are ignored by the ingress operator. This means that the DNS record on the cloud provider is not managed by the operator, and the \"Published\" status condition will be updated to \"Unknown\" status, since it is externally managed. Any existing record on the cloud provider can be deleted at the discretion of the cluster admin.\n\nThis field defaults to Managed. Valid values are \"Managed\" and \"Unmanaged\".",
+ "group": {
+ "description": "group is the group of the thing you're tracking",
"type": "string",
- "default": "Managed"
+ "default": ""
},
- "dnsName": {
- "description": "dnsName is the hostname of the DNS record",
+ "hash": {
+ "description": "hash is an optional field set for resources without generation that are content sensitive like secrets and configmaps",
"type": "string",
"default": ""
},
- "recordTTL": {
- "description": "recordTTL is the record TTL in seconds. If zero, the default is 30. RecordTTL will not be used in AWS regions Alias targets, but will be used in CNAME targets, per AWS API contract.",
+ "lastGeneration": {
+ "description": "lastGeneration is the last generation of the workload controller involved",
"type": "integer",
"format": "int64",
"default": 0
},
- "recordType": {
- "description": "recordType is the DNS record type. For example, \"A\" or \"CNAME\".",
+ "name": {
+ "description": "name is the name of the thing you're tracking",
"type": "string",
"default": ""
},
- "targets": {
- "description": "targets are record targets.",
+ "namespace": {
+ "description": "namespace is where the thing you're tracking is",
+ "type": "string",
+ "default": ""
+ },
+ "resource": {
+ "description": "resource is the resource type of the thing you're tracking",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "GenerationStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.HTTPCompressionPolicy": {
+ "description": "httpCompressionPolicy turns on compression for the specified MIME types.\n\nThis field is optional, and its absence implies that compression should not be enabled globally in HAProxy.\n\nIf httpCompressionPolicy exists, compression should be enabled only for the specified MIME types.",
+ "type": "object",
+ "properties": {
+ "mimeTypes": {
+ "description": "mimeTypes is a list of MIME types that should have compression applied. This list can be empty, in which case the ingress controller does not apply compression.\n\nNote: Not all MIME types benefit from compression, but HAProxy will still use resources to try to compress if instructed to. Generally speaking, text (html, css, js, etc.) formats benefit from compression, but formats that are already compressed (image, audio, video, etc.) benefit little in exchange for the time and cpu spent on compressing again. See https://joehonton.medium.com/the-gzip-penalty-d31bd697f1a2",
"type": "array",
"items": {
"type": "string",
"default": ""
- }
+ },
+ "x-kubernetes-list-type": "set"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "ingress.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "DNSRecordSpec",
+ "Kind": "HTTPCompressionPolicy",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.ingress.v1.DNSRecordStatus": {
- "description": "DNSRecordStatus is the most recently observed status of each record.",
+ "io.openshift.operator.v1.HealthCheck": {
+ "description": "healthCheck represents an Insights health check attributes.",
"type": "object",
+ "required": [
+ "description",
+ "totalRisk",
+ "advisorURI",
+ "state"
+ ],
"properties": {
- "observedGeneration": {
- "description": "observedGeneration is the most recently observed generation of the DNSRecord. When the DNSRecord is updated, the controller updates the corresponding record in each managed zone. If an update for a particular zone fails, that failure is recorded in the status condition for the zone so that the controller can determine that it needs to retry the update for that specific zone.",
- "type": "integer",
- "format": "int64"
+ "advisorURI": {
+ "description": "advisorURI provides the URL link to the Insights Advisor.",
+ "type": "string",
+ "default": ""
},
- "zones": {
- "description": "zones are the status of the record in each zone.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.ingress.v1.DNSZoneStatus"
- }
+ "description": {
+ "description": "description provides basic description of the healtcheck.",
+ "type": "string",
+ "default": ""
+ },
+ "state": {
+ "description": "state determines what the current state of the health check is. Health check is enabled by default and can be disabled by the user in the Insights advisor user interface.",
+ "type": "string",
+ "default": ""
+ },
+ "totalRisk": {
+ "description": "totalRisk of the healthcheck. Indicator of the total risk posed by the detected issue; combination of impact and likelihood. The values can be from 1 to 4, and the higher the number, the more important the issue.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "ingress.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "DNSRecordStatus",
+ "Kind": "HealthCheck",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.ingress.v1.DNSZoneCondition": {
- "description": "DNSZoneCondition is just the standard condition fields.",
+ "io.openshift.operator.v1.HostNetworkStrategy": {
+ "description": "HostNetworkStrategy holds parameters for the HostNetwork endpoint publishing strategy.",
"type": "object",
- "required": [
- "type",
- "status"
- ],
"properties": {
- "lastTransitionTime": {
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "httpPort": {
+ "description": "httpPort is the port on the host which should be used to listen for HTTP requests. This field should be set when port 80 is already in use. The value should not coincide with the NodePort range of the cluster. When the value is 0 or is not specified it defaults to 80.",
+ "type": "integer",
+ "format": "int32"
},
- "message": {
- "type": "string"
+ "httpsPort": {
+ "description": "httpsPort is the port on the host which should be used to listen for HTTPS requests. This field should be set when port 443 is already in use. The value should not coincide with the NodePort range of the cluster. When the value is 0 or is not specified it defaults to 443.",
+ "type": "integer",
+ "format": "int32"
},
- "reason": {
+ "protocol": {
+ "description": "protocol specifies whether the IngressController expects incoming connections to use plain TCP or whether the IngressController expects PROXY protocol.\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nThe following values are valid for this field:\n\n* The empty string. * \"TCP\". * \"PROXY\".\n\nThe empty string specifies the default, which is TCP without PROXY protocol. Note that the default is subject to change.",
"type": "string"
},
- "status": {
- "type": "string",
- "default": ""
- },
- "type": {
- "type": "string",
- "default": ""
+ "statsPort": {
+ "description": "statsPort is the port on the host where the stats from the router are published. The value should not coincide with the NodePort range of the cluster. If an external load balancer is configured to forward connections to this IngressController, the load balancer should use this port for health checks. The load balancer can send HTTP probes on this port on a given node, with the path /healthz/ready to determine if the ingress controller is ready to receive traffic on the node. For proper operation the load balancer must not forward traffic to a node until the health check reports ready. The load balancer should also stop forwarding requests within a maximum of 45 seconds after /healthz/ready starts reporting not-ready. Probing every 5 to 10 seconds, with a 5-second timeout and with a threshold of two successful or failed requests to become healthy or unhealthy respectively, are well-tested values. When the value is 0 or is not specified it defaults to 1936.",
+ "type": "integer",
+ "format": "int32"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "ingress.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "DNSZoneCondition",
+ "Kind": "HostNetworkStrategy",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.ingress.v1.DNSZoneStatus": {
- "description": "DNSZoneStatus is the status of a record within a specific zone.",
+ "io.openshift.operator.v1.HybridOverlayConfig": {
"type": "object",
"required": [
- "dnsZone"
+ "hybridClusterNetwork"
],
"properties": {
- "conditions": {
- "description": "conditions are any conditions associated with the record in the zone.\n\nIf publishing the record succeeds, the \"Published\" condition will be set with status \"True\" and upon failure it will be set to \"False\" along with the reason and message describing the cause of the failure.",
+ "hybridClusterNetwork": {
+ "description": "HybridClusterNetwork defines a network space given to nodes on an additional overlay network.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.ingress.v1.DNSZoneCondition"
- }
+ "$ref": "#/definitions/io.openshift.operator.v1.ClusterNetworkEntry"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "dnsZone": {
- "description": "dnsZone is the zone where the record is published.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.DNSZone"
+ "hybridOverlayVXLANPort": {
+ "description": "HybridOverlayVXLANPort defines the VXLAN port number to be used by the additional overlay network. Default is 4789",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "ingress.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "DNSZoneStatus",
+ "Kind": "HybridOverlayConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.network.v1.CertSpec": {
- "description": "CertSpec defines common certificate configuration.",
+ "io.openshift.operator.v1.IBMCloudCSIDriverConfigSpec": {
+ "description": "IBMCloudCSIDriverConfigSpec defines the properties that can be configured for the IBM Cloud CSI driver.",
"type": "object",
"required": [
- "commonName"
+ "encryptionKeyCRN"
],
"properties": {
- "commonName": {
- "description": "commonName is the value in the certificate's CN",
+ "encryptionKeyCRN": {
+ "description": "encryptionKeyCRN is the IBM Cloud CRN of the customer-managed root key to use for disk encryption of volumes for the default storage classes.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "CertSpec",
+ "Kind": "IBMCloudCSIDriverConfigSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.network.v1.EgressRouter": {
- "description": "EgressRouter is a feature allowing the user to define an egress router that acts as a bridge between pods and external systems. The egress router runs a service that redirects egress traffic originating from a pod or a group of pods to a remote external system or multiple destinations as per configuration.\n\nIt is consumed by the cluster-network-operator. More specifically, given an EgressRouter CR with \u003cname\u003e, the CNO will create and manage: - A service called \u003cname\u003e - An egress pod called \u003cname\u003e - A NAD called \u003cname\u003e\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).\n\nEgressRouter is a single egressrouter pod configuration object.",
+ "io.openshift.operator.v1.IBMLoadBalancerParameters": {
+ "description": "IBMLoadBalancerParameters provides configuration settings that are specific to IBM Cloud load balancers.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "protocol": {
+ "description": "protocol specifies whether the load balancer uses PROXY protocol to forward connections to the IngressController. See \"service.kubernetes.io/ibm-load-balancer-cloud-provider-enable-features: \"proxy-protocol\"\" at https://cloud.ibm.com/docs/containers?topic=containers-vpc-lbaas\"\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nValid values for protocol are TCP, PROXY and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is TCP, without the proxy protocol enabled.",
"type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "Specification of the desired egress router.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.network.v1.EgressRouterSpec"
- },
- "status": {
- "description": "Observed status of EgressRouter.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.network.v1.EgressRouterStatus"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "network.operator.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "EgressRouter",
+ "Kind": "IBMLoadBalancerParameters",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.network.v1.EgressRouterAddress": {
- "description": "EgressRouterAddress contains a pair of IP CIDR and gateway to be configured on the router's interface",
+ "io.openshift.operator.v1.IPAMConfig": {
+ "description": "IPAMConfig contains configurations for IPAM (IP Address Management)",
"type": "object",
"required": [
- "ip"
+ "type"
],
"properties": {
- "gateway": {
- "description": "IP address of the next-hop gateway, if it cannot be automatically determined. Can be IPv4 or IPv6.",
- "type": "string"
+ "staticIPAMConfig": {
+ "description": "StaticIPAMConfig configures the static IP address in case of type:IPAMTypeStatic",
+ "$ref": "#/definitions/io.openshift.operator.v1.StaticIPAMConfig"
},
- "ip": {
- "description": "IP is the address to configure on the router's interface. Can be IPv4 or IPv6.",
+ "type": {
+ "description": "Type is the type of IPAM module will be used for IP Address Management(IPAM). The supported values are IPAMTypeDHCP, IPAMTypeStatic",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "EgressRouterAddress",
+ "Kind": "IPAMConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.network.v1.EgressRouterInterface": {
- "description": "EgressRouterInterface contains the configuration of interface to create/use.",
+ "io.openshift.operator.v1.IPFIXConfig": {
"type": "object",
- "required": [
- "macvlan"
- ],
"properties": {
- "macvlan": {
- "description": "Arguments specific to the interfaceType macvlan",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.network.v1.MacvlanConfig"
+ "collectors": {
+ "description": "ipfixCollectors is list of strings formatted as ip:port with a maximum of ten items",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "EgressRouterInterface",
+ "Kind": "IPFIXConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.network.v1.EgressRouterList": {
- "description": "EgressRouterList is the list of egress router pods requested.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.IPsecConfig": {
"type": "object",
- "required": [
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.network.v1.EgressRouter"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "mode": {
+ "description": "mode defines the behaviour of the ipsec configuration within the platform. Valid values are `Disabled`, `External` and `Full`. When 'Disabled', ipsec will not be enabled at the node level. When 'External', ipsec is enabled on the node level but requires the user to configure the secure communication parameters. This mode is for external secure communications and the configuration can be done using the k8s-nmstate operator. When 'Full', ipsec is configured on the node level and inter-pod secure communication within the cluster is configured. Note with `Full`, if ipsec is desired for communication with external (to the cluster) entities (such as storage arrays), this is left to the user to configure.",
"type": "string"
- },
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "network.operator.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "EgressRouterList",
+ "Kind": "IPsecConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.network.v1.EgressRouterSpec": {
- "description": "EgressRouterSpec contains the configuration for an egress router. Mode, networkInterface and addresses fields must be specified along with exactly one \"Config\" that matches the mode. Each config consists of parameters specific to that mode.",
+ "io.openshift.operator.v1.IPv4GatewayConfig": {
+ "description": "IPV4GatewayConfig holds the configuration paramaters for IPV4 connections in the GatewayConfig for OVN-Kubernetes",
"type": "object",
- "required": [
- "mode",
- "networkInterface",
- "addresses"
- ],
"properties": {
- "addresses": {
- "description": "List of IP addresses to configure on the pod's secondary interface.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.network.v1.EgressRouterAddress"
- }
- },
- "mode": {
- "description": "Mode depicts the mode that is used for the egress router. The default mode is \"Redirect\" and is the only supported mode currently.",
- "type": "string",
- "default": ""
- },
- "networkInterface": {
- "description": "Specification of interface to create/use. The default is macvlan. Currently only macvlan is supported.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.network.v1.EgressRouterInterface"
- },
- "redirect": {
- "description": "Redirect represents the configuration parameters specific to redirect mode.",
- "$ref": "#/definitions/io.openshift.operator.network.v1.RedirectConfig"
+ "internalMasqueradeSubnet": {
+ "description": "internalMasqueradeSubnet contains the masquerade addresses in IPV4 CIDR format used internally by ovn-kubernetes to enable host to service traffic. Each host in the cluster is configured with these addresses, as well as the shared gateway bridge interface. The values can be changed after installation. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. Additionally the subnet must be large enough to accommodate 6 IPs (maximum prefix length /29). When omitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The current default subnet is 169.254.169.0/29 The value must be in proper IPV4 CIDR format",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "EgressRouterSpec",
+ "Kind": "IPv4GatewayConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.network.v1.EgressRouterStatus": {
- "description": "EgressRouterStatus contains the observed status of EgressRouter. Read-only.",
+ "io.openshift.operator.v1.IPv4OVNKubernetesConfig": {
"type": "object",
"properties": {
- "conditions": {
- "description": "Observed status of the egress router",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.network.v1.EgressRouterStatusCondition"
- }
+ "internalJoinSubnet": {
+ "description": "internalJoinSubnet is a v4 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. The value cannot be changed after installation. The current default value is 100.64.0.0/16 The subnet must be large enough to accomadate one IP per node in your cluster The value must be in proper IPV4 CIDR format",
+ "type": "string"
+ },
+ "internalTransitSwitchSubnet": {
+ "description": "internalTransitSwitchSubnet is a v4 subnet in IPV4 CIDR format used internally by OVN-Kubernetes for the distributed transit switch in the OVN Interconnect architecture that connects the cluster routers on each node together to enable east west traffic. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. The value cannot be changed after installation. When ommitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The current default subnet is 100.88.0.0/16 The subnet must be large enough to accomadate one IP per node in your cluster The value must be in proper IPV4 CIDR format",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "EgressRouterStatus",
+ "Kind": "IPv4OVNKubernetesConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.network.v1.EgressRouterStatusCondition": {
- "description": "EgressRouterStatusCondition represents the state of the egress router's managed and monitored components.",
+ "io.openshift.operator.v1.IPv6GatewayConfig": {
+ "description": "IPV6GatewayConfig holds the configuration paramaters for IPV6 connections in the GatewayConfig for OVN-Kubernetes",
"type": "object",
- "required": [
- "type",
- "status",
- "lastTransitionTime"
- ],
"properties": {
- "lastTransitionTime": {
- "description": "LastTransitionTime is the time of the last update to the current status property.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "Message provides additional information about the current condition. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.",
- "type": "string"
- },
- "reason": {
- "description": "Reason is the CamelCase reason for the condition's current status.",
+ "internalMasqueradeSubnet": {
+ "description": "internalMasqueradeSubnet contains the masquerade addresses in IPV6 CIDR format used internally by ovn-kubernetes to enable host to service traffic. Each host in the cluster is configured with these addresses, as well as the shared gateway bridge interface. The values can be changed after installation. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. Additionally the subnet must be large enough to accommodate 6 IPs (maximum prefix length /125). When omitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The current default subnet is fd69::/125 Note that IPV6 dual addresses are not permitted",
"type": "string"
- },
- "status": {
- "description": "Status of the condition, one of True, False, Unknown.",
- "type": "string",
- "default": ""
- },
- "type": {
- "description": "Type specifies the aspect reported by this condition; one of Available, Progressing, Degraded",
- "type": "string",
- "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "EgressRouterStatusCondition",
+ "Kind": "IPv6GatewayConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.network.v1.L4RedirectRule": {
- "description": "L4RedirectRule defines a DNAT redirection from a given port to a destination IP and port.",
+ "io.openshift.operator.v1.IPv6OVNKubernetesConfig": {
"type": "object",
- "required": [
- "destinationIP",
- "port",
- "protocol"
- ],
"properties": {
- "destinationIP": {
- "description": "IP specifies the remote destination's IP address. Can be IPv4 or IPv6.",
- "type": "string",
- "default": ""
- },
- "port": {
- "description": "Port is the port number to which clients should send traffic to be redirected.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "protocol": {
- "description": "Protocol can be TCP, SCTP or UDP.",
- "type": "string",
- "default": ""
+ "internalJoinSubnet": {
+ "description": "internalJoinSubnet is a v6 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. The value cannot be changed after installation. The subnet must be large enough to accomadate one IP per node in your cluster The current default value is fd98::/48 The value must be in proper IPV6 CIDR format Note that IPV6 dual addresses are not permitted",
+ "type": "string"
},
- "targetPort": {
- "description": "TargetPort allows specifying the port number on the remote destination to which the traffic gets redirected to. If unspecified, the value from \"Port\" is used.",
- "type": "integer",
- "format": "int32"
+ "internalTransitSwitchSubnet": {
+ "description": "internalTransitSwitchSubnet is a v4 subnet in IPV4 CIDR format used internally by OVN-Kubernetes for the distributed transit switch in the OVN Interconnect architecture that connects the cluster routers on each node together to enable east west traffic. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. The value cannot be changed after installation. When ommitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The subnet must be large enough to accomadate one IP per node in your cluster The current default subnet is fd97::/64 The value must be in proper IPV6 CIDR format Note that IPV6 dual addresses are not permitted",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "L4RedirectRule",
+ "Kind": "IPv6OVNKubernetesConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.network.v1.MacvlanConfig": {
- "description": "MacvlanConfig consists of arguments specific to the macvlan EgressRouterInterfaceType",
+ "io.openshift.operator.v1.Ingress": {
+ "description": "Ingress allows cluster admin to configure alternative ingress for the console.",
"type": "object",
- "required": [
- "mode"
- ],
"properties": {
- "master": {
- "description": "Name of the master interface. Need not be specified if it can be inferred from the IP address.",
- "type": "string"
+ "clientDownloadsURL": {
+ "description": "clientDownloadsURL is a URL to be used as the address to download client binaries. If not specified, the downloads route hostname will be used. This field is required for clusters without ingress capability, where access to routes is not possible. The console operator will monitor the URL and may go degraded if it's unreachable for an extended period. Must use the HTTPS scheme.",
+ "type": "string",
+ "default": ""
},
- "mode": {
- "description": "Mode depicts the mode that is used for the macvlan interface; one of Bridge|Private|VEPA|Passthru. The default mode is \"Bridge\".",
+ "consoleURL": {
+ "description": "consoleURL is a URL to be used as the base console address. If not specified, the console route hostname will be used. This field is required for clusters without ingress capability, where access to routes is not possible. Make sure that appropriate ingress is set up at this URL. The console operator will monitor the URL and may go degraded if it's unreachable for an extended period. Must use the HTTPS scheme.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "MacvlanConfig",
+ "Kind": "Ingress",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.network.v1.OperatorPKI": {
- "description": "OperatorPKI is a simple certificate authority. It is not intended for external use - rather, it is internal to the network operator. The CNO creates a CA and a certificate signed by that CA. The certificate has both ClientAuth and ServerAuth extended usages enabled.\n\n\tMore specifically, given an OperatorPKI with \u003cname\u003e, the CNO will manage:\n\n- A Secret called \u003cname\u003e-ca with two data keys:\n - tls.key - the private key\n - tls.crt - the CA certificate\n\n- A ConfigMap called \u003cname\u003e-ca with a single data key:\n - cabundle.crt - the CA certificate(s)\n\n- A Secret called \u003cname\u003e-cert with two data keys:\n - tls.key - the private key\n - tls.crt - the certificate, signed by the CA\n\nThe CA certificate will have a validity of 10 years, rotated after 9. The target certificate will have a validity of 6 months, rotated after 3\n\nThe CA certificate will have a CommonName of \"\u003cnamespace\u003e_\u003cname\u003e-ca@\u003ctimestamp\u003e\", where \u003ctimestamp\u003e is the last rotation time.",
+ "io.openshift.operator.v1.IngressController": {
+ "description": "IngressController describes a managed ingress controller for the cluster. The controller can service OpenShift Route and Kubernetes Ingress resources.\n\nWhen an IngressController is created, a new ingress controller deployment is created to allow external traffic to reach the services that expose Ingress or Route resources. Updating this resource may lead to disruption for public facing network connections as a new ingress controller revision may be rolled out.\n\nhttps://kubernetes.io/docs/concepts/services-networking/ingress-controllers\n\nWhenever possible, sensible defaults for the platform are used. See each field for more details.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -100336,476 +106436,389 @@
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
+ "description": "spec is the specification of the desired behavior of the IngressController.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.network.v1.OperatorPKISpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerSpec"
},
"status": {
+ "description": "status is the most recently observed status of the IngressController.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.network.v1.OperatorPKIStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "network.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "OperatorPKI",
+ "Kind": "IngressController",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.network.v1.OperatorPKIList": {
- "description": "OperatorPKIList contains a list of OperatorPKI",
+ "io.openshift.operator.v1.IngressControllerCaptureHTTPCookie": {
+ "description": "IngressControllerCaptureHTTPCookie describes an HTTP cookie that should be captured.",
"type": "object",
"required": [
- "items"
+ "matchType",
+ "maxLength"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "matchType": {
+ "description": "matchType specifies the type of match to be performed on the cookie name. Allowed values are \"Exact\" for an exact string match and \"Prefix\" for a string prefix match. If \"Exact\" is specified, a name must be specified in the name field. If \"Prefix\" is provided, a prefix must be specified in the namePrefix field. For example, specifying matchType \"Prefix\" and namePrefix \"foo\" will capture a cookie named \"foo\" or \"foobar\" but not one named \"bar\". The first matching cookie is captured.",
"type": "string"
},
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.network.v1.OperatorPKI"
- }
+ "maxLength": {
+ "description": "maxLength specifies a maximum length of the string that will be logged, which includes the cookie name, cookie value, and one-character delimiter. If the log entry exceeds this length, the value will be truncated in the log message. Note that the ingress controller may impose a separate bound on the total length of HTTP headers in a request.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "name": {
+ "description": "name specifies a cookie name. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.",
+ "type": "string",
+ "default": ""
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "namePrefix": {
+ "description": "namePrefix specifies a cookie name prefix. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "network.operator.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "OperatorPKIList",
+ "Kind": "IngressControllerCaptureHTTPCookie",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "matchType",
+ "fields-to-discriminateBy": {
+ "name": "Name",
+ "namePrefix": "NamePrefix"
+ }
+ }
+ ]
},
- "io.openshift.operator.network.v1.OperatorPKISpec": {
- "description": "OperatorPKISpec is the PKI configuration.",
+ "io.openshift.operator.v1.IngressControllerCaptureHTTPCookieUnion": {
+ "description": "IngressControllerCaptureHTTPCookieUnion describes optional fields of an HTTP cookie that should be captured.",
"type": "object",
"required": [
- "targetCert"
+ "matchType"
],
"properties": {
- "targetCert": {
- "description": "targetCert configures the certificate signed by the CA. It will have both ClientAuth and ServerAuth enabled",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.network.v1.CertSpec"
+ "matchType": {
+ "description": "matchType specifies the type of match to be performed on the cookie name. Allowed values are \"Exact\" for an exact string match and \"Prefix\" for a string prefix match. If \"Exact\" is specified, a name must be specified in the name field. If \"Prefix\" is provided, a prefix must be specified in the namePrefix field. For example, specifying matchType \"Prefix\" and namePrefix \"foo\" will capture a cookie named \"foo\" or \"foobar\" but not one named \"bar\". The first matching cookie is captured.",
+ "type": "string"
+ },
+ "name": {
+ "description": "name specifies a cookie name. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.",
+ "type": "string",
+ "default": ""
+ },
+ "namePrefix": {
+ "description": "namePrefix specifies a cookie name prefix. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "OperatorPKISpec",
+ "Kind": "IngressControllerCaptureHTTPCookieUnion",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "matchType",
+ "fields-to-discriminateBy": {
+ "name": "Name",
+ "namePrefix": "NamePrefix"
+ }
+ }
+ ]
},
- "io.openshift.operator.network.v1.OperatorPKIStatus": {
- "description": "OperatorPKIStatus is not implemented.",
+ "io.openshift.operator.v1.IngressControllerCaptureHTTPHeader": {
+ "description": "IngressControllerCaptureHTTPHeader describes an HTTP header that should be captured.",
"type": "object",
+ "required": [
+ "name",
+ "maxLength"
+ ],
+ "properties": {
+ "maxLength": {
+ "description": "maxLength specifies a maximum length for the header value. If a header value exceeds this length, the value will be truncated in the log message. Note that the ingress controller may impose a separate bound on the total length of HTTP headers in a request.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "name": {
+ "description": "name specifies a header name. Its value must be a valid HTTP header name as defined in RFC 2616 section 4.2.",
+ "type": "string",
+ "default": ""
+ }
+ },
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "OperatorPKIStatus",
+ "Kind": "IngressControllerCaptureHTTPHeader",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.network.v1.RedirectConfig": {
- "description": "RedirectConfig represents the configuration parameters specific to redirect mode.",
+ "io.openshift.operator.v1.IngressControllerCaptureHTTPHeaders": {
+ "description": "IngressControllerCaptureHTTPHeaders specifies which HTTP headers the IngressController captures.",
"type": "object",
"properties": {
- "fallbackIP": {
- "description": "FallbackIP specifies the remote destination's IP address. Can be IPv4 or IPv6. If no redirect rules are specified, all traffic from the router are redirected to this IP. If redirect rules are specified, then any connections on any other port (undefined in the rules) on the router will be redirected to this IP. If redirect rules are specified and no fallback IP is provided, connections on other ports will simply be rejected.",
- "type": "string"
+ "request": {
+ "description": "request specifies which HTTP request headers to capture.\n\nIf this field is empty, no request headers are captured.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerCaptureHTTPHeader"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "redirectRules": {
- "description": "List of L4RedirectRules that define the DNAT redirection from the pod to the destination in redirect mode.",
+ "response": {
+ "description": "response specifies which HTTP response headers to capture.\n\nIf this field is empty, no response headers are captured.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.network.v1.L4RedirectRule"
- }
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerCaptureHTTPHeader"
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "network.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "RedirectConfig",
+ "Kind": "IngressControllerCaptureHTTPHeaders",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.samples.v1.Config": {
- "description": "Config contains the configuration and detailed condition status for the Samples Operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.IngressControllerHTTPHeader": {
+ "description": "IngressControllerHTTPHeader specifies configuration for setting or deleting an HTTP header.",
"type": "object",
"required": [
- "metadata",
- "spec"
+ "name",
+ "action"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
+ "action": {
+ "description": "action specifies actions to perform on headers, such as setting or deleting headers.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.samples.v1.ConfigSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerHTTPHeaderActionUnion"
},
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.samples.v1.ConfigStatus"
+ "name": {
+ "description": "name specifies the name of a header on which to perform an action. Its value must be a valid HTTP header name as defined in RFC 2616 section 4.2. The name must consist only of alphanumeric and the following special characters, \"-!#$%\u0026'*+.^_`\". The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Host, Cookie, Set-Cookie. It must be no more than 255 characters in length. Header name must be unique.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "samples.operator.openshift.io",
+ "Type": "nested",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "Config",
- "Scope": "Clustered"
+ "Kind": "IngressControllerHTTPHeader",
+ "Scope": "Namespaced"
}
},
- "io.openshift.operator.samples.v1.ConfigCondition": {
- "description": "ConfigCondition captures various conditions of the Config as entries are processed.",
+ "io.openshift.operator.v1.IngressControllerHTTPHeaderActionUnion": {
+ "description": "IngressControllerHTTPHeaderActionUnion specifies an action to take on an HTTP header.",
"type": "object",
"required": [
- "type",
- "status"
+ "type"
],
"properties": {
- "lastTransitionTime": {
- "description": "lastTransitionTime is the last time the condition transitioned from one status to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "lastUpdateTime": {
- "description": "lastUpdateTime is the last time this condition was updated.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "message is a human readable message indicating details about the transition.",
- "type": "string"
- },
- "reason": {
- "description": "reason is what caused the condition's last transition.",
- "type": "string"
- },
- "status": {
- "description": "status of the condition, one of True, False, Unknown.",
- "type": "string",
- "default": ""
+ "set": {
+ "description": "set specifies how the HTTP header should be set. This field is required when type is Set and forbidden otherwise.",
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerSetHTTPHeader"
},
"type": {
- "description": "type of condition.",
+ "description": "type defines the type of the action to be applied on the header. Possible values are Set or Delete. Set allows you to set HTTP request and response headers. Delete allows you to delete HTTP request and response headers.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "samples.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ConfigCondition",
+ "Kind": "IngressControllerHTTPHeaderActionUnion",
"Scope": "Namespaced"
- }
- },
- "io.openshift.operator.samples.v1.ConfigList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "required": [
- "metadata",
- "items"
- ],
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.samples.v1.Config"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "set": "Set"
}
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "samples.operator.openshift.io",
- "Version": "v1",
- "Kind": "ConfigList",
- "Scope": "Namespaced"
- }
+ ]
},
- "io.openshift.operator.samples.v1.ConfigSpec": {
- "description": "ConfigSpec contains the desired configuration and state for the Samples Operator, controlling various behavior around the imagestreams and templates it creates/updates in the openshift namespace.",
+ "io.openshift.operator.v1.IngressControllerHTTPHeaderActions": {
+ "description": "IngressControllerHTTPHeaderActions defines configuration for actions on HTTP request and response headers.",
"type": "object",
"properties": {
- "architectures": {
- "description": "architectures determine which hardware architecture(s) to install, where x86_64, ppc64le, and s390x are the only supported choices currently.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "managementState": {
- "description": "managementState is top level on/off type of switch for all operators. When \"Managed\", this operator processes config and manipulates the samples accordingly. When \"Unmanaged\", this operator ignores any updates to the resources it watches. When \"Removed\", it reacts that same wasy as it does if the Config object is deleted, meaning any ImageStreams or Templates it manages (i.e. it honors the skipped lists) and the registry secret are deleted, along with the ConfigMap in the operator's namespace that represents the last config used to manipulate the samples,",
- "type": "string"
- },
- "samplesRegistry": {
- "description": "samplesRegistry allows for the specification of which registry is accessed by the ImageStreams for their image content. Defaults on the content in https://github.com/openshift/library that are pulled into this github repository, but based on our pulling only ocp content it typically defaults to registry.redhat.io.",
- "type": "string"
- },
- "skippedHelmCharts": {
- "description": "skippedHelmCharts specifies names of helm charts that should NOT be managed. Admins can use this to allow them to delete content they don’t want. They will still have to MANUALLY DELETE the content but the operator will not recreate(or update) anything listed here. Few examples of the name of helmcharts which can be skipped are 'redhat-redhat-perl-imagestreams','redhat-redhat-nodejs-imagestreams','redhat-nginx-imagestreams', 'redhat-redhat-ruby-imagestreams','redhat-redhat-python-imagestreams','redhat-redhat-php-imagestreams', 'redhat-httpd-imagestreams','redhat-redhat-dotnet-imagestreams'. Rest of the names can be obtained from openshift console --\u003e helmcharts --\u003einstalled helmcharts. This will display the list of all the 12 helmcharts(of imagestreams)being installed by Samples Operator. The skippedHelmCharts must be a valid Kubernetes resource name. May contain only lowercase alphanumeric characters, hyphens and periods, and each period separated segment must begin and end with an alphanumeric character. It must be non-empty and at most 253 characters in length",
+ "request": {
+ "description": "request is a list of HTTP request headers to modify. Actions defined here will modify the request headers of all requests passing through an ingress controller. These actions are applied to all Routes i.e. for all connections handled by the ingress controller defined within a cluster. IngressController actions for request headers will be executed before Route actions. Currently, actions may define to either `Set` or `Delete` headers values. Actions are applied in sequence as defined in this list. A maximum of 20 request header actions may be configured. Sample fetchers allowed are \"req.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[req.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\".",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerHTTPHeader"
},
- "x-kubernetes-list-type": "set"
- },
- "skippedImagestreams": {
- "description": "skippedImagestreams specifies names of image streams that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "skippedTemplates": {
- "description": "skippedTemplates specifies names of templates that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.",
+ "response": {
+ "description": "response is a list of HTTP response headers to modify. Actions defined here will modify the response headers of all requests passing through an ingress controller. These actions are applied to all Routes i.e. for all connections handled by the ingress controller defined within a cluster. IngressController actions for response headers will be executed after Route actions. Currently, actions may define to either `Set` or `Delete` headers values. Actions are applied in sequence as defined in this list. A maximum of 20 response header actions may be configured. Sample fetchers allowed are \"res.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[res.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\".",
"type": "array",
"items": {
- "type": "string",
- "default": ""
- }
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerHTTPHeader"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "samples.operator.openshift.io",
+ "Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ConfigSpec",
+ "Kind": "IngressControllerHTTPHeaderActions",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.samples.v1.ConfigStatus": {
- "description": "ConfigStatus contains the actual configuration in effect, as well as various details that describe the state of the Samples Operator.",
+ "io.openshift.operator.v1.IngressControllerHTTPHeaders": {
+ "description": "IngressControllerHTTPHeaders specifies how the IngressController handles certain HTTP headers.",
"type": "object",
"properties": {
- "architectures": {
- "description": "architectures determine which hardware architecture(s) to install, where x86_64 and ppc64le are the supported choices.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "conditions": {
- "description": "conditions represents the available maintenance status of the sample imagestreams and templates.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.samples.v1.ConfigCondition"
- },
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "managementState": {
- "description": "managementState reflects the current operational status of the on/off switch for the operator. This operator compares the ManagementState as part of determining that we are turning the operator back on (i.e. \"Managed\") when it was previously \"Unmanaged\".",
- "type": "string",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "samplesRegistry": {
- "description": "samplesRegistry allows for the specification of which registry is accessed by the ImageStreams for their image content. Defaults on the content in https://github.com/openshift/library that are pulled into this github repository, but based on our pulling only ocp content it typically defaults to registry.redhat.io.",
- "type": "string",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
+ "actions": {
+ "description": "actions specifies options for modifying headers and their values. Note that this option only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). Headers cannot be modified for TLS passthrough connections. Setting the HSTS (`Strict-Transport-Security`) header is not supported via actions. `Strict-Transport-Security` may only be configured using the \"haproxy.router.openshift.io/hsts_header\" route annotation, and only in accordance with the policy specified in Ingress.Spec.RequiredHSTSPolicies. Any actions defined here are applied after any actions related to the following other fields: cache-control, spec.clientTLS, spec.httpHeaders.forwardedHeaderPolicy, spec.httpHeaders.uniqueId, and spec.httpHeaders.headerNameCaseAdjustments. In case of HTTP request headers, the actions specified in spec.httpHeaders.actions on the Route will be executed after the actions specified in the IngressController's spec.httpHeaders.actions field. In case of HTTP response headers, the actions specified in spec.httpHeaders.actions on the IngressController will be executed after the actions specified in the Route's spec.httpHeaders.actions field. Headers set using this API cannot be captured for use in access logs. The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Host, Cookie, Set-Cookie. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController. Please refer to the documentation for that API field for more details.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerHTTPHeaderActions"
},
- "skippedImagestreams": {
- "description": "skippedImagestreams specifies names of image streams that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
+ "forwardedHeaderPolicy": {
+ "description": "forwardedHeaderPolicy specifies when and how the IngressController sets the Forwarded, X-Forwarded-For, X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto, and X-Forwarded-Proto-Version HTTP headers. The value may be one of the following:\n\n* \"Append\", which specifies that the IngressController appends the\n headers, preserving existing headers.\n\n* \"Replace\", which specifies that the IngressController sets the\n headers, replacing any existing Forwarded or X-Forwarded-* headers.\n\n* \"IfNone\", which specifies that the IngressController sets the\n headers if they are not already set.\n\n* \"Never\", which specifies that the IngressController never sets the\n headers, preserving any existing headers.\n\nBy default, the policy is \"Append\".",
+ "type": "string"
},
- "skippedTemplates": {
- "description": "skippedTemplates specifies names of templates that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.",
+ "headerNameCaseAdjustments": {
+ "description": "headerNameCaseAdjustments specifies case adjustments that can be applied to HTTP header names. Each adjustment is specified as an HTTP header name with the desired capitalization. For example, specifying \"X-Forwarded-For\" indicates that the \"x-forwarded-for\" HTTP header should be adjusted to have the specified capitalization.\n\nThese adjustments are only applied to cleartext, edge-terminated, and re-encrypt routes, and only when using HTTP/1.\n\nFor request headers, these adjustments are applied only for routes that have the haproxy.router.openshift.io/h1-adjust-case=true annotation. For response headers, these adjustments are applied to all HTTP responses.\n\nIf this field is empty, no request headers are adjusted.",
"type": "array",
"items": {
"type": "string",
"default": ""
},
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "version": {
- "description": "version is the value of the operator's payload based version indicator when it was last successfully processed",
- "type": "string",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "samples.operator.openshift.io",
- "Version": "v1",
- "Kind": "ConfigStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.AWSCSIDriverConfigSpec": {
- "description": "AWSCSIDriverConfigSpec defines properties that can be configured for the AWS CSI driver.",
- "type": "object",
- "properties": {
- "efsVolumeMetrics": {
- "description": "efsVolumeMetrics sets the configuration for collecting metrics from EFS volumes used by the EFS CSI Driver.",
- "$ref": "#/definitions/io.openshift.operator.v1.AWSEFSVolumeMetrics"
+ "x-kubernetes-list-type": "atomic"
},
- "kmsKeyARN": {
- "description": "kmsKeyARN sets the cluster default storage class to encrypt volumes with a user-defined KMS key, rather than the default KMS key used by AWS. The value may be either the ARN or Alias ARN of a KMS key.",
- "type": "string"
+ "uniqueId": {
+ "description": "uniqueId describes configuration for a custom HTTP header that the ingress controller should inject into incoming HTTP requests. Typically, this header is configured to have a value that is unique to the HTTP request. The header can be used by applications or included in access logs to facilitate tracing individual HTTP requests.\n\nIf this field is empty, no such header is injected into requests.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerHTTPUniqueIdHeaderPolicy"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AWSCSIDriverConfigSpec",
+ "Kind": "IngressControllerHTTPHeaders",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.AWSClassicLoadBalancerParameters": {
- "description": "AWSClassicLoadBalancerParameters holds configuration parameters for an AWS Classic load balancer.",
+ "io.openshift.operator.v1.IngressControllerHTTPUniqueIdHeaderPolicy": {
+ "description": "IngressControllerHTTPUniqueIdHeaderPolicy describes configuration for a unique id header.",
"type": "object",
"properties": {
- "connectionIdleTimeout": {
- "description": "connectionIdleTimeout specifies the maximum time period that a connection may be idle before the load balancer closes the connection. The value must be parseable as a time duration value; see \u003chttps://pkg.go.dev/time#ParseDuration\u003e. A nil or zero value means no opinion, in which case a default value is used. The default value for this field is 60s. This default is subject to change.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "format": {
+ "description": "format specifies the format for the injected HTTP header's value. This field has no effect unless name is specified. For the HAProxy-based ingress controller implementation, this format uses the same syntax as the HTTP log format. If the field is empty, the default value is \"%{+X}o\\\\ %ci:%cp_%fi:%fp_%Ts_%rt:%pid\"; see the corresponding HAProxy documentation: http://cbonte.github.io/haproxy-dconv/2.0/configuration.html#8.2.3",
+ "type": "string"
},
- "subnets": {
- "description": "subnets specifies the subnets to which the load balancer will attach. The subnets may be specified by either their ID or name. The total number of subnets is limited to 10.\n\nIn order for the load balancer to be provisioned with subnets, each subnet must exist, each subnet must be from a different availability zone, and the load balancer service must be recreated to pick up new values.\n\nWhen omitted from the spec, the subnets will be auto-discovered for each availability zone. Auto-discovered subnets are not reported in the status of the IngressController object.",
- "$ref": "#/definitions/io.openshift.operator.v1.AWSSubnets"
+ "name": {
+ "description": "name specifies the name of the HTTP header (for example, \"unique-id\") that the ingress controller should inject into HTTP requests. The field's value must be a valid HTTP header name as defined in RFC 2616 section 4.2. If the field is empty, no header is injected.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AWSClassicLoadBalancerParameters",
+ "Kind": "IngressControllerHTTPUniqueIdHeaderPolicy",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.AWSEFSVolumeMetrics": {
- "description": "AWSEFSVolumeMetrics defines the configuration for volume metrics in the EFS CSI Driver.",
+ "io.openshift.operator.v1.IngressControllerList": {
+ "description": "IngressControllerList contains a list of IngressControllers.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "state"
+ "items"
],
"properties": {
- "recursiveWalk": {
- "description": "recursiveWalk provides additional configuration for collecting volume metrics in the AWS EFS CSI Driver when the state is set to RecursiveWalk.",
- "$ref": "#/definitions/io.openshift.operator.v1.AWSEFSVolumeMetricsRecursiveWalkConfig"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "state": {
- "description": "state defines the state of metric collection in the AWS EFS CSI Driver. This field is required and must be set to one of the following values: Disabled or RecursiveWalk. Disabled means no metrics collection will be performed. This is the default value. RecursiveWalk means the AWS EFS CSI Driver will recursively scan volumes to collect metrics. This process may result in high CPU and memory usage, depending on the volume size.",
- "type": "string",
- "default": ""
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressController"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AWSEFSVolumeMetrics",
+ "Kind": "IngressControllerList",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "state",
- "fields-to-discriminateBy": {
- "recursiveWalk": "RecursiveWalk"
- }
- }
- ]
+ }
},
- "io.openshift.operator.v1.AWSEFSVolumeMetricsRecursiveWalkConfig": {
- "description": "AWSEFSVolumeMetricsRecursiveWalkConfig defines options for volume metrics in the EFS CSI Driver.",
+ "io.openshift.operator.v1.IngressControllerLogging": {
+ "description": "IngressControllerLogging describes what should be logged where.",
"type": "object",
"properties": {
- "fsRateLimit": {
- "description": "fsRateLimit defines the rate limit, in goroutines per file system, for processing volume metrics. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 5. The valid range is from 1 to 100 goroutines.",
- "type": "integer",
- "format": "int32"
- },
- "refreshPeriodMinutes": {
- "description": "refreshPeriodMinutes specifies the frequency, in minutes, at which volume metrics are refreshed. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 240. The valid range is from 1 to 43200 minutes (30 days).",
- "type": "integer",
- "format": "int32"
+ "access": {
+ "description": "access describes how the client requests should be logged.\n\nIf this field is empty, access logging is disabled.",
+ "$ref": "#/definitions/io.openshift.operator.v1.AccessLogging"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AWSEFSVolumeMetricsRecursiveWalkConfig",
+ "Kind": "IngressControllerLogging",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.AWSLoadBalancerParameters": {
- "description": "AWSLoadBalancerParameters provides configuration settings that are specific to AWS load balancers.",
+ "io.openshift.operator.v1.IngressControllerSetHTTPHeader": {
+ "description": "IngressControllerSetHTTPHeader defines the value which needs to be set on an HTTP header.",
"type": "object",
"required": [
- "type"
+ "value"
],
"properties": {
- "classicLoadBalancer": {
- "description": "classicLoadBalancerParameters holds configuration parameters for an AWS classic load balancer. Present only if type is Classic.",
- "$ref": "#/definitions/io.openshift.operator.v1.AWSClassicLoadBalancerParameters"
- },
- "networkLoadBalancer": {
- "description": "networkLoadBalancerParameters holds configuration parameters for an AWS network load balancer. Present only if type is NLB.",
- "$ref": "#/definitions/io.openshift.operator.v1.AWSNetworkLoadBalancerParameters"
- },
- "type": {
- "description": "type is the type of AWS load balancer to instantiate for an ingresscontroller.\n\nValid values are:\n\n* \"Classic\": A Classic Load Balancer that makes routing decisions at either\n the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See\n the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb\n\n* \"NLB\": A Network Load Balancer that makes routing decisions at the\n transport layer (TCP/SSL). See the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb",
+ "value": {
+ "description": "value specifies a header value. Dynamic values can be added. The value will be interpreted as an HAProxy format string as defined in http://cbonte.github.io/haproxy-dconv/2.6/configuration.html#8.2.6 and may use HAProxy's %[] syntax and otherwise must be a valid HTTP header value as defined in https://datatracker.ietf.org/doc/html/rfc7230#section-3.2. The value of this field must be no more than 16384 characters in length. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController.",
"type": "string",
"default": ""
}
@@ -100814,208 +106827,237 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AWSLoadBalancerParameters",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "classicLoadBalancer": "ClassicLoadBalancerParameters",
- "networkLoadBalancer": "NetworkLoadBalancerParameters"
- }
- }
- ]
- },
- "io.openshift.operator.v1.AWSNetworkLoadBalancerParameters": {
- "description": "AWSNetworkLoadBalancerParameters holds configuration parameters for an AWS Network load balancer. For Example: Setting AWS EIPs https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html",
- "type": "object",
- "properties": {
- "eipAllocations": {
- "description": "eipAllocations is a list of IDs for Elastic IP (EIP) addresses that are assigned to the Network Load Balancer. The following restrictions apply:\n\neipAllocations can only be used with external scope, not internal. An EIP can be allocated to only a single IngressController. The number of EIP allocations must match the number of subnets that are used for the load balancer. Each EIP allocation must be unique. A maximum of 10 EIP allocations are permitted.\n\nSee https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html for general information about configuration, characteristics, and limitations of Elastic IP addresses.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "subnets": {
- "description": "subnets specifies the subnets to which the load balancer will attach. The subnets may be specified by either their ID or name. The total number of subnets is limited to 10.\n\nIn order for the load balancer to be provisioned with subnets, each subnet must exist, each subnet must be from a different availability zone, and the load balancer service must be recreated to pick up new values.\n\nWhen omitted from the spec, the subnets will be auto-discovered for each availability zone. Auto-discovered subnets are not reported in the status of the IngressController object.",
- "$ref": "#/definitions/io.openshift.operator.v1.AWSSubnets"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "AWSNetworkLoadBalancerParameters",
+ "Kind": "IngressControllerSetHTTPHeader",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.AWSSubnets": {
- "description": "AWSSubnets contains a list of references to AWS subnets by ID or name.",
+ "io.openshift.operator.v1.IngressControllerSpec": {
+ "description": "IngressControllerSpec is the specification of the desired behavior of the IngressController.",
"type": "object",
"properties": {
- "ids": {
- "description": "ids specifies a list of AWS subnets by subnet ID. Subnet IDs must start with \"subnet-\", consist only of alphanumeric characters, must be exactly 24 characters long, must be unique, and the total number of subnets specified by ids and names must not exceed 10.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "clientTLS": {
+ "description": "clientTLS specifies settings for requesting and verifying client certificates, which can be used to enable mutual TLS for edge-terminated and reencrypt routes.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.ClientTLS"
+ },
+ "defaultCertificate": {
+ "description": "defaultCertificate is a reference to a secret containing the default certificate served by the ingress controller. When Routes don't specify their own certificate, defaultCertificate is used.\n\nThe secret must contain the following keys and data:\n\n tls.crt: certificate file contents\n tls.key: key file contents\n\nIf unset, a wildcard certificate is automatically generated and used. The certificate is valid for the ingress controller domain (and subdomains) and the generated certificate's CA will be automatically integrated with the cluster's trust store.\n\nIf a wildcard certificate is used and shared by multiple HTTP/2 enabled routes (which implies ALPN) then clients (i.e., notably browsers) are at liberty to reuse open connections. This means a client can reuse a connection to another route and that is likely to fail. This behaviour is generally known as connection coalescing.\n\nThe in-use certificate (whether generated or user-specified) will be automatically integrated with OpenShift's built-in OAuth server.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "domain": {
+ "description": "domain is a DNS name serviced by the ingress controller and is used to configure multiple features:\n\n* For the LoadBalancerService endpoint publishing strategy, domain is\n used to configure DNS records. See endpointPublishingStrategy.\n\n* When using a generated default certificate, the certificate will be valid\n for domain and its subdomains. See defaultCertificate.\n\n* The value is published to individual Route statuses so that end-users\n know where to target external DNS records.\n\ndomain must be unique among all IngressControllers, and cannot be updated.\n\nIf empty, defaults to ingress.config.openshift.io/cluster .spec.domain.",
+ "type": "string"
+ },
+ "endpointPublishingStrategy": {
+ "description": "endpointPublishingStrategy is used to publish the ingress controller endpoints to other networks, enable load balancer integrations, etc.\n\nIf unset, the default is based on infrastructure.config.openshift.io/cluster .status.platform:\n\n AWS: LoadBalancerService (with External scope)\n Azure: LoadBalancerService (with External scope)\n GCP: LoadBalancerService (with External scope)\n IBMCloud: LoadBalancerService (with External scope)\n AlibabaCloud: LoadBalancerService (with External scope)\n Libvirt: HostNetwork\n\nAny other platform types (including None) default to HostNetwork.\n\nendpointPublishingStrategy cannot be updated.",
+ "$ref": "#/definitions/io.openshift.operator.v1.EndpointPublishingStrategy"
+ },
+ "httpCompression": {
+ "description": "httpCompression defines a policy for HTTP traffic compression. By default, there is no HTTP compression.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.HTTPCompressionPolicy"
+ },
+ "httpEmptyRequestsPolicy": {
+ "description": "httpEmptyRequestsPolicy describes how HTTP connections should be handled if the connection times out before a request is received. Allowed values for this field are \"Respond\" and \"Ignore\". If the field is set to \"Respond\", the ingress controller sends an HTTP 400 or 408 response, logs the connection (if access logging is enabled), and counts the connection in the appropriate metrics. If the field is set to \"Ignore\", the ingress controller closes the connection without sending a response, logging the connection, or incrementing metrics. The default value is \"Respond\".\n\nTypically, these connections come from load balancers' health probes or Web browsers' speculative connections (\"preconnect\") and can be safely ignored. However, these requests may also be caused by network errors, and so setting this field to \"Ignore\" may impede detection and diagnosis of problems. In addition, these requests may be caused by port scans, in which case logging empty requests may aid in detecting intrusion attempts.",
+ "type": "string"
+ },
+ "httpErrorCodePages": {
+ "description": "httpErrorCodePages specifies a configmap with custom error pages. The administrator must create this configmap in the openshift-config namespace. This configmap should have keys in the format \"error-page-\u003cerror code\u003e.http\", where \u003cerror code\u003e is an HTTP error code. For example, \"error-page-503.http\" defines an error page for HTTP 503 responses. Currently only error pages for 503 and 404 responses can be customized. Each value in the configmap should be the full response, including HTTP headers. Eg- https://raw.githubusercontent.com/openshift/router/fadab45747a9b30cc3f0a4b41ad2871f95827a93/images/router/haproxy/conf/error-page-503.http If this field is empty, the ingress controller uses the default error pages.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ },
+ "httpHeaders": {
+ "description": "httpHeaders defines policy for HTTP headers.\n\nIf this field is empty, the default values are used.",
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerHTTPHeaders"
+ },
+ "logging": {
+ "description": "logging defines parameters for what should be logged where. If this field is empty, operational logs are enabled but access logs are disabled.",
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerLogging"
+ },
+ "namespaceSelector": {
+ "description": "namespaceSelector is used to filter the set of namespaces serviced by the ingress controller. This is useful for implementing shards.\n\nIf unset, the default is no filtering.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ },
+ "nodePlacement": {
+ "description": "nodePlacement enables explicit control over the scheduling of the ingress controller.\n\nIf unset, defaults are used. See NodePlacement for more details.",
+ "$ref": "#/definitions/io.openshift.operator.v1.NodePlacement"
+ },
+ "replicas": {
+ "description": "replicas is the desired number of ingress controller replicas. If unset, the default depends on the value of the defaultPlacement field in the cluster config.openshift.io/v1/ingresses status.\n\nThe value of replicas is set based on the value of a chosen field in the Infrastructure CR. If defaultPlacement is set to ControlPlane, the chosen field will be controlPlaneTopology. If it is set to Workers the chosen field will be infrastructureTopology. Replicas will then be set to 1 or 2 based whether the chosen field's value is SingleReplica or HighlyAvailable, respectively.\n\nThese defaults are subject to change.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "routeAdmission": {
+ "description": "routeAdmission defines a policy for handling new route claims (for example, to allow or deny claims across namespaces).\n\nIf empty, defaults will be applied. See specific routeAdmission fields for details about their defaults.",
+ "$ref": "#/definitions/io.openshift.operator.v1.RouteAdmissionPolicy"
+ },
+ "routeSelector": {
+ "description": "routeSelector is used to filter the set of Routes serviced by the ingress controller. This is useful for implementing shards.\n\nIf unset, the default is no filtering.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
},
- "names": {
- "description": "names specifies a list of AWS subnets by subnet name. Subnet names must not start with \"subnet-\", must not include commas, must be under 256 characters in length, must be unique, and the total number of subnets specified by ids and names must not exceed 10.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "tlsSecurityProfile": {
+ "description": "tlsSecurityProfile specifies settings for TLS connections for ingresscontrollers.\n\nIf unset, the default is based on the apiservers.config.openshift.io/cluster resource.\n\nNote that when using the Old, Intermediate, and Modern profile types, the effective profile configuration is subject to change between releases. For example, given a specification to use the Intermediate profile deployed on release X.Y.Z, an upgrade to release X.Y.Z+1 may cause a new profile configuration to be applied to the ingress controller, resulting in a rollout.",
+ "$ref": "#/definitions/io.openshift.config.v1.TLSSecurityProfile"
+ },
+ "tuningOptions": {
+ "description": "tuningOptions defines parameters for adjusting the performance of ingress controller pods. All fields are optional and will use their respective defaults if not set. See specific tuningOptions fields for more details.\n\nSetting fields within tuningOptions is generally not recommended. The default values are suitable for most configurations.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerTuningOptions"
+ },
+ "unsupportedConfigOverrides": {
+ "description": "unsupportedConfigOverrides allows specifying unsupported configuration options. Its use is unsupported.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AWSSubnets",
+ "Kind": "IngressControllerSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.AccessLogging": {
- "description": "AccessLogging describes how client requests should be logged.",
+ "io.openshift.operator.v1.IngressControllerStatus": {
+ "description": "IngressControllerStatus defines the observed status of the IngressController.",
"type": "object",
"required": [
- "destination"
+ "availableReplicas",
+ "selector",
+ "domain"
],
"properties": {
- "destination": {
- "description": "destination is where access logs go.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.LoggingDestination"
+ "availableReplicas": {
+ "description": "availableReplicas is number of observed available replicas according to the ingress controller deployment.",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "httpCaptureCookies": {
- "description": "httpCaptureCookies specifies HTTP cookies that should be captured in access logs. If this field is empty, no cookies are captured.",
+ "conditions": {
+ "description": "conditions is a list of conditions and their status.\n\nAvailable means the ingress controller deployment is available and servicing route and ingress resources (i.e, .status.availableReplicas equals .spec.replicas)\n\nThere are additional conditions which indicate the status of other ingress controller features and capabilities.\n\n * LoadBalancerManaged\n - True if the following conditions are met:\n * The endpoint publishing strategy requires a service load balancer.\n - False if any of those conditions are unsatisfied.\n\n * LoadBalancerReady\n - True if the following conditions are met:\n * A load balancer is managed.\n * The load balancer is ready.\n - False if any of those conditions are unsatisfied.\n\n * DNSManaged\n - True if the following conditions are met:\n * The endpoint publishing strategy and platform support DNS.\n * The ingress controller domain is set.\n * dns.config.openshift.io/cluster configures DNS zones.\n - False if any of those conditions are unsatisfied.\n\n * DNSReady\n - True if the following conditions are met:\n * DNS is managed.\n * DNS records have been successfully created.\n - False if any of those conditions are unsatisfied.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerCaptureHTTPCookie"
+ "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
},
- "x-kubernetes-list-type": "atomic"
- },
- "httpCaptureHeaders": {
- "description": "httpCaptureHeaders defines HTTP headers that should be captured in access logs. If this field is empty, no headers are captured.\n\nNote that this option only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). Headers cannot be captured for TLS passthrough connections.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerCaptureHTTPHeaders"
- },
- "httpLogFormat": {
- "description": "httpLogFormat specifies the format of the log message for an HTTP request.\n\nIf this field is empty, log messages use the implementation's default HTTP log format. For HAProxy's default HTTP log format, see the HAProxy documentation: http://cbonte.github.io/haproxy-dconv/2.0/configuration.html#8.2.3\n\nNote that this format only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). It does not affect the log format for TLS passthrough connections.",
- "type": "string"
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "logEmptyRequests": {
- "description": "logEmptyRequests specifies how connections on which no request is received should be logged. Typically, these empty requests come from load balancers' health probes or Web browsers' speculative connections (\"preconnect\"), in which case logging these requests may be undesirable. However, these requests may also be caused by network errors, in which case logging empty requests may be useful for diagnosing the errors. In addition, these requests may be caused by port scans, in which case logging empty requests may aid in detecting intrusion attempts. Allowed values for this field are \"Log\" and \"Ignore\". The default value is \"Log\".",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "AccessLogging",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.AddPage": {
- "description": "AddPage allows customizing actions on the Add page in developer perspective.",
- "type": "object",
- "properties": {
- "disabledActions": {
- "description": "disabledActions is a list of actions that are not shown to users. Each action in the list is represented by its ID.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "AddPage",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.AdditionalNetworkDefinition": {
- "description": "AdditionalNetworkDefinition configures an extra network that is available but not created by default. Instead, pods must request them by name. type must be specified, along with exactly one \"Config\" that matches the type.",
- "type": "object",
- "required": [
- "type",
- "name"
- ],
- "properties": {
- "name": {
- "description": "name is the name of the network. This will be populated in the resulting CRD This must be unique.",
+ "domain": {
+ "description": "domain is the actual domain in use.",
"type": "string",
"default": ""
},
- "namespace": {
- "description": "namespace is the namespace of the network. This will be populated in the resulting CRD If not given the network will be created in the default namespace.",
- "type": "string"
+ "endpointPublishingStrategy": {
+ "description": "endpointPublishingStrategy is the actual strategy in use.",
+ "$ref": "#/definitions/io.openshift.operator.v1.EndpointPublishingStrategy"
},
- "rawCNIConfig": {
- "description": "rawCNIConfig is the raw CNI configuration json to create in the NetworkAttachmentDefinition CRD",
- "type": "string"
+ "namespaceSelector": {
+ "description": "namespaceSelector is the actual namespaceSelector in use.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
},
- "simpleMacvlanConfig": {
- "description": "SimpleMacvlanConfig configures the macvlan interface in case of type:NetworkTypeSimpleMacvlan",
- "$ref": "#/definitions/io.openshift.operator.v1.SimpleMacvlanConfig"
+ "observedGeneration": {
+ "description": "observedGeneration is the most recent generation observed.",
+ "type": "integer",
+ "format": "int64"
},
- "type": {
- "description": "type is the type of network The supported values are NetworkTypeRaw, NetworkTypeSimpleMacvlan",
+ "routeSelector": {
+ "description": "routeSelector is the actual routeSelector in use.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ },
+ "selector": {
+ "description": "selector is a label selector, in string format, for ingress controller pods corresponding to the IngressController. The number of matching pods should equal the value of availableReplicas.",
"type": "string",
"default": ""
+ },
+ "tlsProfile": {
+ "description": "tlsProfile is the TLS connection configuration that is in effect.",
+ "$ref": "#/definitions/io.openshift.config.v1.TLSProfileSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AdditionalNetworkDefinition",
+ "Kind": "IngressControllerStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.AdditionalRoutingCapabilities": {
- "description": "AdditionalRoutingCapabilities describes components and relevant configuration providing advanced routing capabilities.",
+ "io.openshift.operator.v1.IngressControllerTuningOptions": {
+ "description": "IngressControllerTuningOptions specifies options for tuning the performance of ingress controller pods",
"type": "object",
- "required": [
- "providers"
- ],
"properties": {
- "providers": {
- "description": "providers is a set of enabled components that provide additional routing capabilities. Entries on this list must be unique. The only valid value is currrently \"FRR\" which provides FRR routing capabilities through the deployment of FRR.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "clientFinTimeout": {
+ "description": "clientFinTimeout defines how long a connection will be held open while waiting for the client response to the server/backend closing the connection.\n\nIf unset, the default timeout is 1s",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "clientTimeout": {
+ "description": "clientTimeout defines how long a connection will be held open while waiting for a client response.\n\nIf unset, the default timeout is 30s",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "connectTimeout": {
+ "description": "ConnectTimeout defines the maximum time to wait for a connection attempt to a server/backend to succeed.\n\nThis field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\" U+00B5 or \"μs\" U+03BC), \"ms\", \"s\", \"m\", \"h\".\n\nWhen omitted, this means the user has no opinion and the platform is left to choose a reasonable default. This default is subject to change over time. The current default is 5s.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "headerBufferBytes": {
+ "description": "headerBufferBytes describes how much memory should be reserved (in bytes) for IngressController connection sessions. Note that this value must be at least 16384 if HTTP/2 is enabled for the IngressController (https://tools.ietf.org/html/rfc7540). If this field is empty, the IngressController will use a default value of 32768 bytes.\n\nSetting this field is generally not recommended as headerBufferBytes values that are too small may break the IngressController and headerBufferBytes values that are too large could cause the IngressController to use significantly more memory than necessary.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "headerBufferMaxRewriteBytes": {
+ "description": "headerBufferMaxRewriteBytes describes how much memory should be reserved (in bytes) from headerBufferBytes for HTTP header rewriting and appending for IngressController connection sessions. Note that incoming HTTP requests will be limited to (headerBufferBytes - headerBufferMaxRewriteBytes) bytes, meaning headerBufferBytes must be greater than headerBufferMaxRewriteBytes. If this field is empty, the IngressController will use a default value of 8192 bytes.\n\nSetting this field is generally not recommended as headerBufferMaxRewriteBytes values that are too small may break the IngressController and headerBufferMaxRewriteBytes values that are too large could cause the IngressController to use significantly more memory than necessary.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "healthCheckInterval": {
+ "description": "healthCheckInterval defines how long the router waits between two consecutive health checks on its configured backends. This value is applied globally as a default for all routes, but may be overridden per-route by the route annotation \"router.openshift.io/haproxy.health.check.interval\".\n\nExpects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, eg \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\" U+00B5 or \"μs\" U+03BC), \"ms\", \"s\", \"m\", \"h\".\n\nSetting this to less than 5s can cause excess traffic due to too frequent TCP health checks and accompanying SYN packet storms. Alternatively, setting this too high can result in increased latency, due to backend servers that are no longer available, but haven't yet been detected as such.\n\nAn empty or zero healthCheckInterval means no opinion and IngressController chooses a default, which is subject to change over time. Currently the default healthCheckInterval value is 5s.\n\nCurrently the minimum allowed value is 1s and the maximum allowed value is 2147483647ms (24.85 days). Both are subject to change over time.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "maxConnections": {
+ "description": "maxConnections defines the maximum number of simultaneous connections that can be established per HAProxy process. Increasing this value allows each ingress controller pod to handle more connections but at the cost of additional system resources being consumed.\n\nPermitted values are: empty, 0, -1, and the range 2000-2000000.\n\nIf this field is empty or 0, the IngressController will use the default value of 50000, but the default is subject to change in future releases.\n\nIf the value is -1 then HAProxy will dynamically compute a maximum value based on the available ulimits in the running container. Selecting -1 (i.e., auto) will result in a large value being computed (~520000 on OpenShift \u003e=4.10 clusters) and therefore each HAProxy process will incur significant memory usage compared to the current default of 50000.\n\nSetting a value that is greater than the current operating system limit will prevent the HAProxy process from starting.\n\nIf you choose a discrete value (e.g., 750000) and the router pod is migrated to a new node, there's no guarantee that that new node has identical ulimits configured. In such a scenario the pod would fail to start. If you have nodes with different ulimits configured (e.g., different tuned profiles) and you choose a discrete value then the guidance is to use -1 and let the value be computed dynamically at runtime.\n\nYou can monitor memory usage for router containers with the following metric: 'container_memory_working_set_bytes{container=\"router\",namespace=\"openshift-ingress\"}'.\n\nYou can monitor memory usage of individual HAProxy processes in router containers with the following metric: 'container_memory_working_set_bytes{container=\"router\",namespace=\"openshift-ingress\"}/container_processes{container=\"router\",namespace=\"openshift-ingress\"}'.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "reloadInterval": {
+ "description": "reloadInterval defines the minimum interval at which the router is allowed to reload to accept new changes. Increasing this value can prevent the accumulation of HAProxy processes, depending on the scenario. Increasing this interval can also lessen load imbalance on a backend's servers when using the roundrobin balancing algorithm. Alternatively, decreasing this value may decrease latency since updates to HAProxy's configuration can take effect more quickly.\n\nThe value must be a time duration value; see \u003chttps://pkg.go.dev/time#ParseDuration\u003e. Currently, the minimum value allowed is 1s, and the maximum allowed value is 120s. Minimum and maximum allowed values may change in future versions of OpenShift. Note that if a duration outside of these bounds is provided, the value of reloadInterval will be capped/floored and not rejected (e.g. a duration of over 120s will be capped to 120s; the IngressController will not reject and replace this disallowed value with the default).\n\nA zero value for reloadInterval tells the IngressController to choose the default, which is currently 5s and subject to change without notice.\n\nThis field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\" U+00B5 or \"μs\" U+03BC), \"ms\", \"s\", \"m\", \"h\".\n\nNote: Setting a value significantly larger than the default of 5s can cause latency in observing updates to routes and their endpoints. HAProxy's configuration will be reloaded less frequently, and newly created routes will not be served until the subsequent reload.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "serverFinTimeout": {
+ "description": "serverFinTimeout defines how long a connection will be held open while waiting for the server/backend response to the client closing the connection.\n\nIf unset, the default timeout is 1s",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "serverTimeout": {
+ "description": "serverTimeout defines how long a connection will be held open while waiting for a server/backend response.\n\nIf unset, the default timeout is 30s",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "threadCount": {
+ "description": "threadCount defines the number of threads created per HAProxy process. Creating more threads allows each ingress controller pod to handle more connections, at the cost of more system resources being used. HAProxy currently supports up to 64 threads. If this field is empty, the IngressController will use the default value. The current default is 4 threads, but this may change in future releases.\n\nSetting this field is generally not recommended. Increasing the number of HAProxy threads allows ingress controller pods to utilize more CPU time under load, potentially starving other pods if set too high. Reducing the number of threads may cause the ingress controller to perform poorly.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "tlsInspectDelay": {
+ "description": "tlsInspectDelay defines how long the router can hold data to find a matching route.\n\nSetting this too short can cause the router to fall back to the default certificate for edge-terminated or reencrypt routes even when a better matching certificate could be used.\n\nIf unset, the default inspect delay is 5s",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ },
+ "tunnelTimeout": {
+ "description": "tunnelTimeout defines how long a tunnel connection (including websockets) will be held open while the tunnel is idle.\n\nIf unset, the default timeout is 1h",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AdditionalRoutingCapabilities",
+ "Kind": "IngressControllerTuningOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.Authentication": {
- "description": "Authentication provides information to configure an operator to manage authentication.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.InsightsOperator": {
+ "description": "InsightsOperator holds cluster-wide information about the Insights Operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"spec"
],
"properties": {
@@ -101033,24 +107075,26 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
+ "description": "spec is the specification of the desired behavior of the Insights.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.AuthenticationSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.InsightsOperatorSpec"
},
"status": {
+ "description": "status is the most recently observed status of the Insights operator.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.AuthenticationStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.InsightsOperatorStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "Authentication",
+ "Kind": "InsightsOperator",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.AuthenticationList": {
- "description": "AuthenticationList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.InsightsOperatorList": {
+ "description": "InsightsOperatorList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -101065,7 +107109,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.Authentication"
+ "$ref": "#/definitions/io.openshift.operator.v1.InsightsOperator"
}
},
"kind": {
@@ -101082,11 +107126,11 @@
"Type": "list",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AuthenticationList",
+ "Kind": "InsightsOperatorList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.AuthenticationSpec": {
+ "io.openshift.operator.v1.InsightsOperatorSpec": {
"type": "object",
"required": [
"managementState"
@@ -101118,11 +107162,11 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AuthenticationSpec",
+ "Kind": "InsightsOperatorSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.AuthenticationStatus": {
+ "io.openshift.operator.v1.InsightsOperatorStatus": {
"type": "object",
"required": [
"readyReplicas"
@@ -101140,6 +107184,11 @@
],
"x-kubernetes-list-type": "map"
},
+ "gatherStatus": {
+ "description": "gatherStatus provides basic information about the last Insights data gathering. When omitted, this means no data gathering has taken place yet.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.GatherStatus"
+ },
"generations": {
"description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
"type": "array",
@@ -101155,16 +107204,16 @@
],
"x-kubernetes-list-type": "map"
},
+ "insightsReport": {
+ "description": "insightsReport provides general Insights analysis results. When omitted, this means no data gathering has taken place yet.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.InsightsReport"
+ },
"latestAvailableRevision": {
"description": "latestAvailableRevision is the deploymentID of the most recent deployment",
"type": "integer",
"format": "int32"
},
- "oauthAPIServer": {
- "description": "OAuthAPIServer holds status specific only to oauth-apiserver",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OAuthAPIServerStatus"
- },
"observedGeneration": {
"description": "observedGeneration is the last generation change you've dealt with",
"type": "integer",
@@ -101185,117 +107234,41 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AuthenticationStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.AzureCSIDriverConfigSpec": {
- "description": "AzureCSIDriverConfigSpec defines properties that can be configured for the Azure CSI driver.",
- "type": "object",
- "properties": {
- "diskEncryptionSet": {
- "description": "diskEncryptionSet sets the cluster default storage class to encrypt volumes with a customer-managed encryption set, rather than the default platform-managed keys.",
- "$ref": "#/definitions/io.openshift.operator.v1.AzureDiskEncryptionSet"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "AzureCSIDriverConfigSpec",
+ "Kind": "InsightsOperatorStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.AzureDiskEncryptionSet": {
- "description": "AzureDiskEncryptionSet defines the configuration for a disk encryption set.",
+ "io.openshift.operator.v1.InsightsReport": {
+ "description": "insightsReport provides Insights health check report based on the most recently sent Insights data.",
"type": "object",
- "required": [
- "subscriptionID",
- "resourceGroup",
- "name"
- ],
"properties": {
- "name": {
- "description": "name is the name of the disk encryption set that will be set on the default storage class. The value should consist of only alphanumberic characters, underscores (_), hyphens, and be at most 80 characters in length.",
- "type": "string",
- "default": ""
- },
- "resourceGroup": {
- "description": "resourceGroup defines the Azure resource group that contains the disk encryption set. The value should consist of only alphanumberic characters, underscores (_), parentheses, hyphens and periods. The value should not end in a period and be at most 90 characters in length.",
- "type": "string",
- "default": ""
+ "downloadedAt": {
+ "description": "downloadedAt is the time when the last Insights report was downloaded. An empty value means that there has not been any Insights report downloaded yet and it usually appears in disconnected clusters (or clusters when the Insights data gathering is disabled).",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "subscriptionID": {
- "description": "subscriptionID defines the Azure subscription that contains the disk encryption set. The value should meet the following conditions: 1. It should be a 128-bit number. 2. It should be 36 characters (32 hexadecimal characters and 4 hyphens) long. 3. It should be displayed in five groups separated by hyphens (-). 4. The first group should be 8 characters long. 5. The second, third, and fourth groups should be 4 characters long. 6. The fifth group should be 12 characters long. An Example SubscrionID: f2007bbf-f802-4a47-9336-cf7c6b89b378",
- "type": "string",
- "default": ""
+ "healthChecks": {
+ "description": "healthChecks provides basic information about active Insights health checks in a cluster.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.HealthCheck"
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "AzureDiskEncryptionSet",
+ "Kind": "InsightsReport",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.CSIDriverConfigSpec": {
- "description": "CSIDriverConfigSpec defines configuration spec that can be used to optionally configure a specific CSI Driver.",
- "type": "object",
- "required": [
- "driverType"
- ],
- "properties": {
- "aws": {
- "description": "aws is used to configure the AWS CSI driver.",
- "$ref": "#/definitions/io.openshift.operator.v1.AWSCSIDriverConfigSpec"
- },
- "azure": {
- "description": "azure is used to configure the Azure CSI driver.",
- "$ref": "#/definitions/io.openshift.operator.v1.AzureCSIDriverConfigSpec"
- },
- "driverType": {
- "description": "driverType indicates type of CSI driver for which the driverConfig is being applied to. Valid values are: AWS, Azure, GCP, IBMCloud, vSphere and omitted. Consumers should treat unknown values as a NO-OP.",
- "type": "string",
- "default": ""
- },
- "gcp": {
- "description": "gcp is used to configure the GCP CSI driver.",
- "$ref": "#/definitions/io.openshift.operator.v1.GCPCSIDriverConfigSpec"
- },
- "ibmcloud": {
- "description": "ibmcloud is used to configure the IBM Cloud CSI driver.",
- "$ref": "#/definitions/io.openshift.operator.v1.IBMCloudCSIDriverConfigSpec"
- },
- "vSphere": {
- "description": "vsphere is used to configure the vsphere CSI driver.",
- "$ref": "#/definitions/io.openshift.operator.v1.VSphereCSIDriverConfigSpec"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "CSIDriverConfigSpec",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "driverType",
- "fields-to-discriminateBy": {
- "aws": "AWS",
- "azure": "Azure",
- "gcp": "GCP",
- "ibmcloud": "IBMCloud",
- "vSphere": "VSphere"
- }
- }
- ]
- },
- "io.openshift.operator.v1.CSISnapshotController": {
- "description": "CSISnapshotController provides a means to configure an operator to manage the CSI snapshots. `cluster` is the canonical name.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.KubeAPIServer": {
+ "description": "KubeAPIServer provides information to configure an operator to manage kube-apiserver.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"spec"
],
"properties": {
@@ -101313,28 +107286,29 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec holds user settable values for configuration",
+ "description": "spec is the specification of the desired behavior of the Kubernetes API Server",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.CSISnapshotControllerSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.KubeAPIServerSpec"
},
"status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
+ "description": "status is the most recently observed status of the Kubernetes API Server",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.CSISnapshotControllerStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.KubeAPIServerStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "CSISnapshotController",
+ "Kind": "KubeAPIServer",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.CSISnapshotControllerList": {
- "description": "CSISnapshotControllerList contains a list of CSISnapshotControllers.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.KubeAPIServerList": {
+ "description": "KubeAPIServerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -101343,10 +107317,11 @@
"type": "string"
},
"items": {
+ "description": "Items contains the items",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.CSISnapshotController"
+ "$ref": "#/definitions/io.openshift.operator.v1.KubeAPIServer"
}
},
"kind": {
@@ -101363,17 +107338,27 @@
"Type": "list",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "CSISnapshotControllerList",
+ "Kind": "KubeAPIServerList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.CSISnapshotControllerSpec": {
- "description": "CSISnapshotControllerSpec is the specification of the desired behavior of the CSISnapshotController operator.",
+ "io.openshift.operator.v1.KubeAPIServerSpec": {
"type": "object",
"required": [
- "managementState"
+ "managementState",
+ "forceRedeploymentReason"
],
"properties": {
+ "failedRevisionLimit": {
+ "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
+ "type": "integer",
+ "format": "int32"
+ },
+ "forceRedeploymentReason": {
+ "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.",
+ "type": "string",
+ "default": ""
+ },
"logLevel": {
"description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
@@ -101391,6 +107376,11 @@
"description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
+ "succeededRevisionLimit": {
+ "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
+ "type": "integer",
+ "format": "int32"
+ },
"unsupportedConfigOverrides": {
"description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
@@ -101400,12 +107390,11 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "CSISnapshotControllerSpec",
+ "Kind": "KubeAPIServerSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.CSISnapshotControllerStatus": {
- "description": "CSISnapshotControllerStatus defines the observed status of the CSISnapshotController operator.",
+ "io.openshift.operator.v1.KubeAPIServerStatus": {
"type": "object",
"required": [
"readyReplicas"
@@ -101432,135 +107421,70 @@
},
"x-kubernetes-list-map-keys": [
"group",
- "resource",
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "latestAvailableRevision": {
- "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
- "type": "integer",
- "format": "int32"
- },
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
- },
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "version": {
- "description": "version is the level this availability applies to",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "CSISnapshotControllerStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.Capability": {
- "description": "Capabilities contains set of UI capabilities and their state in the console UI.",
- "type": "object",
- "required": [
- "name",
- "visibility"
- ],
- "properties": {
- "name": {
- "description": "name is the unique name of a capability. Available capabilities are LightspeedButton and GettingStartedBanner.",
- "type": "string",
- "default": ""
- },
- "visibility": {
- "description": "visibility defines the visibility state of the capability.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.CapabilityVisibility"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "Capability",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.CapabilityVisibility": {
- "description": "CapabilityVisibility defines the criteria to enable/disable a capability.",
- "type": "object",
- "required": [
- "state"
- ],
- "properties": {
- "state": {
- "description": "state defines if the capability is enabled or disabled in the console UI. Enabling the capability in the console UI is represented by the \"Enabled\" value. Disabling the capability in the console UI is represented by the \"Disabled\" value.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "CapabilityVisibility",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "state",
- "fields-to-discriminateBy": {}
- }
- ]
- },
- "io.openshift.operator.v1.ClientTLS": {
- "description": "ClientTLS specifies TLS configuration to enable client-to-server authentication, which can be used for mutual TLS.",
- "type": "object",
- "required": [
- "clientCertificatePolicy",
- "clientCA"
- ],
- "properties": {
- "allowedSubjectPatterns": {
- "description": "allowedSubjectPatterns specifies a list of regular expressions that should be matched against the distinguished name on a valid client certificate to filter requests. The regular expressions must use PCRE syntax. If this list is empty, no filtering is performed. If the list is nonempty, then at least one pattern must match a client certificate's distinguished name or else the ingress controller rejects the certificate and denies the connection.",
+ "resource",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "latestAvailableRevision": {
+ "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "type": "integer",
+ "format": "int32"
+ },
+ "latestAvailableRevisionReason": {
+ "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment",
+ "type": "string"
+ },
+ "nodeStatuses": {
+ "description": "nodeStatuses track the deployment values and errors across individual nodes",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeStatus"
},
- "x-kubernetes-list-type": "atomic"
+ "x-kubernetes-list-map-keys": [
+ "nodeName"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "clientCA": {
- "description": "clientCA specifies a configmap containing the PEM-encoded CA certificate bundle that should be used to verify a client's certificate. The administrator must create this configmap in the openshift-config namespace.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
+ "type": "integer",
+ "format": "int64"
},
- "clientCertificatePolicy": {
- "description": "clientCertificatePolicy specifies whether the ingress controller requires clients to provide certificates. This field accepts the values \"Required\" or \"Optional\".\n\nNote that the ingress controller only checks client certificates for edge-terminated and reencrypt TLS routes; it cannot check certificates for cleartext HTTP or passthrough TLS routes.",
- "type": "string",
- "default": ""
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "serviceAccountIssuers": {
+ "description": "serviceAccountIssuers tracks history of used service account issuers. The item without expiration time represents the currently used service account issuer. The other items represents service account issuers that were used previously and are still being trusted. The default expiration for the items is set by the platform and it defaults to 24h. see: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.ServiceAccountIssuerStatus"
+ }
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ClientTLS",
+ "Kind": "KubeAPIServerStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.CloudCredential": {
- "description": "CloudCredential provides a means to configure an operator to manage CredentialsRequests.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.KubeControllerManager": {
+ "description": "KubeControllerManager provides information to configure an operator to manage kube-controller-manager.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"spec"
],
"properties": {
@@ -101578,24 +107502,26 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
+ "description": "spec is the specification of the desired behavior of the Kubernetes Controller Manager",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.CloudCredentialSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.KubeControllerManagerSpec"
},
"status": {
+ "description": "status is the most recently observed status of the Kubernetes Controller Manager",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.CloudCredentialStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.KubeControllerManagerStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "CloudCredential",
+ "Kind": "KubeControllerManager",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.CloudCredentialList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.KubeControllerManagerList": {
+ "description": "KubeControllerManagerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -101607,10 +107533,11 @@
"type": "string"
},
"items": {
+ "description": "Items contains the items",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.CloudCredential"
+ "$ref": "#/definitions/io.openshift.operator.v1.KubeControllerManager"
}
},
"kind": {
@@ -101627,20 +107554,27 @@
"Type": "list",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "CloudCredentialList",
+ "Kind": "KubeControllerManagerList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.CloudCredentialSpec": {
- "description": "CloudCredentialSpec is the specification of the desired behavior of the cloud-credential-operator.",
+ "io.openshift.operator.v1.KubeControllerManagerSpec": {
"type": "object",
"required": [
- "managementState"
+ "managementState",
+ "forceRedeploymentReason",
+ "useMoreSecureServiceCA"
],
"properties": {
- "credentialsMode": {
- "description": "CredentialsMode allows informing CCO that it should not attempt to dynamically determine the root cloud credentials capabilities, and it should just run in the specified mode. It also allows putting the operator into \"manual\" mode if desired. Leaving the field in default mode runs CCO so that the cluster's cloud credentials will be dynamically probed for capabilities (on supported clouds/platforms). Supported modes:\n AWS/Azure/GCP: \"\" (Default), \"Mint\", \"Passthrough\", \"Manual\"\n Others: Do not set value as other platforms only support running in \"Passthrough\"",
- "type": "string"
+ "failedRevisionLimit": {
+ "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
+ "type": "integer",
+ "format": "int32"
+ },
+ "forceRedeploymentReason": {
+ "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.",
+ "type": "string",
+ "default": ""
},
"logLevel": {
"description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
@@ -101659,21 +107593,30 @@
"description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
+ "succeededRevisionLimit": {
+ "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
+ "type": "integer",
+ "format": "int32"
+ },
"unsupportedConfigOverrides": {
"description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "useMoreSecureServiceCA": {
+ "description": "useMoreSecureServiceCA indicates that the service-ca.crt provided in SA token volumes should include only enough certificates to validate service serving certificates. Once set to true, it cannot be set to false. Even if someone finds a way to set it back to false, the service-ca.crt files that previously existed will only have the more secure content.",
+ "type": "boolean",
+ "default": false
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "CloudCredentialSpec",
+ "Kind": "KubeControllerManagerSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.CloudCredentialStatus": {
- "description": "CloudCredentialStatus defines the observed status of the cloud-credential-operator.",
+ "io.openshift.operator.v1.KubeControllerManagerStatus": {
"type": "object",
"required": [
"readyReplicas"
@@ -101711,6 +107654,22 @@
"type": "integer",
"format": "int32"
},
+ "latestAvailableRevisionReason": {
+ "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment",
+ "type": "string"
+ },
+ "nodeStatuses": {
+ "description": "nodeStatuses track the deployment values and errors across individual nodes",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "nodeName"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
"observedGeneration": {
"description": "observedGeneration is the last generation change you've dealt with",
"type": "integer",
@@ -101731,14 +107690,15 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "CloudCredentialStatus",
+ "Kind": "KubeControllerManagerStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ClusterCSIDriver": {
- "description": "ClusterCSIDriver object allows management and configuration of a CSI driver operator installed by default in OpenShift. Name of the object must be name of the CSI driver it operates. See CSIDriverName type for list of allowed values.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.KubeScheduler": {
+ "description": "KubeScheduler provides information to configure an operator to manage scheduler.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"spec"
],
"properties": {
@@ -101756,28 +107716,29 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec holds user settable values for configuration",
+ "description": "spec is the specification of the desired behavior of the Kubernetes Scheduler",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ClusterCSIDriverSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.KubeSchedulerSpec"
},
"status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
+ "description": "status is the most recently observed status of the Kubernetes Scheduler",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ClusterCSIDriverStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.KubeSchedulerStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ClusterCSIDriver",
+ "Kind": "KubeScheduler",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.ClusterCSIDriverList": {
- "description": "ClusterCSIDriverList contains a list of ClusterCSIDriver\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.KubeSchedulerList": {
+ "description": "KubeSchedulerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -101786,10 +107747,11 @@
"type": "string"
},
"items": {
+ "description": "Items contains the items",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ClusterCSIDriver"
+ "$ref": "#/definitions/io.openshift.operator.v1.KubeScheduler"
}
},
"kind": {
@@ -101806,21 +107768,26 @@
"Type": "list",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ClusterCSIDriverList",
+ "Kind": "KubeSchedulerList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ClusterCSIDriverSpec": {
- "description": "ClusterCSIDriverSpec is the desired behavior of CSI driver operator",
+ "io.openshift.operator.v1.KubeSchedulerSpec": {
"type": "object",
"required": [
- "managementState"
+ "managementState",
+ "forceRedeploymentReason"
],
"properties": {
- "driverConfig": {
- "description": "driverConfig can be used to specify platform specific driver configuration. When omitted, this means no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.CSIDriverConfigSpec"
+ "failedRevisionLimit": {
+ "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
+ "type": "integer",
+ "format": "int32"
+ },
+ "forceRedeploymentReason": {
+ "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.",
+ "type": "string",
+ "default": ""
},
"logLevel": {
"description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
@@ -101839,9 +107806,10 @@
"description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "storageClassState": {
- "description": "StorageClassState determines if CSI operator should create and manage storage classes. If this field value is empty or Managed - CSI operator will continuously reconcile storage class and create if necessary. If this field value is Unmanaged - CSI operator will not reconcile any previously created storage class. If this field value is Removed - CSI operator will delete the storage class it created previously. When omitted, this means the user has no opinion and the platform chooses a reasonable default, which is subject to change over time. The current default behaviour is Managed.",
- "type": "string"
+ "succeededRevisionLimit": {
+ "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
+ "type": "integer",
+ "format": "int32"
},
"unsupportedConfigOverrides": {
"description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
@@ -101852,12 +107820,11 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ClusterCSIDriverSpec",
+ "Kind": "KubeSchedulerSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ClusterCSIDriverStatus": {
- "description": "ClusterCSIDriverStatus is the observed status of CSI driver operator",
+ "io.openshift.operator.v1.KubeSchedulerStatus": {
"type": "object",
"required": [
"readyReplicas"
@@ -101895,6 +107862,22 @@
"type": "integer",
"format": "int32"
},
+ "latestAvailableRevisionReason": {
+ "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment",
+ "type": "string"
+ },
+ "nodeStatuses": {
+ "description": "nodeStatuses track the deployment values and errors across individual nodes",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "nodeName"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
"observedGeneration": {
"description": "observedGeneration is the last generation change you've dealt with",
"type": "integer",
@@ -101915,36 +107898,12 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ClusterCSIDriverStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.ClusterNetworkEntry": {
- "description": "ClusterNetworkEntry is a subnet from which to allocate PodIPs. A network of size HostPrefix (in CIDR notation) will be allocated when nodes join the cluster. If the HostPrefix field is not used by the plugin, it can be left unset. Not all network providers support multiple ClusterNetworks",
- "type": "object",
- "required": [
- "cidr"
- ],
- "properties": {
- "cidr": {
- "type": "string",
- "default": ""
- },
- "hostPrefix": {
- "type": "integer",
- "format": "int64"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "ClusterNetworkEntry",
+ "Kind": "KubeSchedulerStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.Config": {
- "description": "Config specifies the behavior of the config operator which is responsible for creating the initial configuration of other components on the cluster. The operator also handles installation, migration or synchronization of cloud configurations for AWS and Azure cloud based clusters\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.KubeStorageVersionMigrator": {
+ "description": "KubeStorageVersionMigrator provides information to configure an operator to manage kube-storage-version-migrator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -101965,26 +107924,24 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec is the specification of the desired behavior of the Config Operator.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ConfigSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.KubeStorageVersionMigratorSpec"
},
"status": {
- "description": "status defines the observed status of the Config Operator.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ConfigStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.KubeStorageVersionMigratorStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "Config",
+ "Kind": "KubeStorageVersionMigrator",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.ConfigList": {
- "description": "ConfigList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.KubeStorageVersionMigratorList": {
+ "description": "KubeStorageVersionMigratorList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -102000,7 +107957,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.Config"
+ "$ref": "#/definitions/io.openshift.operator.v1.KubeStorageVersionMigrator"
}
},
"kind": {
@@ -102017,11 +107974,11 @@
"Type": "list",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ConfigList",
+ "Kind": "KubeStorageVersionMigratorList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ConfigSpec": {
+ "io.openshift.operator.v1.KubeStorageVersionMigratorSpec": {
"type": "object",
"required": [
"managementState"
@@ -102053,11 +108010,11 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ConfigSpec",
+ "Kind": "KubeStorageVersionMigratorSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ConfigStatus": {
+ "io.openshift.operator.v1.KubeStorageVersionMigratorStatus": {
"type": "object",
"required": [
"readyReplicas"
@@ -102115,351 +108072,141 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ConfigStatus",
+ "Kind": "KubeStorageVersionMigratorStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.Console": {
- "description": "Console provides a means to configure an operator to manage the console.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "required": [
- "spec"
- ],
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ConsoleSpec"
- },
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ConsoleStatus"
- }
- },
- "x-fabric8-info": {
- "Type": "object",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "Console",
- "Scope": "Clustered"
- }
- },
- "io.openshift.operator.v1.ConsoleConfigRoute": {
- "description": "ConsoleConfigRoute holds information on external route access to console. DEPRECATED",
+ "io.openshift.operator.v1.LoadBalancerStrategy": {
+ "description": "LoadBalancerStrategy holds parameters for a load balancer.",
"type": "object",
"required": [
- "hostname"
+ "scope"
],
"properties": {
- "hostname": {
- "description": "hostname is the desired custom domain under which console will be available.",
- "type": "string",
- "default": ""
- },
- "secret": {
- "description": "secret points to secret in the openshift-config namespace that contains custom certificate and key and needs to be created manually by the cluster admin. Referenced Secret is required to contain following key value pairs: - \"tls.crt\" - to specifies custom certificate - \"tls.key\" - to specifies private key of the custom certificate If the custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleConfigRoute",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.ConsoleCustomization": {
- "description": "ConsoleCustomization defines a list of optional configuration for the console UI.",
- "type": "object",
- "properties": {
- "addPage": {
- "description": "addPage allows customizing actions on the Add page in developer perspective.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.AddPage"
- },
- "brand": {
- "description": "brand is the default branding of the web console which can be overridden by providing the brand field. There is a limited set of specific brand options. This field controls elements of the console such as the logo. Invalid value will prevent a console rollout.",
- "type": "string"
- },
- "capabilities": {
- "description": "capabilities defines an array of capabilities that can be interacted with in the console UI. Each capability defines a visual state that can be interacted with the console to render in the UI. Available capabilities are LightspeedButton and GettingStartedBanner. Each of the available capabilities may appear only once in the list.",
+ "allowedSourceRanges": {
+ "description": "allowedSourceRanges specifies an allowlist of IP address ranges to which access to the load balancer should be restricted. Each range must be specified using CIDR notation (e.g. \"10.0.0.0/8\" or \"fd00::/8\"). If no range is specified, \"0.0.0.0/0\" for IPv4 and \"::/0\" for IPv6 are used by default, which allows all source addresses.\n\nTo facilitate migration from earlier versions of OpenShift that did not have the allowedSourceRanges field, you may set the service.beta.kubernetes.io/load-balancer-source-ranges annotation on the \"router-\u003cingresscontroller name\u003e\" service in the \"openshift-ingress\" namespace, and this annotation will take effect if allowedSourceRanges is empty on OpenShift 4.12.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.Capability"
+ "type": "string",
+ "default": ""
},
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "customLogoFile": {
- "description": "customLogoFile replaces the default OpenShift logo in the masthead and about dialog. It is a reference to a ConfigMap in the openshift-config namespace. This can be created with a command like 'oc create configmap custom-logo --from-file=/path/to/file -n openshift-config'. Image size must be less than 1 MB due to constraints on the ConfigMap size. The ConfigMap key should include a file extension so that the console serves the file with the correct MIME type. Recommended logo specifications: Dimensions: Max height of 68px and max width of 200px SVG format preferred",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapFileReference"
- },
- "customProductName": {
- "description": "customProductName is the name that will be displayed in page titles, logo alt text, and the about dialog instead of the normal OpenShift product name.",
- "type": "string"
- },
- "developerCatalog": {
- "description": "developerCatalog allows to configure the shown developer catalog categories (filters) and types (sub-catalogs).",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.DeveloperConsoleCatalogCustomization"
- },
- "documentationBaseURL": {
- "description": "documentationBaseURL links to external documentation are shown in various sections of the web console. Providing documentationBaseURL will override the default documentation URL. Invalid value will prevent a console rollout.",
- "type": "string"
+ "x-kubernetes-list-type": "atomic"
},
- "perspectives": {
- "description": "perspectives allows enabling/disabling of perspective(s) that user can see in the Perspective switcher dropdown.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.Perspective"
- },
- "x-kubernetes-list-map-keys": [
- "id"
- ],
- "x-kubernetes-list-type": "map"
+ "dnsManagementPolicy": {
+ "description": "dnsManagementPolicy indicates if the lifecycle of the wildcard DNS record associated with the load balancer service will be managed by the ingress operator. It defaults to Managed. Valid values are: Managed and Unmanaged.",
+ "type": "string",
+ "default": "Managed"
},
- "projectAccess": {
- "description": "projectAccess allows customizing the available list of ClusterRoles in the Developer perspective Project access page which can be used by a project admin to specify roles to other users and restrict access within the project. If set, the list will replace the default ClusterRole options.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ProjectAccess"
+ "providerParameters": {
+ "description": "providerParameters holds desired load balancer information specific to the underlying infrastructure provider.\n\nIf empty, defaults will be applied. See specific providerParameters fields for details about their defaults.",
+ "$ref": "#/definitions/io.openshift.operator.v1.ProviderLoadBalancerParameters"
},
- "quickStarts": {
- "description": "quickStarts allows customization of available ConsoleQuickStart resources in console.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.QuickStarts"
+ "scope": {
+ "description": "scope indicates the scope at which the load balancer is exposed. Possible values are \"External\" and \"Internal\".",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ConsoleCustomization",
+ "Kind": "LoadBalancerStrategy",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ConsoleList": {
- "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.LoggingDestination": {
+ "description": "LoggingDestination describes a destination for log messages.",
"type": "object",
"required": [
- "metadata",
- "items"
+ "type"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.Console"
- }
+ "container": {
+ "description": "container holds parameters for the Container logging destination. Present only if type is Container.",
+ "$ref": "#/definitions/io.openshift.operator.v1.ContainerLoggingDestinationParameters"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "syslog": {
+ "description": "syslog holds parameters for a syslog endpoint. Present only if type is Syslog.",
+ "$ref": "#/definitions/io.openshift.operator.v1.SyslogLoggingDestinationParameters"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
- }
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.ConsoleProviders": {
- "description": "ConsoleProviders defines a list of optional additional providers of functionality to the console.",
- "type": "object",
- "properties": {
- "statuspage": {
- "description": "statuspage contains ID for statuspage.io page that provides status info about.",
- "$ref": "#/definitions/io.openshift.operator.v1.StatuspageProvider"
+ "type": {
+ "description": "type is the type of destination for logs. It must be one of the following:\n\n* Container\n\nThe ingress operator configures the sidecar container named \"logs\" on the ingress controller pod and configures the ingress controller to write logs to the sidecar. The logs are then available as container logs. The expectation is that the administrator configures a custom logging solution that reads logs from this sidecar. Note that using container logs means that logs may be dropped if the rate of logs exceeds the container runtime's or the custom logging solution's capacity.\n\n* Syslog\n\nLogs are sent to a syslog endpoint. The administrator must specify an endpoint that can receive syslog messages. The expectation is that the administrator has configured a custom syslog instance.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ConsoleProviders",
+ "Kind": "LoggingDestination",
"Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.ConsoleSpec": {
- "description": "ConsoleSpec is the specification of the desired behavior of the Console.",
- "type": "object",
- "required": [
- "managementState",
- "providers"
- ],
- "properties": {
- "customization": {
- "description": "customization is used to optionally provide a small set of customization options to the web console.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ConsoleCustomization"
- },
- "ingress": {
- "description": "ingress allows to configure the alternative ingress for the console. This field is intended for clusters without ingress capability, where access to routes is not possible.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.Ingress"
- },
- "logLevel": {
- "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "managementState": {
- "description": "managementState indicates whether and how the operator should manage the component",
- "type": "string",
- "default": ""
- },
- "observedConfig": {
- "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "operatorLogLevel": {
- "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "plugins": {
- "description": "plugins defines a list of enabled console plugin names.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "container": "Container",
+ "syslog": "Syslog"
}
+ }
+ ]
+ },
+ "io.openshift.operator.v1.MTUMigration": {
+ "description": "MTUMigration contains infomation about MTU migration.",
+ "type": "object",
+ "properties": {
+ "machine": {
+ "description": "machine contains MTU migration configuration for the machine's uplink. Needs to be migrated along with the default network MTU unless the current uplink MTU already accommodates the default network MTU.",
+ "$ref": "#/definitions/io.openshift.operator.v1.MTUMigrationValues"
},
- "providers": {
- "description": "providers contains configuration for using specific service providers.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ConsoleProviders"
- },
- "route": {
- "description": "route contains hostname and secret reference that contains the serving certificate. If a custom route is specified, a new route will be created with the provided hostname, under which console will be available. In case of custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed. In case of custom hostname points to an arbitrary domain, manual DNS configurations steps are necessary. The default console route will be maintained to reserve the default hostname for console if the custom route is removed. If not specified, default route will be used. DEPRECATED",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ConsoleConfigRoute"
- },
- "unsupportedConfigOverrides": {
- "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "network": {
+ "description": "network contains information about MTU migration for the default network. Migrations are only allowed to MTU values lower than the machine's uplink MTU by the minimum appropriate offset.",
+ "$ref": "#/definitions/io.openshift.operator.v1.MTUMigrationValues"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ConsoleSpec",
+ "Kind": "MTUMigration",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ConsoleStatus": {
- "description": "ConsoleStatus defines the observed status of the Console.",
+ "io.openshift.operator.v1.MTUMigrationValues": {
+ "description": "MTUMigrationValues contains the values for a MTU migration.",
"type": "object",
"required": [
- "readyReplicas"
+ "to"
],
"properties": {
- "conditions": {
- "description": "conditions is a list of conditions and their status",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
- },
- "generations": {
- "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
- },
- "x-kubernetes-list-map-keys": [
- "group",
- "resource",
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "latestAvailableRevision": {
- "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
- "type": "integer",
- "format": "int32"
- },
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
+ "from": {
+ "description": "from is the MTU to migrate from.",
"type": "integer",
"format": "int64"
},
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "version": {
- "description": "version is the level this availability applies to",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "ConsoleStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.ContainerLoggingDestinationParameters": {
- "description": "ContainerLoggingDestinationParameters describes parameters for the Container logging destination type.",
- "type": "object",
- "properties": {
- "maxLength": {
- "description": "maxLength is the maximum length of the log message.\n\nValid values are integers in the range 480 to 8192, inclusive.\n\nWhen omitted, the default value is 1024.",
+ "to": {
+ "description": "to is the MTU to migrate to.",
"type": "integer",
- "format": "int32"
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ContainerLoggingDestinationParameters",
+ "Kind": "MTUMigrationValues",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.DNS": {
- "description": "DNS manages the CoreDNS component to provide a name resolution service for pods and services in the cluster.\n\nThis supports the DNS-based service discovery specification: https://github.com/kubernetes/dns/blob/master/docs/specification.md\n\nMore details: https://kubernetes.io/docs/tasks/administer-cluster/coredns\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.MachineConfiguration": {
+ "description": "MachineConfiguration provides information to configure an operator to manage Machine Configuration.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "metadata",
+ "spec"
+ ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -102475,49 +108222,29 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec is the specification of the desired behavior of the DNS.",
+ "description": "spec is the specification of the desired behavior of the Machine Config Operator",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.DNSSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.MachineConfigurationSpec"
},
"status": {
- "description": "status is the most recently observed status of the DNS.",
+ "description": "status is the most recently observed status of the Machine Config Operator",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.DNSStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.MachineConfigurationStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "DNS",
+ "Kind": "MachineConfiguration",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.DNSCache": {
- "description": "DNSCache defines the fields for configuring DNS caching.",
- "type": "object",
- "properties": {
- "negativeTTL": {
- "description": "negativeTTL is optional and specifies the amount of time that a negative response should be cached.\n\nIf configured, it must be a value of 1s (1 second) or greater up to a theoretical maximum of several years. This field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"100s\", \"1m30s\", \"12h30m10s\". Values that are fractions of a second are rounded down to the nearest second. If the configured value is less than 1s, the default value will be used. If not configured, the value will be 0s and OpenShift will use a default value of 30 seconds unless noted otherwise in the respective Corefile for your version of OpenShift. The default value of 30 seconds is subject to change.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "positiveTTL": {
- "description": "positiveTTL is optional and specifies the amount of time that a positive response should be cached.\n\nIf configured, it must be a value of 1s (1 second) or greater up to a theoretical maximum of several years. This field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"100s\", \"1m30s\", \"12h30m10s\". Values that are fractions of a second are rounded down to the nearest second. If the configured value is less than 1s, the default value will be used. If not configured, the value will be 0s and OpenShift will use a default value of 900 seconds unless noted otherwise in the respective Corefile for your version of OpenShift. The default value of 900 seconds is subject to change.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "DNSCache",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.DNSList": {
- "description": "DNSList contains a list of DNS\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.MachineConfigurationList": {
+ "description": "MachineConfigurationList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -102526,10 +108253,11 @@
"type": "string"
},
"items": {
+ "description": "Items contains the items",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.DNS"
+ "$ref": "#/definitions/io.openshift.operator.v1.MachineConfiguration"
}
},
"kind": {
@@ -102546,429 +108274,205 @@
"Type": "list",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "DNSList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.DNSNodePlacement": {
- "description": "DNSNodePlacement describes the node scheduling configuration for DNS pods.",
- "type": "object",
- "properties": {
- "nodeSelector": {
- "description": "nodeSelector is the node selector applied to DNS pods.\n\nIf empty, the default is used, which is currently the following:\n\n kubernetes.io/os: linux\n\nThis default is subject to change.\n\nIf set, the specified selector is used and replaces the default.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "tolerations": {
- "description": "tolerations is a list of tolerations applied to DNS pods.\n\nIf empty, the DNS operator sets a toleration for the \"node-role.kubernetes.io/master\" taint. This default is subject to change. Specifying tolerations without including a toleration for the \"node-role.kubernetes.io/master\" taint may be risky as it could lead to an outage if all worker nodes become unavailable.\n\nNote that the daemon controller adds some tolerations as well. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
- }
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "DNSNodePlacement",
+ "Kind": "MachineConfigurationList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.DNSOverTLSConfig": {
- "description": "DNSOverTLSConfig describes optional DNSTransportConfig fields that should be captured.",
+ "io.openshift.operator.v1.MachineConfigurationSpec": {
"type": "object",
"required": [
- "serverName"
+ "managementState",
+ "forceRedeploymentReason"
],
"properties": {
- "caBundle": {
- "description": "caBundle references a ConfigMap that must contain either a single CA Certificate or a CA Bundle. This allows cluster administrators to provide their own CA or CA bundle for validating the certificate of upstream resolvers.\n\n1. The configmap must contain a `ca-bundle.crt` key. 2. The value must be a PEM encoded CA certificate or CA bundle. 3. The administrator must create this configmap in the openshift-config namespace. 4. The upstream server certificate must contain a Subject Alternative Name (SAN) that matches ServerName.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
+ "failedRevisionLimit": {
+ "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
+ "type": "integer",
+ "format": "int32"
},
- "serverName": {
- "description": "serverName is the upstream server to connect to when forwarding DNS queries. This is required when Transport is set to \"TLS\". ServerName will be validated against the DNS naming conventions in RFC 1123 and should match the TLS certificate installed in the upstream resolver(s).",
+ "forceRedeploymentReason": {
+ "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.",
"type": "string",
"default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "DNSOverTLSConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.DNSSpec": {
- "description": "DNSSpec is the specification of the desired behavior of the DNS.",
- "type": "object",
- "properties": {
- "cache": {
- "description": "cache describes the caching configuration that applies to all server blocks listed in the Corefile. This field allows a cluster admin to optionally configure: * positiveTTL which is a duration for which positive responses should be cached. * negativeTTL which is a duration for which negative responses should be cached. If this is not configured, OpenShift will configure positive and negative caching with a default value that is subject to change. At the time of writing, the default positiveTTL is 900 seconds and the default negativeTTL is 30 seconds or as noted in the respective Corefile for your version of OpenShift.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.DNSCache"
},
"logLevel": {
- "description": "logLevel describes the desired logging verbosity for CoreDNS. Any one of the following values may be specified: * Normal logs errors from upstream resolvers. * Debug logs errors, NXDOMAIN responses, and NODATA responses. * Trace logs errors and all responses.\n Setting logLevel: Trace will produce extremely verbose logs.\nValid values are: \"Normal\", \"Debug\", \"Trace\". Defaults to \"Normal\".",
+ "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
+ "managedBootImages": {
+ "description": "managedBootImages allows configuration for the management of boot images for machine resources within the cluster. This configuration allows users to select resources that should be updated to the latest boot images during cluster upgrades, ensuring that new machines always boot with the current cluster version's boot image. When omitted, no boot images will be updated.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.ManagedBootImages"
+ },
"managementState": {
- "description": "managementState indicates whether the DNS operator should manage cluster DNS",
- "type": "string"
+ "description": "managementState indicates whether and how the operator should manage the component",
+ "type": "string",
+ "default": ""
},
- "nodePlacement": {
- "description": "nodePlacement provides explicit control over the scheduling of DNS pods.\n\nGenerally, it is useful to run a DNS pod on every node so that DNS queries are always handled by a local DNS pod instead of going over the network to a DNS pod on another node. However, security policies may require restricting the placement of DNS pods to specific nodes. For example, if a security policy prohibits pods on arbitrary nodes from communicating with the API, a node selector can be specified to restrict DNS pods to nodes that are permitted to communicate with the API. Conversely, if running DNS pods on nodes with a particular taint is desired, a toleration can be specified for that taint.\n\nIf unset, defaults are used. See nodePlacement for more details.",
+ "nodeDisruptionPolicy": {
+ "description": "nodeDisruptionPolicy allows an admin to set granular node disruption actions for MachineConfig-based updates, such as drains, service reloads, etc. Specifying this will allow for less downtime when doing small configuration updates to the cluster. This configuration has no effect on cluster upgrades which will still incur node disruption where required.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.DNSNodePlacement"
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyConfig"
+ },
+ "observedConfig": {
+ "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
},
"operatorLogLevel": {
- "description": "operatorLogLevel controls the logging level of the DNS Operator. Valid values are: \"Normal\", \"Debug\", \"Trace\". Defaults to \"Normal\". setting operatorLogLevel: Trace will produce extremely verbose logs.",
+ "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "servers": {
- "description": "servers is a list of DNS resolvers that provide name query delegation for one or more subdomains outside the scope of the cluster domain. If servers consists of more than one Server, longest suffix match will be used to determine the Server.\n\nFor example, if there are two Servers, one for \"foo.com\" and another for \"a.foo.com\", and the name query is for \"www.a.foo.com\", it will be routed to the Server with Zone \"a.foo.com\".\n\nIf this field is nil, no servers are created.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.Server"
- }
+ "succeededRevisionLimit": {
+ "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
+ "type": "integer",
+ "format": "int32"
},
- "upstreamResolvers": {
- "description": "upstreamResolvers defines a schema for configuring CoreDNS to proxy DNS messages to upstream resolvers for the case of the default (\".\") server\n\nIf this field is not specified, the upstream used will default to /etc/resolv.conf, with policy \"sequential\"",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.UpstreamResolvers"
+ "unsupportedConfigOverrides": {
+ "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "DNSSpec",
+ "Kind": "MachineConfigurationSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.DNSStatus": {
- "description": "DNSStatus defines the observed status of the DNS.",
+ "io.openshift.operator.v1.MachineConfigurationStatus": {
"type": "object",
- "required": [
- "clusterIP",
- "clusterDomain"
- ],
"properties": {
- "clusterDomain": {
- "description": "clusterDomain is the local cluster DNS domain suffix for DNS services. This will be a subdomain as defined in RFC 1034, section 3.5: https://tools.ietf.org/html/rfc1034#section-3.5 Example: \"cluster.local\"\n\nMore info: https://kubernetes.io/docs/concepts/services-networking/dns-pod-service",
- "type": "string",
- "default": ""
- },
- "clusterIP": {
- "description": "clusterIP is the service IP through which this DNS is made available.\n\nIn the case of the default DNS, this will be a well known IP that is used as the default nameserver for pods that are using the default ClusterFirst DNS policy.\n\nIn general, this IP can be specified in a pod's spec.dnsConfig.nameservers list or used explicitly when performing name resolution from within the cluster. Example: dig foo.com @\u003cservice IP\u003e\n\nMore info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies",
- "type": "string",
- "default": ""
- },
"conditions": {
- "description": "conditions provide information about the state of the DNS on the cluster.\n\nThese are the supported DNS conditions:\n\n * Available\n - True if the following conditions are met:\n * DNS controller daemonset is available.\n - False if any of those conditions are unsatisfied.",
+ "description": "conditions is a list of conditions and their status",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
},
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
"x-kubernetes-patch-merge-key": "type",
"x-kubernetes-patch-strategy": "merge"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "DNSStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.DNSTransportConfig": {
- "description": "DNSTransportConfig groups related configuration parameters used for configuring forwarding to upstream resolvers that support DNS-over-TLS.",
- "type": "object",
- "properties": {
- "tls": {
- "description": "tls contains the additional configuration options to use when Transport is set to \"TLS\".",
- "$ref": "#/definitions/io.openshift.operator.v1.DNSOverTLSConfig"
- },
- "transport": {
- "description": "transport allows cluster administrators to opt-in to using a DNS-over-TLS connection between cluster DNS and an upstream resolver(s). Configuring TLS as the transport at this level without configuring a CABundle will result in the system certificates being used to verify the serving certificate of the upstream resolver(s).\n\nPossible values: \"\" (empty) - This means no explicit choice has been made and the platform chooses the default which is subject to change over time. The current default is \"Cleartext\". \"Cleartext\" - Cluster admin specified cleartext option. This results in the same functionality as an empty value but may be useful when a cluster admin wants to be more explicit about the transport, or wants to switch from \"TLS\" to \"Cleartext\" explicitly. \"TLS\" - This indicates that DNS queries should be sent over a TLS connection. If Transport is set to TLS, you MUST also set ServerName. If a port is not included with the upstream IP, port 853 will be tried by default per RFC 7858 section 3.1; https://datatracker.ietf.org/doc/html/rfc7858#section-3.1.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "DNSTransportConfig",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "transport",
- "fields-to-discriminateBy": {
- "tls": "TLS"
- }
- }
- ]
- },
- "io.openshift.operator.v1.DefaultNetworkDefinition": {
- "description": "DefaultNetworkDefinition represents a single network plugin's configuration. type must be specified, along with exactly one \"Config\" that matches the type.",
- "type": "object",
- "required": [
- "type"
- ],
- "properties": {
- "openshiftSDNConfig": {
- "description": "openShiftSDNConfig was previously used to configure the openshift-sdn plugin. DEPRECATED: OpenShift SDN is no longer supported.",
- "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftSDNConfig"
},
- "ovnKubernetesConfig": {
- "description": "ovnKubernetesConfig configures the ovn-kubernetes plugin.",
- "$ref": "#/definitions/io.openshift.operator.v1.OVNKubernetesConfig"
+ "nodeDisruptionPolicyStatus": {
+ "description": "nodeDisruptionPolicyStatus status reflects what the latest cluster-validated policies are, and will be used by the Machine Config Daemon during future node updates.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatus"
},
- "type": {
- "description": "type is the type of network All NetworkTypes are supported except for NetworkTypeRaw",
- "type": "string",
- "default": ""
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "DefaultNetworkDefinition",
+ "Kind": "MachineConfigurationStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.DeveloperConsoleCatalogCategory": {
- "description": "DeveloperConsoleCatalogCategory for the developer console catalog.",
+ "io.openshift.operator.v1.MachineManager": {
+ "description": "MachineManager describes a target machine resource that is registered for boot image updates. It stores identifying information such as the resource type and the API Group of the resource. It also provides granular control via the selection field.",
"type": "object",
"required": [
- "id",
- "label"
+ "resource",
+ "apiGroup",
+ "selection"
],
"properties": {
- "id": {
- "description": "ID is an identifier used in the URL to enable deep linking in console. ID is required and must have 1-32 URL safe (A-Z, a-z, 0-9, - and _) characters.",
+ "apiGroup": {
+ "description": "apiGroup is name of the APIGroup that the machine management resource belongs to. The only current valid value is machine.openshift.io. machine.openshift.io means that the machine manager will only register resources that belong to OpenShift machine API group.",
"type": "string",
"default": ""
},
- "label": {
- "description": "label defines a category display label. It is required and must have 1-64 characters.",
+ "resource": {
+ "description": "resource is the machine management resource's type. The only current valid value is machinesets. machinesets means that the machine manager will only register resources of the kind MachineSet.",
"type": "string",
"default": ""
},
- "subcategories": {
- "description": "subcategories defines a list of child categories.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.DeveloperConsoleCatalogCategoryMeta"
- }
- },
- "tags": {
- "description": "tags is a list of strings that will match the category. A selected category show all items which has at least one overlapping tag between category and item.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "selection": {
+ "description": "selection allows granular control of the machine management resources that will be registered for boot image updates.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.MachineManagerSelector"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "DeveloperConsoleCatalogCategory",
+ "Kind": "MachineManager",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.DeveloperConsoleCatalogCategoryMeta": {
- "description": "DeveloperConsoleCatalogCategoryMeta are the key identifiers of a developer catalog category.",
+ "io.openshift.operator.v1.MachineManagerSelector": {
"type": "object",
"required": [
- "id",
- "label"
+ "mode"
],
"properties": {
- "id": {
- "description": "ID is an identifier used in the URL to enable deep linking in console. ID is required and must have 1-32 URL safe (A-Z, a-z, 0-9, - and _) characters.",
- "type": "string",
- "default": ""
- },
- "label": {
- "description": "label defines a category display label. It is required and must have 1-64 characters.",
+ "mode": {
+ "description": "mode determines how machine managers will be selected for updates. Valid values are All and Partial. All means that every resource matched by the machine manager will be updated. Partial requires specified selector(s) and allows customisation of which resources matched by the machine manager will be updated.",
"type": "string",
"default": ""
},
- "tags": {
- "description": "tags is a list of strings that will match the category. A selected category show all items which has at least one overlapping tag between category and item.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "DeveloperConsoleCatalogCategoryMeta",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.DeveloperConsoleCatalogCustomization": {
- "description": "DeveloperConsoleCatalogCustomization allow cluster admin to configure developer catalog.",
- "type": "object",
- "properties": {
- "categories": {
- "description": "categories which are shown in the developer catalog.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.DeveloperConsoleCatalogCategory"
- }
- },
- "types": {
- "description": "types allows enabling or disabling of sub-catalog types that user can see in the Developer catalog. When omitted, all the sub-catalog types will be shown.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.DeveloperConsoleCatalogTypes"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "DeveloperConsoleCatalogCustomization",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.DeveloperConsoleCatalogTypes": {
- "description": "DeveloperConsoleCatalogTypes defines the state of the sub-catalog types.",
- "type": "object",
- "properties": {
- "disabled": {
- "description": "disabled is a list of developer catalog types (sub-catalogs IDs) that are not shown to users. Types (sub-catalogs) are added via console plugins, the available types (sub-catalog IDs) are available in the console on the cluster configuration page, or when editing the YAML in the console. Example: \"Devfile\", \"HelmChart\", \"BuilderImage\" If the list is empty or all the available sub-catalog types are added, then the complete developer catalog should be hidden.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "set"
- },
- "enabled": {
- "description": "enabled is a list of developer catalog types (sub-catalogs IDs) that will be shown to users. Types (sub-catalogs) are added via console plugins, the available types (sub-catalog IDs) are available in the console on the cluster configuration page, or when editing the YAML in the console. Example: \"Devfile\", \"HelmChart\", \"BuilderImage\" If the list is non-empty, a new type will not be shown to the user until it is added to list. If the list is empty the complete developer catalog will be shown.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "set"
- },
- "state": {
- "description": "state defines if a list of catalog types should be enabled or disabled.",
- "type": "string",
- "default": "Enabled"
+ "partial": {
+ "description": "partial provides label selector(s) that can be used to match machine management resources. Only permitted when mode is set to \"Partial\".",
+ "$ref": "#/definitions/io.openshift.operator.v1.PartialSelector"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "DeveloperConsoleCatalogTypes",
+ "Kind": "MachineManagerSelector",
"Scope": "Namespaced"
},
"x-kubernetes-unions": [
{
- "discriminator": "state",
+ "discriminator": "mode",
"fields-to-discriminateBy": {
- "disabled": "Disabled",
- "enabled": "Enabled"
+ "partial": "Partial"
}
}
]
},
- "io.openshift.operator.v1.EgressIPConfig": {
- "description": "EgressIPConfig defines the configuration knobs for egressip",
- "type": "object",
- "properties": {
- "reachabilityTotalTimeoutSeconds": {
- "description": "reachabilityTotalTimeout configures the EgressIP node reachability check total timeout in seconds. If the EgressIP node cannot be reached within this timeout, the node is declared down. Setting a large value may cause the EgressIP feature to react slowly to node changes. In particular, it may react slowly for EgressIP nodes that really have a genuine problem and are unreachable. When omitted, this means the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 1 second. A value of 0 disables the EgressIP node's reachability check.",
- "type": "integer",
- "format": "int64"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "EgressIPConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.EndpointPublishingStrategy": {
- "description": "EndpointPublishingStrategy is a way to publish the endpoints of an IngressController, and represents the type and any additional configuration for a specific type.",
+ "io.openshift.operator.v1.ManagedBootImages": {
"type": "object",
- "required": [
- "type"
- ],
"properties": {
- "hostNetwork": {
- "description": "hostNetwork holds parameters for the HostNetwork endpoint publishing strategy. Present only if type is HostNetwork.",
- "$ref": "#/definitions/io.openshift.operator.v1.HostNetworkStrategy"
- },
- "loadBalancer": {
- "description": "loadBalancer holds parameters for the load balancer. Present only if type is LoadBalancerService.",
- "$ref": "#/definitions/io.openshift.operator.v1.LoadBalancerStrategy"
- },
- "nodePort": {
- "description": "nodePort holds parameters for the NodePortService endpoint publishing strategy. Present only if type is NodePortService.",
- "$ref": "#/definitions/io.openshift.operator.v1.NodePortStrategy"
- },
- "private": {
- "description": "private holds parameters for the Private endpoint publishing strategy. Present only if type is Private.",
- "$ref": "#/definitions/io.openshift.operator.v1.PrivateStrategy"
- },
- "type": {
- "description": "type is the publishing strategy to use. Valid values are:\n\n* LoadBalancerService\n\nPublishes the ingress controller using a Kubernetes LoadBalancer Service.\n\nIn this configuration, the ingress controller deployment uses container networking. A LoadBalancer Service is created to publish the deployment.\n\nSee: https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer\n\nIf domain is set, a wildcard DNS record will be managed to point at the LoadBalancer Service's external name. DNS records are managed only in DNS zones defined by dns.config.openshift.io/cluster .spec.publicZone and .spec.privateZone.\n\nWildcard DNS management is currently supported only on the AWS, Azure, and GCP platforms.\n\n* HostNetwork\n\nPublishes the ingress controller on node ports where the ingress controller is deployed.\n\nIn this configuration, the ingress controller deployment uses host networking, bound to node ports 80 and 443. The user is responsible for configuring an external load balancer to publish the ingress controller via the node ports.\n\n* Private\n\nDoes not publish the ingress controller.\n\nIn this configuration, the ingress controller deployment uses container networking, and is not explicitly published. The user must manually publish the ingress controller.\n\n* NodePortService\n\nPublishes the ingress controller using a Kubernetes NodePort Service.\n\nIn this configuration, the ingress controller deployment uses container networking. A NodePort Service is created to publish the deployment. The specific node ports are dynamically allocated by OpenShift; however, to support static port allocations, user changes to the node port field of the managed NodePort Service will preserved.",
- "type": "string",
- "default": ""
+ "machineManagers": {
+ "description": "machineManagers can be used to register machine management resources for boot image updates. The Machine Config Operator will watch for changes to this list. Only one entry is permitted per type of machine management resource.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.MachineManager"
+ },
+ "x-kubernetes-list-map-keys": [
+ "resource",
+ "apiGroup"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "EndpointPublishingStrategy",
+ "Kind": "ManagedBootImages",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "hostNetwork": "HostNetwork",
- "loadBalancer": "LoadBalancer",
- "nodePort": "NodePort",
- "private": "Private"
- }
- }
- ]
+ }
},
- "io.openshift.operator.v1.Etcd": {
- "description": "Etcd provides information to configure an operator to manage etcd.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.MyOperatorResource": {
+ "description": "MyOperatorResource is an example operator configuration type\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
"metadata",
- "spec"
+ "spec",
+ "status"
],
"properties": {
"apiVersion": {
@@ -102986,91 +108490,27 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.EtcdSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.MyOperatorResourceSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.EtcdStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.MyOperatorResourceStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "Etcd",
- "Scope": "Clustered"
- }
- },
- "io.openshift.operator.v1.EtcdList": {
- "description": "KubeAPISOperatorConfigList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "required": [
- "metadata",
- "items"
- ],
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "description": "Items contains the items",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.Etcd"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
- }
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "EtcdList",
+ "Kind": "MyOperatorResource",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.EtcdSpec": {
+ "io.openshift.operator.v1.MyOperatorResourceSpec": {
"type": "object",
"required": [
- "managementState",
- "forceRedeploymentReason"
+ "managementState"
],
"properties": {
- "backendQuotaGiB": {
- "description": "backendQuotaGiB sets the etcd backend storage size limit in gibibytes. The value should be an integer not less than 8 and not more than 32. When not specified, the default value is 8.",
- "type": "integer",
- "format": "int32",
- "default": 8
- },
- "controlPlaneHardwareSpeed": {
- "description": "HardwareSpeed allows user to change the etcd tuning profile which configures the latency parameters for heartbeat interval and leader election timeouts allowing the cluster to tolerate longer round-trip-times between etcd members. Valid values are \"\", \"Standard\" and \"Slower\".\n\t\"\" means no opinion and the platform is left to choose a reasonable default\n\twhich is subject to change without notice.\n\nPossible enum values:\n - `\"Slower\"` provides more tolerance for slower hardware and/or higher latency networks. Sets (values subject to change): ETCD_HEARTBEAT_INTERVAL: 5x Standard ETCD_LEADER_ELECTION_TIMEOUT: 2.5x Standard\n - `\"Standard\"` provides the normal tolerances for hardware speed and latency. Currently sets (values subject to change at any time): ETCD_HEARTBEAT_INTERVAL: 100ms ETCD_LEADER_ELECTION_TIMEOUT: 1000ms",
- "type": "string",
- "default": "",
- "enum": [
- "Slower",
- "Standard"
- ]
- },
- "failedRevisionLimit": {
- "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
- "type": "integer",
- "format": "int32"
- },
- "forceRedeploymentReason": {
- "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.",
- "type": "string",
- "default": ""
- },
"logLevel": {
"description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
@@ -103088,11 +108528,6 @@
"description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "succeededRevisionLimit": {
- "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
- "type": "integer",
- "format": "int32"
- },
"unsupportedConfigOverrides": {
"description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
@@ -103102,15 +108537,14 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "EtcdSpec",
+ "Kind": "MyOperatorResourceSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.EtcdStatus": {
+ "io.openshift.operator.v1.MyOperatorResourceStatus": {
"type": "object",
"required": [
- "readyReplicas",
- "controlPlaneHardwareSpeed"
+ "readyReplicas"
],
"properties": {
"conditions": {
@@ -103125,15 +108559,6 @@
],
"x-kubernetes-list-type": "map"
},
- "controlPlaneHardwareSpeed": {
- "description": "Possible enum values:\n - `\"Slower\"` provides more tolerance for slower hardware and/or higher latency networks. Sets (values subject to change): ETCD_HEARTBEAT_INTERVAL: 5x Standard ETCD_LEADER_ELECTION_TIMEOUT: 2.5x Standard\n - `\"Standard\"` provides the normal tolerances for hardware speed and latency. Currently sets (values subject to change at any time): ETCD_HEARTBEAT_INTERVAL: 100ms ETCD_LEADER_ELECTION_TIMEOUT: 1000ms",
- "type": "string",
- "default": "",
- "enum": [
- "Slower",
- "Standard"
- ]
- },
"generations": {
"description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
"type": "array",
@@ -103154,22 +108579,6 @@
"type": "integer",
"format": "int32"
},
- "latestAvailableRevisionReason": {
- "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment",
- "type": "string"
- },
- "nodeStatuses": {
- "description": "nodeStatuses track the deployment values and errors across individual nodes",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeStatus"
- },
- "x-kubernetes-list-map-keys": [
- "nodeName"
- ],
- "x-kubernetes-list-type": "map"
- },
"observedGeneration": {
"description": "observedGeneration is the last generation change you've dealt with",
"type": "integer",
@@ -103190,448 +108599,401 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "EtcdStatus",
+ "Kind": "MyOperatorResourceStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ExportNetworkFlows": {
+ "io.openshift.operator.v1.NetFlowConfig": {
"type": "object",
"properties": {
- "ipfix": {
- "description": "ipfix defines IPFIX configuration.",
- "$ref": "#/definitions/io.openshift.operator.v1.IPFIXConfig"
- },
- "netFlow": {
- "description": "netFlow defines the NetFlow configuration.",
- "$ref": "#/definitions/io.openshift.operator.v1.NetFlowConfig"
- },
- "sFlow": {
- "description": "sFlow defines the SFlow configuration.",
- "$ref": "#/definitions/io.openshift.operator.v1.SFlowConfig"
+ "collectors": {
+ "description": "netFlow defines the NetFlow collectors that will consume the flow data exported from OVS. It is a list of strings formatted as ip:port with a maximum of ten items",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ExportNetworkFlows",
+ "Kind": "NetFlowConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.FeaturesMigration": {
+ "io.openshift.operator.v1.Network": {
+ "description": "Network describes the cluster's desired network configuration. It is consumed by the cluster-network-operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"properties": {
- "egressFirewall": {
- "description": "egressFirewall specified whether or not the Egress Firewall configuration was migrated. DEPRECATED: network type migration is no longer supported.",
- "type": "boolean"
- },
- "egressIP": {
- "description": "egressIP specified whether or not the Egress IP configuration was migrated. DEPRECATED: network type migration is no longer supported.",
- "type": "boolean"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "multicast": {
- "description": "multicast specified whether or not the multicast configuration was migrated. DEPRECATED: network type migration is no longer supported.",
- "type": "boolean"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "FeaturesMigration",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.ForwardPlugin": {
- "description": "ForwardPlugin defines a schema for configuring the CoreDNS forward plugin.",
- "type": "object",
- "required": [
- "upstreams"
- ],
- "properties": {
- "policy": {
- "description": "policy is used to determine the order in which upstream servers are selected for querying. Any one of the following values may be specified:\n\n* \"Random\" picks a random upstream server for each query. * \"RoundRobin\" picks upstream servers in a round-robin order, moving to the next server for each new query. * \"Sequential\" tries querying upstream servers in a sequential order until one responds, starting with the first server for each new query.\n\nThe default value is \"Random\"",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "protocolStrategy": {
- "description": "protocolStrategy specifies the protocol to use for upstream DNS requests. Valid values for protocolStrategy are \"TCP\" and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is to use the protocol of the original client request. \"TCP\" specifies that the platform should use TCP for all upstream DNS requests, even if the client request uses UDP. \"TCP\" is useful for UDP-specific issues such as those created by non-compliant upstream resolvers, but may consume more bandwidth or increase DNS response time. Note that protocolStrategy only affects the protocol of DNS requests that CoreDNS makes to upstream resolvers. It does not affect the protocol of DNS requests between clients and CoreDNS.",
- "type": "string",
- "default": ""
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "transportConfig": {
- "description": "transportConfig is used to configure the transport type, server name, and optional custom CA or CA bundle to use when forwarding DNS requests to an upstream resolver.\n\nThe default value is \"\" (empty) which results in a standard cleartext connection being used when forwarding DNS requests to an upstream resolver.",
+ "spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.DNSTransportConfig"
+ "$ref": "#/definitions/io.openshift.operator.v1.NetworkSpec"
},
- "upstreams": {
- "description": "upstreams is a list of resolvers to forward name queries for subdomains of Zones. Each instance of CoreDNS performs health checking of Upstreams. When a healthy upstream returns an error during the exchange, another resolver is tried from Upstreams. The Upstreams are selected in the order specified in Policy. Each upstream is represented by an IP address or IP:port if the upstream listens on a port other than 53.\n\nA maximum of 15 upstreams is allowed per ForwardPlugin.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "ForwardPlugin",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.GCPCSIDriverConfigSpec": {
- "description": "GCPCSIDriverConfigSpec defines properties that can be configured for the GCP CSI driver.",
- "type": "object",
- "properties": {
- "kmsKey": {
- "description": "kmsKey sets the cluster default storage class to encrypt volumes with customer-supplied encryption keys, rather than the default keys managed by GCP.",
- "$ref": "#/definitions/io.openshift.operator.v1.GCPKMSKeyReference"
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NetworkStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "GCPCSIDriverConfigSpec",
- "Scope": "Namespaced"
+ "Kind": "Network",
+ "Scope": "Clustered"
}
},
- "io.openshift.operator.v1.GCPKMSKeyReference": {
- "description": "GCPKMSKeyReference gathers required fields for looking up a GCP KMS Key",
+ "io.openshift.operator.v1.NetworkList": {
+ "description": "NetworkList contains a list of Network configurations\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "name",
- "keyRing",
- "projectID"
+ "items"
],
"properties": {
- "keyRing": {
- "description": "keyRing is the name of the KMS Key Ring which the KMS Key belongs to. The value should correspond to an existing KMS key ring and should consist of only alphanumeric characters, hyphens (-) and underscores (_), and be at most 63 characters in length.",
- "type": "string",
- "default": ""
- },
- "location": {
- "description": "location is the GCP location in which the Key Ring exists. The value must match an existing GCP location, or \"global\". Defaults to global, if not set.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "name": {
- "description": "name is the name of the customer-managed encryption key to be used for disk encryption. The value should correspond to an existing KMS key and should consist of only alphanumeric characters, hyphens (-) and underscores (_), and be at most 63 characters in length.",
- "type": "string",
- "default": ""
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.Network"
+ }
},
- "projectID": {
- "description": "projectID is the ID of the Project in which the KMS Key Ring exists. It must be 6 to 30 lowercase letters, digits, or hyphens. It must start with a letter. Trailing hyphens are prohibited.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "GCPKMSKeyReference",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.GCPLoadBalancerParameters": {
- "description": "GCPLoadBalancerParameters provides configuration settings that are specific to GCP load balancers.",
- "type": "object",
- "properties": {
- "clientAccess": {
- "description": "clientAccess describes how client access is restricted for internal load balancers.\n\nValid values are: * \"Global\": Specifying an internal load balancer with Global client access\n allows clients from any region within the VPC to communicate with the load\n balancer.\n\n https://cloud.google.com/kubernetes-engine/docs/how-to/internal-load-balancing#global_access\n\n* \"Local\": Specifying an internal load balancer with Local client access\n means only clients within the same region (and VPC) as the GCP load balancer\n can communicate with the load balancer. Note that this is the default behavior.\n\n https://cloud.google.com/load-balancing/docs/internal#client_access",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "GCPLoadBalancerParameters",
+ "Kind": "NetworkList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.GatewayConfig": {
- "description": "GatewayConfig holds node gateway-related parsed config file parameters and command-line overrides",
+ "io.openshift.operator.v1.NetworkMigration": {
+ "description": "NetworkMigration represents the cluster network migration configuration.",
"type": "object",
"properties": {
- "ipForwarding": {
- "description": "IPForwarding controls IP forwarding for all traffic on OVN-Kubernetes managed interfaces (such as br-ex). By default this is set to Restricted, and Kubernetes related traffic is still forwarded appropriately, but other IP traffic will not be routed by the OCP node. If there is a desire to allow the host to forward traffic across OVN-Kubernetes managed interfaces, then set this field to \"Global\". The supported values are \"Restricted\" and \"Global\".",
- "type": "string"
+ "features": {
+ "description": "features was previously used to configure which network plugin features would be migrated in a network type migration. DEPRECATED: network type migration is no longer supported, and setting this to a non-empty value will result in the network operator rejecting the configuration.",
+ "$ref": "#/definitions/io.openshift.operator.v1.FeaturesMigration"
},
- "ipv4": {
- "description": "ipv4 allows users to configure IP settings for IPv4 connections. When omitted, this means no opinion and the default configuration is used. Check individual members fields within ipv4 for details of default values.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IPv4GatewayConfig"
+ "mode": {
+ "description": "mode indicates the mode of network type migration. DEPRECATED: network type migration is no longer supported, and setting this to a non-empty value will result in the network operator rejecting the configuration.",
+ "type": "string"
},
- "ipv6": {
- "description": "ipv6 allows users to configure IP settings for IPv6 connections. When omitted, this means no opinion and the default configuration is used. Check individual members fields within ipv6 for details of default values.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IPv6GatewayConfig"
+ "mtu": {
+ "description": "mtu contains the MTU migration configuration. Set this to allow changing the MTU values for the default network. If unset, the operation of changing the MTU for the default network will be rejected.",
+ "$ref": "#/definitions/io.openshift.operator.v1.MTUMigration"
},
- "routingViaHost": {
- "description": "RoutingViaHost allows pod egress traffic to exit via the ovn-k8s-mp0 management port into the host before sending it out. If this is not set, traffic will always egress directly from OVN to outside without touching the host stack. Setting this to true means hardware offload will not be supported. Default is false if GatewayConfig is specified.",
- "type": "boolean"
+ "networkType": {
+ "description": "networkType was previously used when changing the default network type. DEPRECATED: network type migration is no longer supported, and setting this to a non-empty value will result in the network operator rejecting the configuration.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "GatewayConfig",
+ "Kind": "NetworkMigration",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.GatherStatus": {
- "description": "gatherStatus provides information about the last known gather event.",
+ "io.openshift.operator.v1.NetworkSpec": {
+ "description": "NetworkSpec is the top-level network configuration object.",
"type": "object",
+ "required": [
+ "managementState",
+ "clusterNetwork",
+ "serviceNetwork",
+ "defaultNetwork"
+ ],
"properties": {
- "gatherers": {
- "description": "gatherers is a list of active gatherers (and their statuses) in the last gathering.",
+ "additionalNetworks": {
+ "description": "additionalNetworks is a list of extra networks to make available to pods when multiple networks are enabled.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GathererStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.AdditionalNetworkDefinition"
},
- "x-kubernetes-list-type": "atomic"
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "lastGatherDuration": {
- "description": "lastGatherDuration is the total time taken to process all gatherers during the last gather event.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "additionalRoutingCapabilities": {
+ "description": "additionalRoutingCapabilities describes components and relevant configuration providing additional routing capabilities. When set, it enables such components and the usage of the routing capabilities they provide for the machine network. Upstream operators, like MetalLB operator, requiring these capabilities may rely on, or automatically set this attribute. Network plugins may leverage advanced routing capabilities acquired through the enablement of these components but may require specific configuration on their side to do so; refer to their respective documentation and configuration options.",
+ "$ref": "#/definitions/io.openshift.operator.v1.AdditionalRoutingCapabilities"
},
- "lastGatherTime": {
- "description": "lastGatherTime is the last time when Insights data gathering finished. An empty value means that no data has been gathered yet.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "GatherStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.GathererStatus": {
- "description": "gathererStatus represents information about a particular data gatherer.",
- "type": "object",
- "required": [
- "conditions",
- "name",
- "lastGatherDuration"
- ],
- "properties": {
- "conditions": {
- "description": "conditions provide details on the status of each gatherer.",
+ "clusterNetwork": {
+ "description": "clusterNetwork is the IP address pool to use for pod IPs. Some network providers support multiple ClusterNetworks. Others only support one. This is equivalent to the cluster-cidr.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ "$ref": "#/definitions/io.openshift.operator.v1.ClusterNetworkEntry"
},
"x-kubernetes-list-type": "atomic"
},
- "lastGatherDuration": {
- "description": "lastGatherDuration represents the time spent gathering.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "defaultNetwork": {
+ "description": "defaultNetwork is the \"default\" network that all pods will receive",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.DefaultNetworkDefinition"
},
- "name": {
- "description": "name is the name of the gatherer.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "GathererStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.GenerationStatus": {
- "description": "GenerationStatus keeps track of the generation for a given resource so that decisions about forced updates can be made.",
- "type": "object",
- "required": [
- "group",
- "resource",
- "namespace",
- "name",
- "lastGeneration",
- "hash"
- ],
- "properties": {
- "group": {
- "description": "group is the group of the thing you're tracking",
- "type": "string",
- "default": ""
+ "deployKubeProxy": {
+ "description": "deployKubeProxy specifies whether or not a standalone kube-proxy should be deployed by the operator. Some network providers include kube-proxy or similar functionality. If unset, the plugin will attempt to select the correct value, which is false when ovn-kubernetes is used and true otherwise.",
+ "type": "boolean"
},
- "hash": {
- "description": "hash is an optional field set for resources without generation that are content sensitive like secrets and configmaps",
- "type": "string",
- "default": ""
+ "disableMultiNetwork": {
+ "description": "disableMultiNetwork specifies whether or not multiple pod network support should be disabled. If unset, this property defaults to 'false' and multiple network support is enabled.",
+ "type": "boolean"
},
- "lastGeneration": {
- "description": "lastGeneration is the last generation of the workload controller involved",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "disableNetworkDiagnostics": {
+ "description": "disableNetworkDiagnostics specifies whether or not PodNetworkConnectivityCheck CRs from a test pod to every node, apiserver and LB should be disabled or not. If unset, this property defaults to 'false' and network diagnostics is enabled. Setting this to 'true' would reduce the additional load of the pods performing the checks.",
+ "type": "boolean",
+ "default": false
},
- "name": {
- "description": "name is the name of the thing you're tracking",
- "type": "string",
- "default": ""
+ "exportNetworkFlows": {
+ "description": "exportNetworkFlows enables and configures the export of network flow metadata from the pod network by using protocols NetFlow, SFlow or IPFIX. Currently only supported on OVN-Kubernetes plugin. If unset, flows will not be exported to any collector.",
+ "$ref": "#/definitions/io.openshift.operator.v1.ExportNetworkFlows"
},
- "namespace": {
- "description": "namespace is where the thing you're tracking is",
- "type": "string",
- "default": ""
+ "kubeProxyConfig": {
+ "description": "kubeProxyConfig lets us configure desired proxy configuration, if deployKubeProxy is true. If not specified, sensible defaults will be chosen by OpenShift directly.",
+ "$ref": "#/definitions/io.openshift.operator.v1.ProxyConfig"
},
- "resource": {
- "description": "resource is the resource type of the thing you're tracking",
+ "logLevel": {
+ "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": "string"
+ },
+ "managementState": {
+ "description": "managementState indicates whether and how the operator should manage the component",
"type": "string",
"default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "GenerationStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.HTTPCompressionPolicy": {
- "description": "httpCompressionPolicy turns on compression for the specified MIME types.\n\nThis field is optional, and its absence implies that compression should not be enabled globally in HAProxy.\n\nIf httpCompressionPolicy exists, compression should be enabled only for the specified MIME types.",
- "type": "object",
- "properties": {
- "mimeTypes": {
- "description": "mimeTypes is a list of MIME types that should have compression applied. This list can be empty, in which case the ingress controller does not apply compression.\n\nNote: Not all MIME types benefit from compression, but HAProxy will still use resources to try to compress if instructed to. Generally speaking, text (html, css, js, etc.) formats benefit from compression, but formats that are already compressed (image, audio, video, etc.) benefit little in exchange for the time and cpu spent on compressing again. See https://joehonton.medium.com/the-gzip-penalty-d31bd697f1a2",
+ },
+ "migration": {
+ "description": "migration enables and configures cluster network migration, for network changes that cannot be made instantly.",
+ "$ref": "#/definitions/io.openshift.operator.v1.NetworkMigration"
+ },
+ "observedConfig": {
+ "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "operatorLogLevel": {
+ "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": "string"
+ },
+ "serviceNetwork": {
+ "description": "serviceNetwork is the ip address pool to use for Service IPs Currently, all existing network providers only support a single value here, but this is an array to allow for growth.",
"type": "array",
"items": {
"type": "string",
"default": ""
},
- "x-kubernetes-list-type": "set"
+ "x-kubernetes-list-type": "atomic"
+ },
+ "unsupportedConfigOverrides": {
+ "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ },
+ "useMultiNetworkPolicy": {
+ "description": "useMultiNetworkPolicy enables a controller which allows for MultiNetworkPolicy objects to be used on additional networks as created by Multus CNI. MultiNetworkPolicy are similar to NetworkPolicy objects, but NetworkPolicy objects only apply to the primary interface. With MultiNetworkPolicy, you can control the traffic that a pod can receive over the secondary interfaces. If unset, this property defaults to 'false' and MultiNetworkPolicy objects are ignored. If 'disableMultiNetwork' is 'true' then the value of this field is ignored.",
+ "type": "boolean"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "HTTPCompressionPolicy",
+ "Kind": "NetworkSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.HealthCheck": {
- "description": "healthCheck represents an Insights health check attributes.",
+ "io.openshift.operator.v1.NetworkStatus": {
+ "description": "NetworkStatus is detailed operator status, which is distilled up to the Network clusteroperator object.",
"type": "object",
"required": [
- "description",
- "totalRisk",
- "advisorURI",
- "state"
+ "readyReplicas"
],
"properties": {
- "advisorURI": {
- "description": "advisorURI provides the URL link to the Insights Advisor.",
- "type": "string",
- "default": ""
+ "conditions": {
+ "description": "conditions is a list of conditions and their status",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "description": {
- "description": "description provides basic description of the healtcheck.",
- "type": "string",
- "default": ""
+ "generations": {
+ "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "group",
+ "resource",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "state": {
- "description": "state determines what the current state of the health check is. Health check is enabled by default and can be disabled by the user in the Insights advisor user interface.",
- "type": "string",
- "default": ""
+ "latestAvailableRevision": {
+ "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "type": "integer",
+ "format": "int32"
},
- "totalRisk": {
- "description": "totalRisk of the healthcheck. Indicator of the total risk posed by the detected issue; combination of impact and likelihood. The values can be from 1 to 4, and the higher the number, the more important the issue.",
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
+ "type": "integer",
+ "format": "int64"
+ },
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
"type": "integer",
"format": "int32",
"default": 0
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "HealthCheck",
+ "Kind": "NetworkStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.HostNetworkStrategy": {
- "description": "HostNetworkStrategy holds parameters for the HostNetwork endpoint publishing strategy.",
+ "io.openshift.operator.v1.NodeDisruptionPolicyClusterStatus": {
+ "description": "NodeDisruptionPolicyClusterStatus is the type for the status object, rendered by the controller as a merge of cluster defaults and user provided policies",
"type": "object",
"properties": {
- "httpPort": {
- "description": "httpPort is the port on the host which should be used to listen for HTTP requests. This field should be set when port 80 is already in use. The value should not coincide with the NodePort range of the cluster. When the value is 0 or is not specified it defaults to 80.",
- "type": "integer",
- "format": "int32"
- },
- "httpsPort": {
- "description": "httpsPort is the port on the host which should be used to listen for HTTPS requests. This field should be set when port 443 is already in use. The value should not coincide with the NodePort range of the cluster. When the value is 0 or is not specified it defaults to 443.",
- "type": "integer",
- "format": "int32"
+ "files": {
+ "description": "files is a list of MachineConfig file definitions and actions to take to changes on those paths",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatusFile"
+ },
+ "x-kubernetes-list-map-keys": [
+ "path"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "protocol": {
- "description": "protocol specifies whether the IngressController expects incoming connections to use plain TCP or whether the IngressController expects PROXY protocol.\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nThe following values are valid for this field:\n\n* The empty string. * \"TCP\". * \"PROXY\".\n\nThe empty string specifies the default, which is TCP without PROXY protocol. Note that the default is subject to change.",
- "type": "string"
+ "sshkey": {
+ "description": "sshkey is the overall sshkey MachineConfig definition",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatusSSHKey"
},
- "statsPort": {
- "description": "statsPort is the port on the host where the stats from the router are published. The value should not coincide with the NodePort range of the cluster. If an external load balancer is configured to forward connections to this IngressController, the load balancer should use this port for health checks. The load balancer can send HTTP probes on this port on a given node, with the path /healthz/ready to determine if the ingress controller is ready to receive traffic on the node. For proper operation the load balancer must not forward traffic to a node until the health check reports ready. The load balancer should also stop forwarding requests within a maximum of 45 seconds after /healthz/ready starts reporting not-ready. Probing every 5 to 10 seconds, with a 5-second timeout and with a threshold of two successful or failed requests to become healthy or unhealthy respectively, are well-tested values. When the value is 0 or is not specified it defaults to 1936.",
- "type": "integer",
- "format": "int32"
+ "units": {
+ "description": "units is a list MachineConfig unit definitions and actions to take on changes to those services",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatusUnit"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "HostNetworkStrategy",
+ "Kind": "NodeDisruptionPolicyClusterStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.HybridOverlayConfig": {
+ "io.openshift.operator.v1.NodeDisruptionPolicyConfig": {
+ "description": "NodeDisruptionPolicyConfig is the overall spec definition for files/units/sshkeys",
"type": "object",
- "required": [
- "hybridClusterNetwork"
- ],
"properties": {
- "hybridClusterNetwork": {
- "description": "HybridClusterNetwork defines a network space given to nodes on an additional overlay network.",
+ "files": {
+ "description": "files is a list of MachineConfig file definitions and actions to take to changes on those paths This list supports a maximum of 50 entries.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ClusterNetworkEntry"
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicySpecFile"
},
- "x-kubernetes-list-type": "atomic"
+ "x-kubernetes-list-map-keys": [
+ "path"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "hybridOverlayVXLANPort": {
- "description": "HybridOverlayVXLANPort defines the VXLAN port number to be used by the additional overlay network. Default is 4789",
- "type": "integer",
- "format": "int64"
+ "sshkey": {
+ "description": "sshkey maps to the ignition.sshkeys field in the MachineConfig object, definition an action for this will apply to all sshkey changes in the cluster",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicySpecSSHKey"
+ },
+ "units": {
+ "description": "units is a list MachineConfig unit definitions and actions to take on changes to those services This list supports a maximum of 50 entries.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicySpecUnit"
+ },
+ "x-kubernetes-list-map-keys": [
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "HybridOverlayConfig",
+ "Kind": "NodeDisruptionPolicyConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.IBMCloudCSIDriverConfigSpec": {
- "description": "IBMCloudCSIDriverConfigSpec defines the properties that can be configured for the IBM Cloud CSI driver.",
+ "io.openshift.operator.v1.NodeDisruptionPolicySpecAction": {
"type": "object",
"required": [
- "encryptionKeyCRN"
+ "type"
],
"properties": {
- "encryptionKeyCRN": {
- "description": "encryptionKeyCRN is the IBM Cloud CRN of the customer-managed root key to use for disk encryption of volumes for the default storage classes.",
+ "reload": {
+ "description": "reload specifies the service to reload, only valid if type is reload",
+ "$ref": "#/definitions/io.openshift.operator.v1.ReloadService"
+ },
+ "restart": {
+ "description": "restart specifies the service to restart, only valid if type is restart",
+ "$ref": "#/definitions/io.openshift.operator.v1.RestartService"
+ },
+ "type": {
+ "description": "type represents the commands that will be carried out if this NodeDisruptionPolicySpecActionType is executed Valid values are Reboot, Drain, Reload, Restart, DaemonReload and None. reload/restart requires a corresponding service target specified in the reload/restart field. Other values require no further configuration",
"type": "string",
"default": ""
}
@@ -103640,40 +109002,38 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IBMCloudCSIDriverConfigSpec",
+ "Kind": "NodeDisruptionPolicySpecAction",
"Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.IBMLoadBalancerParameters": {
- "description": "IBMLoadBalancerParameters provides configuration settings that are specific to IBM Cloud load balancers.",
- "type": "object",
- "properties": {
- "protocol": {
- "description": "protocol specifies whether the load balancer uses PROXY protocol to forward connections to the IngressController. See \"service.kubernetes.io/ibm-load-balancer-cloud-provider-enable-features: \"proxy-protocol\"\" at https://cloud.ibm.com/docs/containers?topic=containers-vpc-lbaas\"\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nValid values for protocol are TCP, PROXY and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is TCP, without the proxy protocol enabled.",
- "type": "string"
- }
},
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "IBMLoadBalancerParameters",
- "Scope": "Namespaced"
- }
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "reload": "Reload",
+ "restart": "Restart"
+ }
+ }
+ ]
},
- "io.openshift.operator.v1.IPAMConfig": {
- "description": "IPAMConfig contains configurations for IPAM (IP Address Management)",
+ "io.openshift.operator.v1.NodeDisruptionPolicySpecFile": {
+ "description": "NodeDisruptionPolicySpecFile is a file entry and corresponding actions to take and is used in the NodeDisruptionPolicyConfig object",
"type": "object",
"required": [
- "type"
+ "path",
+ "actions"
],
"properties": {
- "staticIPAMConfig": {
- "description": "StaticIPAMConfig configures the static IP address in case of type:IPAMTypeStatic",
- "$ref": "#/definitions/io.openshift.operator.v1.StaticIPAMConfig"
+ "actions": {
+ "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicySpecAction"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "type": {
- "description": "Type is the type of IPAM module will be used for IP Address Management(IPAM). The supported values are IPAMTypeDHCP, IPAMTypeStatic",
+ "path": {
+ "description": "path is the location of a file being managed through a MachineConfig. The Actions in the policy will apply to changes to the file at this path.",
"type": "string",
"default": ""
}
@@ -103682,19 +109042,23 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IPAMConfig",
+ "Kind": "NodeDisruptionPolicySpecFile",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.IPFIXConfig": {
+ "io.openshift.operator.v1.NodeDisruptionPolicySpecSSHKey": {
+ "description": "NodeDisruptionPolicySpecSSHKey is actions to take for any SSHKey change and is used in the NodeDisruptionPolicyConfig object",
"type": "object",
+ "required": [
+ "actions"
+ ],
"properties": {
- "collectors": {
- "description": "ipfixCollectors is list of strings formatted as ip:port with a maximum of ten items",
+ "actions": {
+ "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicySpecAction"
},
"x-kubernetes-list-type": "atomic"
}
@@ -103703,111 +109067,74 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IPFIXConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.IPsecConfig": {
- "type": "object",
- "properties": {
- "mode": {
- "description": "mode defines the behaviour of the ipsec configuration within the platform. Valid values are `Disabled`, `External` and `Full`. When 'Disabled', ipsec will not be enabled at the node level. When 'External', ipsec is enabled on the node level but requires the user to configure the secure communication parameters. This mode is for external secure communications and the configuration can be done using the k8s-nmstate operator. When 'Full', ipsec is configured on the node level and inter-pod secure communication within the cluster is configured. Note with `Full`, if ipsec is desired for communication with external (to the cluster) entities (such as storage arrays), this is left to the user to configure.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "IPsecConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.IPv4GatewayConfig": {
- "description": "IPV4GatewayConfig holds the configuration paramaters for IPV4 connections in the GatewayConfig for OVN-Kubernetes",
- "type": "object",
- "properties": {
- "internalMasqueradeSubnet": {
- "description": "internalMasqueradeSubnet contains the masquerade addresses in IPV4 CIDR format used internally by ovn-kubernetes to enable host to service traffic. Each host in the cluster is configured with these addresses, as well as the shared gateway bridge interface. The values can be changed after installation. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. Additionally the subnet must be large enough to accommodate 6 IPs (maximum prefix length /29). When omitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The current default subnet is 169.254.169.0/29 The value must be in proper IPV4 CIDR format",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "IPv4GatewayConfig",
+ "Kind": "NodeDisruptionPolicySpecSSHKey",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.IPv4OVNKubernetesConfig": {
+ "io.openshift.operator.v1.NodeDisruptionPolicySpecUnit": {
+ "description": "NodeDisruptionPolicySpecUnit is a systemd unit name and corresponding actions to take and is used in the NodeDisruptionPolicyConfig object",
"type": "object",
+ "required": [
+ "name",
+ "actions"
+ ],
"properties": {
- "internalJoinSubnet": {
- "description": "internalJoinSubnet is a v4 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. The value cannot be changed after installation. The current default value is 100.64.0.0/16 The subnet must be large enough to accomadate one IP per node in your cluster The value must be in proper IPV4 CIDR format",
- "type": "string"
+ "actions": {
+ "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicySpecAction"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "internalTransitSwitchSubnet": {
- "description": "internalTransitSwitchSubnet is a v4 subnet in IPV4 CIDR format used internally by OVN-Kubernetes for the distributed transit switch in the OVN Interconnect architecture that connects the cluster routers on each node together to enable east west traffic. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. The value cannot be changed after installation. When ommitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The current default subnet is 100.88.0.0/16 The subnet must be large enough to accomadate one IP per node in your cluster The value must be in proper IPV4 CIDR format",
- "type": "string"
+ "name": {
+ "description": "name represents the service name of a systemd service managed through a MachineConfig Actions specified will be applied for changes to the named service. Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IPv4OVNKubernetesConfig",
+ "Kind": "NodeDisruptionPolicySpecUnit",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.IPv6GatewayConfig": {
- "description": "IPV6GatewayConfig holds the configuration paramaters for IPV6 connections in the GatewayConfig for OVN-Kubernetes",
+ "io.openshift.operator.v1.NodeDisruptionPolicyStatus": {
"type": "object",
"properties": {
- "internalMasqueradeSubnet": {
- "description": "internalMasqueradeSubnet contains the masquerade addresses in IPV6 CIDR format used internally by ovn-kubernetes to enable host to service traffic. Each host in the cluster is configured with these addresses, as well as the shared gateway bridge interface. The values can be changed after installation. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. Additionally the subnet must be large enough to accommodate 6 IPs (maximum prefix length /125). When omitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The current default subnet is fd69::/125 Note that IPV6 dual addresses are not permitted",
- "type": "string"
+ "clusterPolicies": {
+ "description": "clusterPolicies is a merge of cluster default and user provided node disruption policies.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyClusterStatus"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IPv6GatewayConfig",
+ "Kind": "NodeDisruptionPolicyStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.IPv6OVNKubernetesConfig": {
+ "io.openshift.operator.v1.NodeDisruptionPolicyStatusAction": {
"type": "object",
+ "required": [
+ "type"
+ ],
"properties": {
- "internalJoinSubnet": {
- "description": "internalJoinSubnet is a v6 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. The value cannot be changed after installation. The subnet must be large enough to accomadate one IP per node in your cluster The current default value is fd98::/48 The value must be in proper IPV6 CIDR format Note that IPV6 dual addresses are not permitted",
- "type": "string"
+ "reload": {
+ "description": "reload specifies the service to reload, only valid if type is reload",
+ "$ref": "#/definitions/io.openshift.operator.v1.ReloadService"
},
- "internalTransitSwitchSubnet": {
- "description": "internalTransitSwitchSubnet is a v4 subnet in IPV4 CIDR format used internally by OVN-Kubernetes for the distributed transit switch in the OVN Interconnect architecture that connects the cluster routers on each node together to enable east west traffic. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. The value cannot be changed after installation. When ommitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The subnet must be large enough to accomadate one IP per node in your cluster The current default subnet is fd97::/64 The value must be in proper IPV6 CIDR format Note that IPV6 dual addresses are not permitted",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "IPv6OVNKubernetesConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.Ingress": {
- "description": "Ingress allows cluster admin to configure alternative ingress for the console.",
- "type": "object",
- "properties": {
- "clientDownloadsURL": {
- "description": "clientDownloadsURL is a URL to be used as the address to download client binaries. If not specified, the downloads route hostname will be used. This field is required for clusters without ingress capability, where access to routes is not possible. The console operator will monitor the URL and may go degraded if it's unreachable for an extended period. Must use the HTTPS scheme.",
- "type": "string",
- "default": ""
+ "restart": {
+ "description": "restart specifies the service to restart, only valid if type is restart",
+ "$ref": "#/definitions/io.openshift.operator.v1.RestartService"
},
- "consoleURL": {
- "description": "consoleURL is a URL to be used as the base console address. If not specified, the console route hostname will be used. This field is required for clusters without ingress capability, where access to routes is not possible. Make sure that appropriate ingress is set up at this URL. The console operator will monitor the URL and may go degraded if it's unreachable for an extended period. Must use the HTTPS scheme.",
+ "type": {
+ "description": "type represents the commands that will be carried out if this NodeDisruptionPolicyStatusActionType is executed Valid values are Reboot, Drain, Reload, Restart, DaemonReload, None and Special. reload/restart requires a corresponding service target specified in the reload/restart field. Other values require no further configuration",
"type": "string",
"default": ""
}
@@ -103816,71 +109143,38 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "Ingress",
+ "Kind": "NodeDisruptionPolicyStatusAction",
"Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.IngressController": {
- "description": "IngressController describes a managed ingress controller for the cluster. The controller can service OpenShift Route and Kubernetes Ingress resources.\n\nWhen an IngressController is created, a new ingress controller deployment is created to allow external traffic to reach the services that expose Ingress or Route resources. Updating this resource may lead to disruption for public facing network connections as a new ingress controller revision may be rolled out.\n\nhttps://kubernetes.io/docs/concepts/services-networking/ingress-controllers\n\nWhenever possible, sensible defaults for the platform are used. See each field for more details.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
- "type": "object",
- "properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec is the specification of the desired behavior of the IngressController.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerSpec"
- },
- "status": {
- "description": "status is the most recently observed status of the IngressController.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerStatus"
- }
},
- "x-fabric8-info": {
- "Type": "object",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "IngressController",
- "Scope": "Namespaced"
- }
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "reload": "Reload",
+ "restart": "Restart"
+ }
+ }
+ ]
},
- "io.openshift.operator.v1.IngressControllerCaptureHTTPCookie": {
- "description": "IngressControllerCaptureHTTPCookie describes an HTTP cookie that should be captured.",
+ "io.openshift.operator.v1.NodeDisruptionPolicyStatusFile": {
+ "description": "NodeDisruptionPolicyStatusFile is a file entry and corresponding actions to take and is used in the NodeDisruptionPolicyClusterStatus object",
"type": "object",
"required": [
- "matchType",
- "maxLength"
+ "path",
+ "actions"
],
"properties": {
- "matchType": {
- "description": "matchType specifies the type of match to be performed on the cookie name. Allowed values are \"Exact\" for an exact string match and \"Prefix\" for a string prefix match. If \"Exact\" is specified, a name must be specified in the name field. If \"Prefix\" is provided, a prefix must be specified in the namePrefix field. For example, specifying matchType \"Prefix\" and namePrefix \"foo\" will capture a cookie named \"foo\" or \"foobar\" but not one named \"bar\". The first matching cookie is captured.",
- "type": "string"
- },
- "maxLength": {
- "description": "maxLength specifies a maximum length of the string that will be logged, which includes the cookie name, cookie value, and one-character delimiter. If the log entry exceeds this length, the value will be truncated in the log message. Note that the ingress controller may impose a separate bound on the total length of HTTP headers in a request.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "name": {
- "description": "name specifies a cookie name. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.",
- "type": "string",
- "default": ""
+ "actions": {
+ "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatusAction"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "namePrefix": {
- "description": "namePrefix specifies a cookie name prefix. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.",
+ "path": {
+ "description": "path is the location of a file being managed through a MachineConfig. The Actions in the policy will apply to changes to the file at this path.",
"type": "string",
"default": ""
}
@@ -103889,74 +109183,54 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IngressControllerCaptureHTTPCookie",
+ "Kind": "NodeDisruptionPolicyStatusFile",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "matchType",
- "fields-to-discriminateBy": {
- "name": "Name",
- "namePrefix": "NamePrefix"
- }
- }
- ]
+ }
},
- "io.openshift.operator.v1.IngressControllerCaptureHTTPCookieUnion": {
- "description": "IngressControllerCaptureHTTPCookieUnion describes optional fields of an HTTP cookie that should be captured.",
+ "io.openshift.operator.v1.NodeDisruptionPolicyStatusSSHKey": {
+ "description": "NodeDisruptionPolicyStatusSSHKey is actions to take for any SSHKey change and is used in the NodeDisruptionPolicyClusterStatus object",
"type": "object",
"required": [
- "matchType"
+ "actions"
],
"properties": {
- "matchType": {
- "description": "matchType specifies the type of match to be performed on the cookie name. Allowed values are \"Exact\" for an exact string match and \"Prefix\" for a string prefix match. If \"Exact\" is specified, a name must be specified in the name field. If \"Prefix\" is provided, a prefix must be specified in the namePrefix field. For example, specifying matchType \"Prefix\" and namePrefix \"foo\" will capture a cookie named \"foo\" or \"foobar\" but not one named \"bar\". The first matching cookie is captured.",
- "type": "string"
- },
- "name": {
- "description": "name specifies a cookie name. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.",
- "type": "string",
- "default": ""
- },
- "namePrefix": {
- "description": "namePrefix specifies a cookie name prefix. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.",
- "type": "string",
- "default": ""
+ "actions": {
+ "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatusAction"
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IngressControllerCaptureHTTPCookieUnion",
+ "Kind": "NodeDisruptionPolicyStatusSSHKey",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "matchType",
- "fields-to-discriminateBy": {
- "name": "Name",
- "namePrefix": "NamePrefix"
- }
- }
- ]
+ }
},
- "io.openshift.operator.v1.IngressControllerCaptureHTTPHeader": {
- "description": "IngressControllerCaptureHTTPHeader describes an HTTP header that should be captured.",
+ "io.openshift.operator.v1.NodeDisruptionPolicyStatusUnit": {
+ "description": "NodeDisruptionPolicyStatusUnit is a systemd unit name and corresponding actions to take and is used in the NodeDisruptionPolicyClusterStatus object",
"type": "object",
"required": [
"name",
- "maxLength"
+ "actions"
],
"properties": {
- "maxLength": {
- "description": "maxLength specifies a maximum length for the header value. If a header value exceeds this length, the value will be truncated in the log message. Note that the ingress controller may impose a separate bound on the total length of HTTP headers in a request.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "actions": {
+ "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatusAction"
+ },
+ "x-kubernetes-list-type": "atomic"
},
"name": {
- "description": "name specifies a header name. Its value must be a valid HTTP header name as defined in RFC 2616 section 4.2.",
+ "description": "name represents the service name of a systemd service managed through a MachineConfig Actions specified will be applied for changes to the named service. Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".",
"type": "string",
"default": ""
}
@@ -103965,29 +109239,24 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IngressControllerCaptureHTTPHeader",
+ "Kind": "NodeDisruptionPolicyStatusUnit",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.IngressControllerCaptureHTTPHeaders": {
- "description": "IngressControllerCaptureHTTPHeaders specifies which HTTP headers the IngressController captures.",
+ "io.openshift.operator.v1.NodePlacement": {
+ "description": "NodePlacement describes node scheduling configuration for an ingress controller.",
"type": "object",
"properties": {
- "request": {
- "description": "request specifies which HTTP request headers to capture.\n\nIf this field is empty, no request headers are captured.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerCaptureHTTPHeader"
- },
- "x-kubernetes-list-type": "atomic"
+ "nodeSelector": {
+ "description": "nodeSelector is the node selector applied to ingress controller deployments.\n\nIf set, the specified selector is used and replaces the default.\n\nIf unset, the default depends on the value of the defaultPlacement field in the cluster config.openshift.io/v1/ingresses status.\n\nWhen defaultPlacement is Workers, the default is:\n\n kubernetes.io/os: linux\n node-role.kubernetes.io/worker: ''\n\nWhen defaultPlacement is ControlPlane, the default is:\n\n kubernetes.io/os: linux\n node-role.kubernetes.io/master: ''\n\nThese defaults are subject to change.\n\nNote that using nodeSelector.matchExpressions is not supported. Only nodeSelector.matchLabels may be used. This is a limitation of the Kubernetes API: the pod spec does not allow complex expressions for node selectors.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
},
- "response": {
- "description": "response specifies which HTTP response headers to capture.\n\nIf this field is empty, no response headers are captured.",
+ "tolerations": {
+ "description": "tolerations is a list of tolerations applied to ingress controller deployments.\n\nThe default is an empty list.\n\nSee https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerCaptureHTTPHeader"
+ "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
},
"x-kubernetes-list-type": "atomic"
}
@@ -103996,168 +109265,221 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IngressControllerCaptureHTTPHeaders",
+ "Kind": "NodePlacement",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.IngressControllerHTTPHeader": {
- "description": "IngressControllerHTTPHeader specifies configuration for setting or deleting an HTTP header.",
+ "io.openshift.operator.v1.NodePortStrategy": {
+ "description": "NodePortStrategy holds parameters for the NodePortService endpoint publishing strategy.",
"type": "object",
- "required": [
- "name",
- "action"
- ],
"properties": {
- "action": {
- "description": "action specifies actions to perform on headers, such as setting or deleting headers.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerHTTPHeaderActionUnion"
- },
- "name": {
- "description": "name specifies the name of a header on which to perform an action. Its value must be a valid HTTP header name as defined in RFC 2616 section 4.2. The name must consist only of alphanumeric and the following special characters, \"-!#$%\u0026'*+.^_`\". The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Host, Cookie, Set-Cookie. It must be no more than 255 characters in length. Header name must be unique.",
- "type": "string",
- "default": ""
+ "protocol": {
+ "description": "protocol specifies whether the IngressController expects incoming connections to use plain TCP or whether the IngressController expects PROXY protocol.\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nThe following values are valid for this field:\n\n* The empty string. * \"TCP\". * \"PROXY\".\n\nThe empty string specifies the default, which is TCP without PROXY protocol. Note that the default is subject to change.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IngressControllerHTTPHeader",
+ "Kind": "NodePortStrategy",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.IngressControllerHTTPHeaderActionUnion": {
- "description": "IngressControllerHTTPHeaderActionUnion specifies an action to take on an HTTP header.",
+ "io.openshift.operator.v1.NodeStatus": {
+ "description": "NodeStatus provides information about the current state of a particular node managed by this operator.",
"type": "object",
"required": [
- "type"
+ "nodeName",
+ "currentRevision"
],
"properties": {
- "set": {
- "description": "set specifies how the HTTP header should be set. This field is required when type is Set and forbidden otherwise.",
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerSetHTTPHeader"
+ "currentRevision": {
+ "description": "currentRevision is the generation of the most recently successful deployment",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "type": {
- "description": "type defines the type of the action to be applied on the header. Possible values are Set or Delete. Set allows you to set HTTP request and response headers. Delete allows you to delete HTTP request and response headers.",
+ "lastFailedCount": {
+ "description": "lastFailedCount is how often the installer pod of the last failed revision failed.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "lastFailedReason": {
+ "description": "lastFailedReason is a machine readable failure reason string.",
+ "type": "string"
+ },
+ "lastFailedRevision": {
+ "description": "lastFailedRevision is the generation of the deployment we tried and failed to deploy.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "lastFailedRevisionErrors": {
+ "description": "lastFailedRevisionErrors is a list of human readable errors during the failed deployment referenced in lastFailedRevision.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "lastFailedTime": {
+ "description": "lastFailedTime is the time the last failed revision failed the last time.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "lastFallbackCount": {
+ "description": "lastFallbackCount is how often a fallback to a previous revision happened.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "nodeName": {
+ "description": "nodeName is the name of the node",
"type": "string",
"default": ""
+ },
+ "targetRevision": {
+ "description": "targetRevision is the generation of the deployment we're trying to apply",
+ "type": "integer",
+ "format": "int32"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IngressControllerHTTPHeaderActionUnion",
+ "Kind": "NodeStatus",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "set": "Set"
- }
- }
- ]
+ }
},
- "io.openshift.operator.v1.IngressControllerHTTPHeaderActions": {
- "description": "IngressControllerHTTPHeaderActions defines configuration for actions on HTTP request and response headers.",
+ "io.openshift.operator.v1.OAuthAPIServerStatus": {
"type": "object",
"properties": {
- "request": {
- "description": "request is a list of HTTP request headers to modify. Actions defined here will modify the request headers of all requests passing through an ingress controller. These actions are applied to all Routes i.e. for all connections handled by the ingress controller defined within a cluster. IngressController actions for request headers will be executed before Route actions. Currently, actions may define to either `Set` or `Delete` headers values. Actions are applied in sequence as defined in this list. A maximum of 20 request header actions may be configured. Sample fetchers allowed are \"req.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[req.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\".",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerHTTPHeader"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "response": {
- "description": "response is a list of HTTP response headers to modify. Actions defined here will modify the response headers of all requests passing through an ingress controller. These actions are applied to all Routes i.e. for all connections handled by the ingress controller defined within a cluster. IngressController actions for response headers will be executed after Route actions. Currently, actions may define to either `Set` or `Delete` headers values. Actions are applied in sequence as defined in this list. A maximum of 20 response header actions may be configured. Sample fetchers allowed are \"res.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[res.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\".",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerHTTPHeader"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "latestAvailableRevision": {
+ "description": "LatestAvailableRevision is the latest revision used as suffix of revisioned secrets like encryption-config. A new revision causes a new deployment of pods.",
+ "type": "integer",
+ "format": "int32"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IngressControllerHTTPHeaderActions",
+ "Kind": "OAuthAPIServerStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.IngressControllerHTTPHeaders": {
- "description": "IngressControllerHTTPHeaders specifies how the IngressController handles certain HTTP headers.",
+ "io.openshift.operator.v1.OVNKubernetesConfig": {
+ "description": "ovnKubernetesConfig contains the configuration parameters for networks using the ovn-kubernetes network project",
"type": "object",
"properties": {
- "actions": {
- "description": "actions specifies options for modifying headers and their values. Note that this option only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). Headers cannot be modified for TLS passthrough connections. Setting the HSTS (`Strict-Transport-Security`) header is not supported via actions. `Strict-Transport-Security` may only be configured using the \"haproxy.router.openshift.io/hsts_header\" route annotation, and only in accordance with the policy specified in Ingress.Spec.RequiredHSTSPolicies. Any actions defined here are applied after any actions related to the following other fields: cache-control, spec.clientTLS, spec.httpHeaders.forwardedHeaderPolicy, spec.httpHeaders.uniqueId, and spec.httpHeaders.headerNameCaseAdjustments. In case of HTTP request headers, the actions specified in spec.httpHeaders.actions on the Route will be executed after the actions specified in the IngressController's spec.httpHeaders.actions field. In case of HTTP response headers, the actions specified in spec.httpHeaders.actions on the IngressController will be executed after the actions specified in the Route's spec.httpHeaders.actions field. Headers set using this API cannot be captured for use in access logs. The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Host, Cookie, Set-Cookie. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController. Please refer to the documentation for that API field for more details.",
+ "egressIPConfig": {
+ "description": "egressIPConfig holds the configuration for EgressIP options.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerHTTPHeaderActions"
+ "$ref": "#/definitions/io.openshift.operator.v1.EgressIPConfig"
},
- "forwardedHeaderPolicy": {
- "description": "forwardedHeaderPolicy specifies when and how the IngressController sets the Forwarded, X-Forwarded-For, X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto, and X-Forwarded-Proto-Version HTTP headers. The value may be one of the following:\n\n* \"Append\", which specifies that the IngressController appends the\n headers, preserving existing headers.\n\n* \"Replace\", which specifies that the IngressController sets the\n headers, replacing any existing Forwarded or X-Forwarded-* headers.\n\n* \"IfNone\", which specifies that the IngressController sets the\n headers if they are not already set.\n\n* \"Never\", which specifies that the IngressController never sets the\n headers, preserving any existing headers.\n\nBy default, the policy is \"Append\".",
- "type": "string"
+ "gatewayConfig": {
+ "description": "gatewayConfig holds the configuration for node gateway options.",
+ "$ref": "#/definitions/io.openshift.operator.v1.GatewayConfig"
},
- "headerNameCaseAdjustments": {
- "description": "headerNameCaseAdjustments specifies case adjustments that can be applied to HTTP header names. Each adjustment is specified as an HTTP header name with the desired capitalization. For example, specifying \"X-Forwarded-For\" indicates that the \"x-forwarded-for\" HTTP header should be adjusted to have the specified capitalization.\n\nThese adjustments are only applied to cleartext, edge-terminated, and re-encrypt routes, and only when using HTTP/1.\n\nFor request headers, these adjustments are applied only for routes that have the haproxy.router.openshift.io/h1-adjust-case=true annotation. For response headers, these adjustments are applied to all HTTP responses.\n\nIf this field is empty, no request headers are adjusted.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
+ "genevePort": {
+ "description": "geneve port is the UDP port to be used by geneve encapulation. Default is 6081",
+ "type": "integer",
+ "format": "int64"
+ },
+ "hybridOverlayConfig": {
+ "description": "HybridOverlayConfig configures an additional overlay network for peers that are not using OVN.",
+ "$ref": "#/definitions/io.openshift.operator.v1.HybridOverlayConfig"
+ },
+ "ipsecConfig": {
+ "description": "ipsecConfig enables and configures IPsec for pods on the pod network within the cluster.",
+ "default": {
+ "mode": "Disabled"
},
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/io.openshift.operator.v1.IPsecConfig"
},
- "uniqueId": {
- "description": "uniqueId describes configuration for a custom HTTP header that the ingress controller should inject into incoming HTTP requests. Typically, this header is configured to have a value that is unique to the HTTP request. The header can be used by applications or included in access logs to facilitate tracing individual HTTP requests.\n\nIf this field is empty, no such header is injected into requests.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerHTTPUniqueIdHeaderPolicy"
+ "ipv4": {
+ "description": "ipv4 allows users to configure IP settings for IPv4 connections. When ommitted, this means no opinions and the default configuration is used. Check individual fields within ipv4 for details of default values.",
+ "$ref": "#/definitions/io.openshift.operator.v1.IPv4OVNKubernetesConfig"
+ },
+ "ipv6": {
+ "description": "ipv6 allows users to configure IP settings for IPv6 connections. When ommitted, this means no opinions and the default configuration is used. Check individual fields within ipv4 for details of default values.",
+ "$ref": "#/definitions/io.openshift.operator.v1.IPv6OVNKubernetesConfig"
+ },
+ "mtu": {
+ "description": "mtu is the MTU to use for the tunnel interface. This must be 100 bytes smaller than the uplink mtu. Default is 1400",
+ "type": "integer",
+ "format": "int64"
+ },
+ "policyAuditConfig": {
+ "description": "policyAuditConfig is the configuration for network policy audit events. If unset, reported defaults are used.",
+ "$ref": "#/definitions/io.openshift.operator.v1.PolicyAuditConfig"
+ },
+ "routeAdvertisements": {
+ "description": "routeAdvertisements determines if the functionality to advertise cluster network routes through a dynamic routing protocol, such as BGP, is enabled or not. This functionality is configured through the ovn-kubernetes RouteAdvertisements CRD. Requires the 'FRR' routing capability provider to be enabled as an additional routing capability. Allowed values are \"Enabled\", \"Disabled\" and ommited. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is \"Disabled\".",
+ "type": "string"
+ },
+ "v4InternalSubnet": {
+ "description": "v4InternalSubnet is a v4 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. The value cannot be changed after installation. Default is 100.64.0.0/16",
+ "type": "string"
+ },
+ "v6InternalSubnet": {
+ "description": "v6InternalSubnet is a v6 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. The value cannot be changed after installation. Default is fd98::/48",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IngressControllerHTTPHeaders",
+ "Kind": "OVNKubernetesConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.IngressControllerHTTPUniqueIdHeaderPolicy": {
- "description": "IngressControllerHTTPUniqueIdHeaderPolicy describes configuration for a unique id header.",
+ "io.openshift.operator.v1.OpenShiftAPIServer": {
+ "description": "OpenShiftAPIServer provides information to configure an operator to manage openshift-apiserver.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "metadata",
+ "spec"
+ ],
"properties": {
- "format": {
- "description": "format specifies the format for the injected HTTP header's value. This field has no effect unless name is specified. For the HAProxy-based ingress controller implementation, this format uses the same syntax as the HTTP log format. If the field is empty, the default value is \"%{+X}o\\\\ %ci:%cp_%fi:%fp_%Ts_%rt:%pid\"; see the corresponding HAProxy documentation: http://cbonte.github.io/haproxy-dconv/2.0/configuration.html#8.2.3",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "name": {
- "description": "name specifies the name of the HTTP header (for example, \"unique-id\") that the ingress controller should inject into HTTP requests. The field's value must be a valid HTTP header name as defined in RFC 2616 section 4.2. If the field is empty, no header is injected.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec is the specification of the desired behavior of the OpenShift API Server.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftAPIServerSpec"
+ },
+ "status": {
+ "description": "status defines the observed status of the OpenShift API Server.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftAPIServerStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IngressControllerHTTPUniqueIdHeaderPolicy",
- "Scope": "Namespaced"
+ "Kind": "OpenShiftAPIServer",
+ "Scope": "Clustered"
}
},
- "io.openshift.operator.v1.IngressControllerList": {
- "description": "IngressControllerList contains a list of IngressControllers.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.OpenShiftAPIServerList": {
+ "description": "OpenShiftAPIServerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"items"
],
"properties": {
@@ -104166,10 +109488,11 @@
"type": "string"
},
"items": {
+ "description": "Items contains the items",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IngressController"
+ "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftAPIServer"
}
},
"kind": {
@@ -104186,123 +109509,35 @@
"Type": "list",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IngressControllerList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.IngressControllerLogging": {
- "description": "IngressControllerLogging describes what should be logged where.",
- "type": "object",
- "properties": {
- "access": {
- "description": "access describes how the client requests should be logged.\n\nIf this field is empty, access logging is disabled.",
- "$ref": "#/definitions/io.openshift.operator.v1.AccessLogging"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "IngressControllerLogging",
+ "Kind": "OpenShiftAPIServerList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.IngressControllerSetHTTPHeader": {
- "description": "IngressControllerSetHTTPHeader defines the value which needs to be set on an HTTP header.",
+ "io.openshift.operator.v1.OpenShiftAPIServerSpec": {
"type": "object",
"required": [
- "value"
+ "managementState"
],
"properties": {
- "value": {
- "description": "value specifies a header value. Dynamic values can be added. The value will be interpreted as an HAProxy format string as defined in http://cbonte.github.io/haproxy-dconv/2.6/configuration.html#8.2.6 and may use HAProxy's %[] syntax and otherwise must be a valid HTTP header value as defined in https://datatracker.ietf.org/doc/html/rfc7230#section-3.2. The value of this field must be no more than 16384 characters in length. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "IngressControllerSetHTTPHeader",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.IngressControllerSpec": {
- "description": "IngressControllerSpec is the specification of the desired behavior of the IngressController.",
- "type": "object",
- "properties": {
- "clientTLS": {
- "description": "clientTLS specifies settings for requesting and verifying client certificates, which can be used to enable mutual TLS for edge-terminated and reencrypt routes.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ClientTLS"
- },
- "defaultCertificate": {
- "description": "defaultCertificate is a reference to a secret containing the default certificate served by the ingress controller. When Routes don't specify their own certificate, defaultCertificate is used.\n\nThe secret must contain the following keys and data:\n\n tls.crt: certificate file contents\n tls.key: key file contents\n\nIf unset, a wildcard certificate is automatically generated and used. The certificate is valid for the ingress controller domain (and subdomains) and the generated certificate's CA will be automatically integrated with the cluster's trust store.\n\nIf a wildcard certificate is used and shared by multiple HTTP/2 enabled routes (which implies ALPN) then clients (i.e., notably browsers) are at liberty to reuse open connections. This means a client can reuse a connection to another route and that is likely to fail. This behaviour is generally known as connection coalescing.\n\nThe in-use certificate (whether generated or user-specified) will be automatically integrated with OpenShift's built-in OAuth server.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
- },
- "domain": {
- "description": "domain is a DNS name serviced by the ingress controller and is used to configure multiple features:\n\n* For the LoadBalancerService endpoint publishing strategy, domain is\n used to configure DNS records. See endpointPublishingStrategy.\n\n* When using a generated default certificate, the certificate will be valid\n for domain and its subdomains. See defaultCertificate.\n\n* The value is published to individual Route statuses so that end-users\n know where to target external DNS records.\n\ndomain must be unique among all IngressControllers, and cannot be updated.\n\nIf empty, defaults to ingress.config.openshift.io/cluster .spec.domain.",
+ "logLevel": {
+ "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "endpointPublishingStrategy": {
- "description": "endpointPublishingStrategy is used to publish the ingress controller endpoints to other networks, enable load balancer integrations, etc.\n\nIf unset, the default is based on infrastructure.config.openshift.io/cluster .status.platform:\n\n AWS: LoadBalancerService (with External scope)\n Azure: LoadBalancerService (with External scope)\n GCP: LoadBalancerService (with External scope)\n IBMCloud: LoadBalancerService (with External scope)\n AlibabaCloud: LoadBalancerService (with External scope)\n Libvirt: HostNetwork\n\nAny other platform types (including None) default to HostNetwork.\n\nendpointPublishingStrategy cannot be updated.",
- "$ref": "#/definitions/io.openshift.operator.v1.EndpointPublishingStrategy"
+ "managementState": {
+ "description": "managementState indicates whether and how the operator should manage the component",
+ "type": "string",
+ "default": ""
},
- "httpCompression": {
- "description": "httpCompression defines a policy for HTTP traffic compression. By default, there is no HTTP compression.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.HTTPCompressionPolicy"
+ "observedConfig": {
+ "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
},
- "httpEmptyRequestsPolicy": {
- "description": "httpEmptyRequestsPolicy describes how HTTP connections should be handled if the connection times out before a request is received. Allowed values for this field are \"Respond\" and \"Ignore\". If the field is set to \"Respond\", the ingress controller sends an HTTP 400 or 408 response, logs the connection (if access logging is enabled), and counts the connection in the appropriate metrics. If the field is set to \"Ignore\", the ingress controller closes the connection without sending a response, logging the connection, or incrementing metrics. The default value is \"Respond\".\n\nTypically, these connections come from load balancers' health probes or Web browsers' speculative connections (\"preconnect\") and can be safely ignored. However, these requests may also be caused by network errors, and so setting this field to \"Ignore\" may impede detection and diagnosis of problems. In addition, these requests may be caused by port scans, in which case logging empty requests may aid in detecting intrusion attempts.",
+ "operatorLogLevel": {
+ "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "httpErrorCodePages": {
- "description": "httpErrorCodePages specifies a configmap with custom error pages. The administrator must create this configmap in the openshift-config namespace. This configmap should have keys in the format \"error-page-\u003cerror code\u003e.http\", where \u003cerror code\u003e is an HTTP error code. For example, \"error-page-503.http\" defines an error page for HTTP 503 responses. Currently only error pages for 503 and 404 responses can be customized. Each value in the configmap should be the full response, including HTTP headers. Eg- https://raw.githubusercontent.com/openshift/router/fadab45747a9b30cc3f0a4b41ad2871f95827a93/images/router/haproxy/conf/error-page-503.http If this field is empty, the ingress controller uses the default error pages.",
- "default": {},
- "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference"
- },
- "httpHeaders": {
- "description": "httpHeaders defines policy for HTTP headers.\n\nIf this field is empty, the default values are used.",
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerHTTPHeaders"
- },
- "logging": {
- "description": "logging defines parameters for what should be logged where. If this field is empty, operational logs are enabled but access logs are disabled.",
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerLogging"
- },
- "namespaceSelector": {
- "description": "namespaceSelector is used to filter the set of namespaces serviced by the ingress controller. This is useful for implementing shards.\n\nIf unset, the default is no filtering.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
- },
- "nodePlacement": {
- "description": "nodePlacement enables explicit control over the scheduling of the ingress controller.\n\nIf unset, defaults are used. See NodePlacement for more details.",
- "$ref": "#/definitions/io.openshift.operator.v1.NodePlacement"
- },
- "replicas": {
- "description": "replicas is the desired number of ingress controller replicas. If unset, the default depends on the value of the defaultPlacement field in the cluster config.openshift.io/v1/ingresses status.\n\nThe value of replicas is set based on the value of a chosen field in the Infrastructure CR. If defaultPlacement is set to ControlPlane, the chosen field will be controlPlaneTopology. If it is set to Workers the chosen field will be infrastructureTopology. Replicas will then be set to 1 or 2 based whether the chosen field's value is SingleReplica or HighlyAvailable, respectively.\n\nThese defaults are subject to change.",
- "type": "integer",
- "format": "int32"
- },
- "routeAdmission": {
- "description": "routeAdmission defines a policy for handling new route claims (for example, to allow or deny claims across namespaces).\n\nIf empty, defaults will be applied. See specific routeAdmission fields for details about their defaults.",
- "$ref": "#/definitions/io.openshift.operator.v1.RouteAdmissionPolicy"
- },
- "routeSelector": {
- "description": "routeSelector is used to filter the set of Routes serviced by the ingress controller. This is useful for implementing shards.\n\nIf unset, the default is no filtering.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
- },
- "tlsSecurityProfile": {
- "description": "tlsSecurityProfile specifies settings for TLS connections for ingresscontrollers.\n\nIf unset, the default is based on the apiservers.config.openshift.io/cluster resource.\n\nNote that when using the Old, Intermediate, and Modern profile types, the effective profile configuration is subject to change between releases. For example, given a specification to use the Intermediate profile deployed on release X.Y.Z, an upgrade to release X.Y.Z+1 may cause a new profile configuration to be applied to the ingress controller, resulting in a rollout.",
- "$ref": "#/definitions/io.openshift.config.v1.TLSSecurityProfile"
- },
- "tuningOptions": {
- "description": "tuningOptions defines parameters for adjusting the performance of ingress controller pods. All fields are optional and will use their respective defaults if not set. See specific tuningOptions fields for more details.\n\nSetting fields within tuningOptions is generally not recommended. The default values are suitable for most configurations.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.IngressControllerTuningOptions"
- },
"unsupportedConfigOverrides": {
- "description": "unsupportedConfigOverrides allows specifying unsupported configuration options. Its use is unsupported.",
+ "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
@@ -104310,27 +109545,18 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IngressControllerSpec",
+ "Kind": "OpenShiftAPIServerSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.IngressControllerStatus": {
- "description": "IngressControllerStatus defines the observed status of the IngressController.",
+ "io.openshift.operator.v1.OpenShiftAPIServerStatus": {
"type": "object",
"required": [
- "availableReplicas",
- "selector",
- "domain"
+ "readyReplicas"
],
"properties": {
- "availableReplicas": {
- "description": "availableReplicas is number of observed available replicas according to the ingress controller deployment.",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
"conditions": {
- "description": "conditions is a list of conditions and their status.\n\nAvailable means the ingress controller deployment is available and servicing route and ingress resources (i.e, .status.availableReplicas equals .spec.replicas)\n\nThere are additional conditions which indicate the status of other ingress controller features and capabilities.\n\n * LoadBalancerManaged\n - True if the following conditions are met:\n * The endpoint publishing strategy requires a service load balancer.\n - False if any of those conditions are unsatisfied.\n\n * LoadBalancerReady\n - True if the following conditions are met:\n * A load balancer is managed.\n * The load balancer is ready.\n - False if any of those conditions are unsatisfied.\n\n * DNSManaged\n - True if the following conditions are met:\n * The endpoint publishing strategy and platform support DNS.\n * The ingress controller domain is set.\n * dns.config.openshift.io/cluster configures DNS zones.\n - False if any of those conditions are unsatisfied.\n\n * DNSReady\n - True if the following conditions are met:\n * DNS is managed.\n * DNS records have been successfully created.\n - False if any of those conditions are unsatisfied.",
+ "description": "conditions is a list of conditions and their status",
"type": "array",
"items": {
"default": {},
@@ -104341,117 +109567,52 @@
],
"x-kubernetes-list-type": "map"
},
- "domain": {
- "description": "domain is the actual domain in use.",
- "type": "string",
- "default": ""
- },
- "endpointPublishingStrategy": {
- "description": "endpointPublishingStrategy is the actual strategy in use.",
- "$ref": "#/definitions/io.openshift.operator.v1.EndpointPublishingStrategy"
- },
- "namespaceSelector": {
- "description": "namespaceSelector is the actual namespaceSelector in use.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
- },
- "observedGeneration": {
- "description": "observedGeneration is the most recent generation observed.",
- "type": "integer",
- "format": "int64"
- },
- "routeSelector": {
- "description": "routeSelector is the actual routeSelector in use.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
- },
- "selector": {
- "description": "selector is a label selector, in string format, for ingress controller pods corresponding to the IngressController. The number of matching pods should equal the value of availableReplicas.",
- "type": "string",
- "default": ""
- },
- "tlsProfile": {
- "description": "tlsProfile is the TLS connection configuration that is in effect.",
- "$ref": "#/definitions/io.openshift.config.v1.TLSProfileSpec"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "IngressControllerStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.IngressControllerTuningOptions": {
- "description": "IngressControllerTuningOptions specifies options for tuning the performance of ingress controller pods",
- "type": "object",
- "properties": {
- "clientFinTimeout": {
- "description": "clientFinTimeout defines how long a connection will be held open while waiting for the client response to the server/backend closing the connection.\n\nIf unset, the default timeout is 1s",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "clientTimeout": {
- "description": "clientTimeout defines how long a connection will be held open while waiting for a client response.\n\nIf unset, the default timeout is 30s",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "connectTimeout": {
- "description": "ConnectTimeout defines the maximum time to wait for a connection attempt to a server/backend to succeed.\n\nThis field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\" U+00B5 or \"μs\" U+03BC), \"ms\", \"s\", \"m\", \"h\".\n\nWhen omitted, this means the user has no opinion and the platform is left to choose a reasonable default. This default is subject to change over time. The current default is 5s.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "headerBufferBytes": {
- "description": "headerBufferBytes describes how much memory should be reserved (in bytes) for IngressController connection sessions. Note that this value must be at least 16384 if HTTP/2 is enabled for the IngressController (https://tools.ietf.org/html/rfc7540). If this field is empty, the IngressController will use a default value of 32768 bytes.\n\nSetting this field is generally not recommended as headerBufferBytes values that are too small may break the IngressController and headerBufferBytes values that are too large could cause the IngressController to use significantly more memory than necessary.",
- "type": "integer",
- "format": "int32"
+ "generations": {
+ "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "group",
+ "resource",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
},
- "headerBufferMaxRewriteBytes": {
- "description": "headerBufferMaxRewriteBytes describes how much memory should be reserved (in bytes) from headerBufferBytes for HTTP header rewriting and appending for IngressController connection sessions. Note that incoming HTTP requests will be limited to (headerBufferBytes - headerBufferMaxRewriteBytes) bytes, meaning headerBufferBytes must be greater than headerBufferMaxRewriteBytes. If this field is empty, the IngressController will use a default value of 8192 bytes.\n\nSetting this field is generally not recommended as headerBufferMaxRewriteBytes values that are too small may break the IngressController and headerBufferMaxRewriteBytes values that are too large could cause the IngressController to use significantly more memory than necessary.",
+ "latestAvailableRevision": {
+ "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
"type": "integer",
"format": "int32"
},
- "healthCheckInterval": {
- "description": "healthCheckInterval defines how long the router waits between two consecutive health checks on its configured backends. This value is applied globally as a default for all routes, but may be overridden per-route by the route annotation \"router.openshift.io/haproxy.health.check.interval\".\n\nExpects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, eg \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\" U+00B5 or \"μs\" U+03BC), \"ms\", \"s\", \"m\", \"h\".\n\nSetting this to less than 5s can cause excess traffic due to too frequent TCP health checks and accompanying SYN packet storms. Alternatively, setting this too high can result in increased latency, due to backend servers that are no longer available, but haven't yet been detected as such.\n\nAn empty or zero healthCheckInterval means no opinion and IngressController chooses a default, which is subject to change over time. Currently the default healthCheckInterval value is 5s.\n\nCurrently the minimum allowed value is 1s and the maximum allowed value is 2147483647ms (24.85 days). Both are subject to change over time.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "maxConnections": {
- "description": "maxConnections defines the maximum number of simultaneous connections that can be established per HAProxy process. Increasing this value allows each ingress controller pod to handle more connections but at the cost of additional system resources being consumed.\n\nPermitted values are: empty, 0, -1, and the range 2000-2000000.\n\nIf this field is empty or 0, the IngressController will use the default value of 50000, but the default is subject to change in future releases.\n\nIf the value is -1 then HAProxy will dynamically compute a maximum value based on the available ulimits in the running container. Selecting -1 (i.e., auto) will result in a large value being computed (~520000 on OpenShift \u003e=4.10 clusters) and therefore each HAProxy process will incur significant memory usage compared to the current default of 50000.\n\nSetting a value that is greater than the current operating system limit will prevent the HAProxy process from starting.\n\nIf you choose a discrete value (e.g., 750000) and the router pod is migrated to a new node, there's no guarantee that that new node has identical ulimits configured. In such a scenario the pod would fail to start. If you have nodes with different ulimits configured (e.g., different tuned profiles) and you choose a discrete value then the guidance is to use -1 and let the value be computed dynamically at runtime.\n\nYou can monitor memory usage for router containers with the following metric: 'container_memory_working_set_bytes{container=\"router\",namespace=\"openshift-ingress\"}'.\n\nYou can monitor memory usage of individual HAProxy processes in router containers with the following metric: 'container_memory_working_set_bytes{container=\"router\",namespace=\"openshift-ingress\"}/container_processes{container=\"router\",namespace=\"openshift-ingress\"}'.",
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
"type": "integer",
- "format": "int32"
- },
- "reloadInterval": {
- "description": "reloadInterval defines the minimum interval at which the router is allowed to reload to accept new changes. Increasing this value can prevent the accumulation of HAProxy processes, depending on the scenario. Increasing this interval can also lessen load imbalance on a backend's servers when using the roundrobin balancing algorithm. Alternatively, decreasing this value may decrease latency since updates to HAProxy's configuration can take effect more quickly.\n\nThe value must be a time duration value; see \u003chttps://pkg.go.dev/time#ParseDuration\u003e. Currently, the minimum value allowed is 1s, and the maximum allowed value is 120s. Minimum and maximum allowed values may change in future versions of OpenShift. Note that if a duration outside of these bounds is provided, the value of reloadInterval will be capped/floored and not rejected (e.g. a duration of over 120s will be capped to 120s; the IngressController will not reject and replace this disallowed value with the default).\n\nA zero value for reloadInterval tells the IngressController to choose the default, which is currently 5s and subject to change without notice.\n\nThis field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\" U+00B5 or \"μs\" U+03BC), \"ms\", \"s\", \"m\", \"h\".\n\nNote: Setting a value significantly larger than the default of 5s can cause latency in observing updates to routes and their endpoints. HAProxy's configuration will be reloaded less frequently, and newly created routes will not be served until the subsequent reload.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "serverFinTimeout": {
- "description": "serverFinTimeout defines how long a connection will be held open while waiting for the server/backend response to the client closing the connection.\n\nIf unset, the default timeout is 1s",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
- },
- "serverTimeout": {
- "description": "serverTimeout defines how long a connection will be held open while waiting for a server/backend response.\n\nIf unset, the default timeout is 30s",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "format": "int64"
},
- "threadCount": {
- "description": "threadCount defines the number of threads created per HAProxy process. Creating more threads allows each ingress controller pod to handle more connections, at the cost of more system resources being used. HAProxy currently supports up to 64 threads. If this field is empty, the IngressController will use the default value. The current default is 4 threads, but this may change in future releases.\n\nSetting this field is generally not recommended. Increasing the number of HAProxy threads allows ingress controller pods to utilize more CPU time under load, potentially starving other pods if set too high. Reducing the number of threads may cause the ingress controller to perform poorly.",
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
"type": "integer",
- "format": "int32"
- },
- "tlsInspectDelay": {
- "description": "tlsInspectDelay defines how long the router can hold data to find a matching route.\n\nSetting this too short can cause the router to fall back to the default certificate for edge-terminated or reencrypt routes even when a better matching certificate could be used.\n\nIf unset, the default inspect delay is 5s",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "format": "int32",
+ "default": 0
},
- "tunnelTimeout": {
- "description": "tunnelTimeout defines how long a tunnel connection (including websockets) will be held open while the tunnel is idle.\n\nIf unset, the default timeout is 1h",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
+ "version": {
+ "description": "version is the level this availability applies to",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "IngressControllerTuningOptions",
+ "Kind": "OpenShiftAPIServerStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.InsightsOperator": {
- "description": "InsightsOperator holds cluster-wide information about the Insights Operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.OpenShiftControllerManager": {
+ "description": "OpenShiftControllerManager provides information to configure an operator to manage openshift-controller-manager.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -104472,26 +109633,24 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec is the specification of the desired behavior of the Insights.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.InsightsOperatorSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftControllerManagerSpec"
},
"status": {
- "description": "status is the most recently observed status of the Insights operator.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.InsightsOperatorStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftControllerManagerStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "InsightsOperator",
+ "Kind": "OpenShiftControllerManager",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.InsightsOperatorList": {
- "description": "InsightsOperatorList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.OpenShiftControllerManagerList": {
+ "description": "OpenShiftControllerManagerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -104503,10 +109662,11 @@
"type": "string"
},
"items": {
+ "description": "Items contains the items",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.InsightsOperator"
+ "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftControllerManager"
}
},
"kind": {
@@ -104523,11 +109683,11 @@
"Type": "list",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "InsightsOperatorList",
+ "Kind": "OpenShiftControllerManagerList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.InsightsOperatorSpec": {
+ "io.openshift.operator.v1.OpenShiftControllerManagerSpec": {
"type": "object",
"required": [
"managementState"
@@ -104559,11 +109719,11 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "InsightsOperatorSpec",
+ "Kind": "OpenShiftControllerManagerSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.InsightsOperatorStatus": {
+ "io.openshift.operator.v1.OpenShiftControllerManagerStatus": {
"type": "object",
"required": [
"readyReplicas"
@@ -104581,11 +109741,6 @@
],
"x-kubernetes-list-type": "map"
},
- "gatherStatus": {
- "description": "gatherStatus provides basic information about the last Insights data gathering. When omitted, this means no data gathering has taken place yet.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GatherStatus"
- },
"generations": {
"description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
"type": "array",
@@ -104601,11 +109756,6 @@
],
"x-kubernetes-list-type": "map"
},
- "insightsReport": {
- "description": "insightsReport provides general Insights analysis results. When omitted, this means no data gathering has taken place yet.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.InsightsReport"
- },
"latestAvailableRevision": {
"description": "latestAvailableRevision is the deploymentID of the most recent deployment",
"type": "integer",
@@ -104631,131 +109781,90 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "InsightsOperatorStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.InsightsReport": {
- "description": "insightsReport provides Insights health check report based on the most recently sent Insights data.",
- "type": "object",
- "properties": {
- "downloadedAt": {
- "description": "downloadedAt is the time when the last Insights report was downloaded. An empty value means that there has not been any Insights report downloaded yet and it usually appears in disconnected clusters (or clusters when the Insights data gathering is disabled).",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "healthChecks": {
- "description": "healthChecks provides basic information about active Insights health checks in a cluster.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.HealthCheck"
- },
- "x-kubernetes-list-type": "atomic"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "InsightsReport",
+ "Kind": "OpenShiftControllerManagerStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.KubeAPIServer": {
- "description": "KubeAPIServer provides information to configure an operator to manage kube-apiserver.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.OpenShiftSDNConfig": {
+ "description": "OpenShiftSDNConfig was used to configure the OpenShift SDN plugin. It is no longer used.",
"type": "object",
"required": [
- "metadata",
- "spec"
+ "mode"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "enableUnidling": {
+ "description": "enableUnidling controls whether or not the service proxy will support idling and unidling of services. By default, unidling is enabled.",
+ "type": "boolean"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "mode": {
+ "description": "mode is one of \"Multitenant\", \"Subnet\", or \"NetworkPolicy\"",
+ "type": "string",
+ "default": ""
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "mtu": {
+ "description": "mtu is the mtu to use for the tunnel interface. Defaults to 1450 if unset. This must be 50 bytes smaller than the machine's uplink.",
+ "type": "integer",
+ "format": "int64"
},
- "spec": {
- "description": "spec is the specification of the desired behavior of the Kubernetes API Server",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.KubeAPIServerSpec"
+ "useExternalOpenvswitch": {
+ "description": "useExternalOpenvswitch used to control whether the operator would deploy an OVS DaemonSet itself or expect someone else to start OVS. As of 4.6, OVS is always run as a system service, and this flag is ignored.",
+ "type": "boolean"
},
- "status": {
- "description": "status is the most recently observed status of the Kubernetes API Server",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.KubeAPIServerStatus"
+ "vxlanPort": {
+ "description": "vxlanPort is the port to use for all vxlan packets. The default is 4789.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeAPIServer",
- "Scope": "Clustered"
+ "Kind": "OpenShiftSDNConfig",
+ "Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.KubeAPIServerList": {
- "description": "KubeAPIServerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.OperatorCondition": {
+ "description": "OperatorCondition is just the standard condition fields.",
"type": "object",
"required": [
- "metadata",
- "items"
+ "type",
+ "status"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "lastTransitionTime": {
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "items": {
- "description": "Items contains the items",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.KubeAPIServer"
- }
+ "message": {
+ "type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "reason": {
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "status": {
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "list",
+ "Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeAPIServerList",
+ "Kind": "OperatorCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.KubeAPIServerSpec": {
+ "io.openshift.operator.v1.OperatorSpec": {
+ "description": "OperatorSpec contains common fields operators need. It is intended to be anonymous included inside of the Spec struct for your particular operator.",
"type": "object",
"required": [
- "managementState",
- "forceRedeploymentReason"
+ "managementState"
],
"properties": {
- "failedRevisionLimit": {
- "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
- "type": "integer",
- "format": "int32"
- },
- "forceRedeploymentReason": {
- "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.",
- "type": "string",
- "default": ""
- },
"logLevel": {
"description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
@@ -104773,11 +109882,6 @@
"description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "succeededRevisionLimit": {
- "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
- "type": "integer",
- "format": "int32"
- },
"unsupportedConfigOverrides": {
"description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
@@ -104787,11 +109891,11 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeAPIServerSpec",
+ "Kind": "OperatorSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.KubeAPIServerStatus": {
+ "io.openshift.operator.v1.OperatorStatus": {
"type": "object",
"required": [
"readyReplicas"
@@ -104829,270 +109933,492 @@
"type": "integer",
"format": "int32"
},
- "latestAvailableRevisionReason": {
- "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment",
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
+ "type": "integer",
+ "format": "int64"
+ },
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
"type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "OperatorStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.PartialSelector": {
+ "description": "PartialSelector provides label selector(s) that can be used to match machine management resources.",
+ "type": "object",
+ "properties": {
+ "machineResourceSelector": {
+ "description": "machineResourceSelector is a label selector that can be used to select machine resources like MachineSets.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "PartialSelector",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.Perspective": {
+ "description": "Perspective defines a perspective that cluster admins want to show/hide in the perspective switcher dropdown",
+ "type": "object",
+ "required": [
+ "id",
+ "visibility"
+ ],
+ "properties": {
+ "id": {
+ "description": "id defines the id of the perspective. Example: \"dev\", \"admin\". The available perspective ids can be found in the code snippet section next to the yaml editor. Incorrect or unknown ids will be ignored.",
+ "type": "string",
+ "default": ""
},
- "nodeStatuses": {
- "description": "nodeStatuses track the deployment values and errors across individual nodes",
+ "pinnedResources": {
+ "description": "pinnedResources defines the list of default pinned resources that users will see on the perspective navigation if they have not customized these pinned resources themselves. The list of available Kubernetes resources could be read via `kubectl api-resources`. The console will also provide a configuration UI and a YAML snippet that will list the available resources that can be pinned to the navigation. Incorrect or unknown resources will be ignored.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.PinnedResourceReference"
+ }
+ },
+ "visibility": {
+ "description": "visibility defines the state of perspective along with access review checks if needed for that perspective.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.PerspectiveVisibility"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "Perspective",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.PerspectiveVisibility": {
+ "description": "PerspectiveVisibility defines the criteria to show/hide a perspective",
+ "type": "object",
+ "required": [
+ "state"
+ ],
+ "properties": {
+ "accessReview": {
+ "description": "accessReview defines required and missing access review checks.",
+ "$ref": "#/definitions/io.openshift.operator.v1.ResourceAttributesAccessReview"
+ },
+ "state": {
+ "description": "state defines the perspective is enabled or disabled or access review check is required.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "PerspectiveVisibility",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "state",
+ "fields-to-discriminateBy": {
+ "accessReview": "AccessReview"
+ }
+ }
+ ]
+ },
+ "io.openshift.operator.v1.PinnedResourceReference": {
+ "description": "PinnedResourceReference includes the group, version and type of resource",
+ "type": "object",
+ "required": [
+ "group",
+ "version",
+ "resource"
+ ],
+ "properties": {
+ "group": {
+ "description": "group is the API Group of the Resource. Enter empty string for the core group. This value should consist of only lowercase alphanumeric characters, hyphens and periods. Example: \"\", \"apps\", \"build.openshift.io\", etc.",
+ "type": "string",
+ "default": ""
+ },
+ "resource": {
+ "description": "resource is the type that is being referenced. It is normally the plural form of the resource kind in lowercase. This value should consist of only lowercase alphanumeric characters and hyphens. Example: \"deployments\", \"deploymentconfigs\", \"pods\", etc.",
+ "type": "string",
+ "default": ""
+ },
+ "version": {
+ "description": "version is the API Version of the Resource. This value should consist of only lowercase alphanumeric characters. Example: \"v1\", \"v1beta1\", etc.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "PinnedResourceReference",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.PolicyAuditConfig": {
+ "type": "object",
+ "properties": {
+ "destination": {
+ "description": "destination is the location for policy log messages. Regardless of this config, persistent logs will always be dumped to the host at /var/log/ovn/ however Additionally syslog output may be configured as follows. Valid values are: - \"libc\" -\u003e to use the libc syslog() function of the host node's journdald process - \"udp:host:port\" -\u003e for sending syslog over UDP - \"unix:file\" -\u003e for using the UNIX domain socket directly - \"null\" -\u003e to discard all messages logged to syslog The default is \"null\"",
+ "type": "string"
+ },
+ "maxFileSize": {
+ "description": "maxFilesSize is the max size an ACL_audit log file is allowed to reach before rotation occurs Units are in MB and the Default is 50MB",
+ "type": "integer",
+ "format": "int64"
+ },
+ "maxLogFiles": {
+ "description": "maxLogFiles specifies the maximum number of ACL_audit log files that can be present.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "rateLimit": {
+ "description": "rateLimit is the approximate maximum number of messages to generate per-second per-node. If unset the default of 20 msg/sec is used.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "syslogFacility": {
+ "description": "syslogFacility the RFC5424 facility for generated messages, e.g. \"kern\". Default is \"local0\"",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "PolicyAuditConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.PrivateStrategy": {
+ "description": "PrivateStrategy holds parameters for the Private endpoint publishing strategy.",
+ "type": "object",
+ "properties": {
+ "protocol": {
+ "description": "protocol specifies whether the IngressController expects incoming connections to use plain TCP or whether the IngressController expects PROXY protocol.\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nThe following values are valid for this field:\n\n* The empty string. * \"TCP\". * \"PROXY\".\n\nThe empty string specifies the default, which is TCP without PROXY protocol. Note that the default is subject to change.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "PrivateStrategy",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.ProjectAccess": {
+ "description": "ProjectAccess contains options for project access roles",
+ "type": "object",
+ "properties": {
+ "availableClusterRoles": {
+ "description": "availableClusterRoles is the list of ClusterRole names that are assignable to users through the project access tab.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ProjectAccess",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.ProviderLoadBalancerParameters": {
+ "description": "ProviderLoadBalancerParameters holds desired load balancer information specific to the underlying infrastructure provider.",
+ "type": "object",
+ "required": [
+ "type"
+ ],
+ "properties": {
+ "aws": {
+ "description": "aws provides configuration settings that are specific to AWS load balancers.\n\nIf empty, defaults will be applied. See specific aws fields for details about their defaults.",
+ "$ref": "#/definitions/io.openshift.operator.v1.AWSLoadBalancerParameters"
+ },
+ "gcp": {
+ "description": "gcp provides configuration settings that are specific to GCP load balancers.\n\nIf empty, defaults will be applied. See specific gcp fields for details about their defaults.",
+ "$ref": "#/definitions/io.openshift.operator.v1.GCPLoadBalancerParameters"
+ },
+ "ibm": {
+ "description": "ibm provides configuration settings that are specific to IBM Cloud load balancers.\n\nIf empty, defaults will be applied. See specific ibm fields for details about their defaults.",
+ "$ref": "#/definitions/io.openshift.operator.v1.IBMLoadBalancerParameters"
+ },
+ "type": {
+ "description": "type is the underlying infrastructure provider for the load balancer. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"IBM\", \"Nutanix\", \"OpenStack\", and \"VSphere\".",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ProviderLoadBalancerParameters",
+ "Scope": "Namespaced"
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "aws": "AWS",
+ "gcp": "GCP",
+ "ibm": "IBM"
+ }
+ }
+ ]
+ },
+ "io.openshift.operator.v1.ProxyConfig": {
+ "description": "ProxyConfig defines the configuration knobs for kubeproxy All of these are optional and have sensible defaults",
+ "type": "object",
+ "properties": {
+ "bindAddress": {
+ "description": "The address to \"bind\" on Defaults to 0.0.0.0",
+ "type": "string"
+ },
+ "iptablesSyncPeriod": {
+ "description": "An internal kube-proxy parameter. In older releases of OCP, this sometimes needed to be adjusted in large clusters for performance reasons, but this is no longer necessary, and there is no reason to change this from the default value. Default: 30s",
+ "type": "string"
+ },
+ "proxyArguments": {
+ "description": "Any additional arguments to pass to the kubeproxy process",
+ "type": "object",
+ "additionalProperties": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ProxyConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.QuickStarts": {
+ "description": "QuickStarts allow cluster admins to customize available ConsoleQuickStart resources.",
+ "type": "object",
+ "properties": {
+ "disabled": {
+ "description": "disabled is a list of ConsoleQuickStart resource names that are not shown to users.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "QuickStarts",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.ReloadService": {
+ "description": "ReloadService allows the user to specify the services to be reloaded",
+ "type": "object",
+ "required": [
+ "serviceName"
+ ],
+ "properties": {
+ "serviceName": {
+ "description": "serviceName is the full name (e.g. crio.service) of the service to be reloaded Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "ReloadService",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.ResourceAttributesAccessReview": {
+ "description": "ResourceAttributesAccessReview defines the visibility of the perspective depending on the access review checks. `required` and `missing` can work together esp. in the case where the cluster admin wants to show another perspective to users without specific permissions. Out of `required` and `missing` atleast one property should be non-empty.",
+ "type": "object",
+ "properties": {
+ "missing": {
+ "description": "missing defines a list of permission checks. The perspective will only be shown when at least one check fails. When omitted, the access review is skipped and the perspective will not be shown unless it is required to do so based on the configuration of the required access review list.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeStatus"
- },
- "x-kubernetes-list-map-keys": [
- "nodeName"
- ],
- "x-kubernetes-list-type": "map"
- },
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
- },
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes"
+ }
},
- "serviceAccountIssuers": {
- "description": "serviceAccountIssuers tracks history of used service account issuers. The item without expiration time represents the currently used service account issuer. The other items represents service account issuers that were used previously and are still being trusted. The default expiration for the items is set by the platform and it defaults to 24h. see: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection",
+ "required": {
+ "description": "required defines a list of permission checks. The perspective will only be shown when all checks are successful. When omitted, the access review is skipped and the perspective will not be shown unless it is required to do so based on the configuration of the missing access review list.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ServiceAccountIssuerStatus"
+ "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes"
}
- },
- "version": {
- "description": "version is the level this availability applies to",
- "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeAPIServerStatus",
+ "Kind": "ResourceAttributesAccessReview",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.KubeControllerManager": {
- "description": "KubeControllerManager provides information to configure an operator to manage kube-controller-manager.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.RestartService": {
+ "description": "RestartService allows the user to specify the services to be restarted",
"type": "object",
"required": [
- "metadata",
- "spec"
+ "serviceName"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "serviceName": {
+ "description": "serviceName is the full name (e.g. crio.service) of the service to be restarted Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "RestartService",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.RouteAdmissionPolicy": {
+ "description": "RouteAdmissionPolicy is an admission policy for allowing new route claims.",
+ "type": "object",
+ "properties": {
+ "namespaceOwnership": {
+ "description": "namespaceOwnership describes how host name claims across namespaces should be handled.\n\nValue must be one of:\n\n- Strict: Do not allow routes in different namespaces to claim the same host.\n\n- InterNamespaceAllowed: Allow routes to claim different paths of the same\n host name across namespaces.\n\nIf empty, the default is Strict.",
"type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "wildcardPolicy": {
+ "description": "wildcardPolicy describes how routes with wildcard policies should be handled for the ingress controller. WildcardPolicy controls use of routes [1] exposed by the ingress controller based on the route's wildcard policy.\n\n[1] https://github.com/openshift/api/blob/master/route/v1/types.go\n\nNote: Updating WildcardPolicy from WildcardsAllowed to WildcardsDisallowed will cause admitted routes with a wildcard policy of Subdomain to stop working. These routes must be updated to a wildcard policy of None to be readmitted by the ingress controller.\n\nWildcardPolicy supports WildcardsAllowed and WildcardsDisallowed values.\n\nIf empty, defaults to \"WildcardsDisallowed\".",
"type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec is the specification of the desired behavior of the Kubernetes Controller Manager",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.KubeControllerManagerSpec"
- },
- "status": {
- "description": "status is the most recently observed status of the Kubernetes Controller Manager",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.KubeControllerManagerStatus"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeControllerManager",
- "Scope": "Clustered"
+ "Kind": "RouteAdmissionPolicy",
+ "Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.KubeControllerManagerList": {
- "description": "KubeControllerManagerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.SFlowConfig": {
"type": "object",
- "required": [
- "metadata",
- "items"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
- "description": "Items contains the items",
+ "collectors": {
+ "description": "sFlowCollectors is list of strings formatted as ip:port with a maximum of ten items",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.KubeControllerManager"
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
- "Type": "list",
+ "Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeControllerManagerList",
+ "Kind": "SFlowConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.KubeControllerManagerSpec": {
+ "io.openshift.operator.v1.Server": {
+ "description": "Server defines the schema for a server that runs per instance of CoreDNS.",
"type": "object",
"required": [
- "managementState",
- "forceRedeploymentReason",
- "useMoreSecureServiceCA"
+ "name",
+ "zones",
+ "forwardPlugin"
],
"properties": {
- "failedRevisionLimit": {
- "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
- "type": "integer",
- "format": "int32"
- },
- "forceRedeploymentReason": {
- "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.",
- "type": "string",
- "default": ""
- },
- "logLevel": {
- "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
+ "forwardPlugin": {
+ "description": "forwardPlugin defines a schema for configuring CoreDNS to proxy DNS messages to upstream resolvers.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.ForwardPlugin"
},
- "managementState": {
- "description": "managementState indicates whether and how the operator should manage the component",
+ "name": {
+ "description": "name is required and specifies a unique name for the server. Name must comply with the Service Name Syntax of rfc6335.",
"type": "string",
"default": ""
},
- "observedConfig": {
- "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "operatorLogLevel": {
- "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "succeededRevisionLimit": {
- "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
- "type": "integer",
- "format": "int32"
- },
- "unsupportedConfigOverrides": {
- "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "useMoreSecureServiceCA": {
- "description": "useMoreSecureServiceCA indicates that the service-ca.crt provided in SA token volumes should include only enough certificates to validate service serving certificates. Once set to true, it cannot be set to false. Even if someone finds a way to set it back to false, the service-ca.crt files that previously existed will only have the more secure content.",
- "type": "boolean",
- "default": false
+ "zones": {
+ "description": "zones is required and specifies the subdomains that Server is authoritative for. Zones must conform to the rfc1123 definition of a subdomain. Specifying the cluster domain (i.e., \"cluster.local\") is invalid.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeControllerManagerSpec",
+ "Kind": "Server",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.KubeControllerManagerStatus": {
+ "io.openshift.operator.v1.ServiceAccountIssuerStatus": {
"type": "object",
"required": [
- "readyReplicas"
+ "name"
],
"properties": {
- "conditions": {
- "description": "conditions is a list of conditions and their status",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
- },
- "generations": {
- "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
- },
- "x-kubernetes-list-map-keys": [
- "group",
- "resource",
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "latestAvailableRevision": {
- "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
- "type": "integer",
- "format": "int32"
- },
- "latestAvailableRevisionReason": {
- "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment",
- "type": "string"
- },
- "nodeStatuses": {
- "description": "nodeStatuses track the deployment values and errors across individual nodes",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeStatus"
- },
- "x-kubernetes-list-map-keys": [
- "nodeName"
- ],
- "x-kubernetes-list-type": "map"
- },
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
- },
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "expirationTime": {
+ "description": "expirationTime is the time after which this service account issuer will be pruned and removed from the trusted list of service account issuers.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "version": {
- "description": "version is the level this availability applies to",
- "type": "string"
+ "name": {
+ "description": "name is the name of the service account issuer",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeControllerManagerStatus",
+ "Kind": "ServiceAccountIssuerStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.KubeScheduler": {
- "description": "KubeScheduler provides information to configure an operator to manage scheduler.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.ServiceCA": {
+ "description": "ServiceCA provides information to configure an operator to manage the service cert controllers\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -105113,26 +110439,26 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec is the specification of the desired behavior of the Kubernetes Scheduler",
+ "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.KubeSchedulerSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.ServiceCASpec"
},
"status": {
- "description": "status is the most recently observed status of the Kubernetes Scheduler",
+ "description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.KubeSchedulerStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.ServiceCAStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeScheduler",
+ "Kind": "ServiceCA",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.KubeSchedulerList": {
- "description": "KubeSchedulerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.ServiceCAList": {
+ "description": "ServiceCAList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -105148,7 +110474,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.KubeScheduler"
+ "$ref": "#/definitions/io.openshift.operator.v1.ServiceCA"
}
},
"kind": {
@@ -105165,27 +110491,16 @@
"Type": "list",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeSchedulerList",
+ "Kind": "ServiceCAList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.KubeSchedulerSpec": {
+ "io.openshift.operator.v1.ServiceCASpec": {
"type": "object",
"required": [
- "managementState",
- "forceRedeploymentReason"
+ "managementState"
],
"properties": {
- "failedRevisionLimit": {
- "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
- "type": "integer",
- "format": "int32"
- },
- "forceRedeploymentReason": {
- "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.",
- "type": "string",
- "default": ""
- },
"logLevel": {
"description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
@@ -105203,11 +110518,6 @@
"description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "succeededRevisionLimit": {
- "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
- "type": "integer",
- "format": "int32"
- },
"unsupportedConfigOverrides": {
"description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
@@ -105217,11 +110527,11 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeSchedulerSpec",
+ "Kind": "ServiceCASpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.KubeSchedulerStatus": {
+ "io.openshift.operator.v1.ServiceCAStatus": {
"type": "object",
"required": [
"readyReplicas"
@@ -105259,22 +110569,6 @@
"type": "integer",
"format": "int32"
},
- "latestAvailableRevisionReason": {
- "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment",
- "type": "string"
- },
- "nodeStatuses": {
- "description": "nodeStatuses track the deployment values and errors across individual nodes",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeStatus"
- },
- "x-kubernetes-list-map-keys": [
- "nodeName"
- ],
- "x-kubernetes-list-type": "map"
- },
"observedGeneration": {
"description": "observedGeneration is the last generation change you've dealt with",
"type": "integer",
@@ -105295,15 +110589,14 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeSchedulerStatus",
+ "Kind": "ServiceCAStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.KubeStorageVersionMigrator": {
- "description": "KubeStorageVersionMigrator provides information to configure an operator to manage kube-storage-version-migrator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.ServiceCatalogAPIServer": {
+ "description": "ServiceCatalogAPIServer provides information to configure an operator to manage Service Catalog API Server DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"spec"
],
"properties": {
@@ -105322,23 +110615,23 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.KubeStorageVersionMigratorSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.ServiceCatalogAPIServerSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.KubeStorageVersionMigratorStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.ServiceCatalogAPIServerStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeStorageVersionMigrator",
+ "Kind": "ServiceCatalogAPIServer",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.KubeStorageVersionMigratorList": {
- "description": "KubeStorageVersionMigratorList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.ServiceCatalogAPIServerList": {
+ "description": "ServiceCatalogAPIServerList is a collection of items DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -105354,7 +110647,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.KubeStorageVersionMigrator"
+ "$ref": "#/definitions/io.openshift.operator.v1.ServiceCatalogAPIServer"
}
},
"kind": {
@@ -105371,11 +110664,11 @@
"Type": "list",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "KubeStorageVersionMigratorList",
+ "Kind": "ServiceCatalogAPIServerList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.KubeStorageVersionMigratorSpec": {
+ "io.openshift.operator.v1.ServiceCatalogAPIServerSpec": {
"type": "object",
"required": [
"managementState"
@@ -105398,207 +110691,83 @@
"description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "unsupportedConfigOverrides": {
- "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "KubeStorageVersionMigratorSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.KubeStorageVersionMigratorStatus": {
- "type": "object",
- "required": [
- "readyReplicas"
- ],
- "properties": {
- "conditions": {
- "description": "conditions is a list of conditions and their status",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
- },
- "generations": {
- "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
- },
- "x-kubernetes-list-map-keys": [
- "group",
- "resource",
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "latestAvailableRevision": {
- "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
- "type": "integer",
- "format": "int32"
- },
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
- },
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "version": {
- "description": "version is the level this availability applies to",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "KubeStorageVersionMigratorStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.LoadBalancerStrategy": {
- "description": "LoadBalancerStrategy holds parameters for a load balancer.",
- "type": "object",
- "required": [
- "scope"
- ],
- "properties": {
- "allowedSourceRanges": {
- "description": "allowedSourceRanges specifies an allowlist of IP address ranges to which access to the load balancer should be restricted. Each range must be specified using CIDR notation (e.g. \"10.0.0.0/8\" or \"fd00::/8\"). If no range is specified, \"0.0.0.0/0\" for IPv4 and \"::/0\" for IPv6 are used by default, which allows all source addresses.\n\nTo facilitate migration from earlier versions of OpenShift that did not have the allowedSourceRanges field, you may set the service.beta.kubernetes.io/load-balancer-source-ranges annotation on the \"router-\u003cingresscontroller name\u003e\" service in the \"openshift-ingress\" namespace, and this annotation will take effect if allowedSourceRanges is empty on OpenShift 4.12.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "dnsManagementPolicy": {
- "description": "dnsManagementPolicy indicates if the lifecycle of the wildcard DNS record associated with the load balancer service will be managed by the ingress operator. It defaults to Managed. Valid values are: Managed and Unmanaged.",
- "type": "string",
- "default": "Managed"
- },
- "providerParameters": {
- "description": "providerParameters holds desired load balancer information specific to the underlying infrastructure provider.\n\nIf empty, defaults will be applied. See specific providerParameters fields for details about their defaults.",
- "$ref": "#/definitions/io.openshift.operator.v1.ProviderLoadBalancerParameters"
- },
- "scope": {
- "description": "scope indicates the scope at which the load balancer is exposed. Possible values are \"External\" and \"Internal\".",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "LoadBalancerStrategy",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.LoggingDestination": {
- "description": "LoggingDestination describes a destination for log messages.",
- "type": "object",
- "required": [
- "type"
- ],
- "properties": {
- "container": {
- "description": "container holds parameters for the Container logging destination. Present only if type is Container.",
- "$ref": "#/definitions/io.openshift.operator.v1.ContainerLoggingDestinationParameters"
- },
- "syslog": {
- "description": "syslog holds parameters for a syslog endpoint. Present only if type is Syslog.",
- "$ref": "#/definitions/io.openshift.operator.v1.SyslogLoggingDestinationParameters"
- },
- "type": {
- "description": "type is the type of destination for logs. It must be one of the following:\n\n* Container\n\nThe ingress operator configures the sidecar container named \"logs\" on the ingress controller pod and configures the ingress controller to write logs to the sidecar. The logs are then available as container logs. The expectation is that the administrator configures a custom logging solution that reads logs from this sidecar. Note that using container logs means that logs may be dropped if the rate of logs exceeds the container runtime's or the custom logging solution's capacity.\n\n* Syslog\n\nLogs are sent to a syslog endpoint. The administrator must specify an endpoint that can receive syslog messages. The expectation is that the administrator has configured a custom syslog instance.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "LoggingDestination",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "container": "Container",
- "syslog": "Syslog"
- }
- }
- ]
- },
- "io.openshift.operator.v1.MTUMigration": {
- "description": "MTUMigration contains infomation about MTU migration.",
- "type": "object",
- "properties": {
- "machine": {
- "description": "machine contains MTU migration configuration for the machine's uplink. Needs to be migrated along with the default network MTU unless the current uplink MTU already accommodates the default network MTU.",
- "$ref": "#/definitions/io.openshift.operator.v1.MTUMigrationValues"
- },
- "network": {
- "description": "network contains information about MTU migration for the default network. Migrations are only allowed to MTU values lower than the machine's uplink MTU by the minimum appropriate offset.",
- "$ref": "#/definitions/io.openshift.operator.v1.MTUMigrationValues"
+ "unsupportedConfigOverrides": {
+ "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "MTUMigration",
+ "Kind": "ServiceCatalogAPIServerSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.MTUMigrationValues": {
- "description": "MTUMigrationValues contains the values for a MTU migration.",
+ "io.openshift.operator.v1.ServiceCatalogAPIServerStatus": {
"type": "object",
"required": [
- "to"
+ "readyReplicas"
],
"properties": {
- "from": {
- "description": "from is the MTU to migrate from.",
+ "conditions": {
+ "description": "conditions is a list of conditions and their status",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "generations": {
+ "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "group",
+ "resource",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "latestAvailableRevision": {
+ "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
"type": "integer",
- "format": "int64"
+ "format": "int32"
},
- "to": {
- "description": "to is the MTU to migrate to.",
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
"type": "integer",
"format": "int64"
+ },
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "MTUMigrationValues",
+ "Kind": "ServiceCatalogAPIServerStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.MachineConfiguration": {
- "description": "MachineConfiguration provides information to configure an operator to manage Machine Configuration.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.ServiceCatalogControllerManager": {
+ "description": "ServiceCatalogControllerManager provides information to configure an operator to manage Service Catalog Controller Manager DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -105619,26 +110788,24 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec is the specification of the desired behavior of the Machine Config Operator",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.MachineConfigurationSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.ServiceCatalogControllerManagerSpec"
},
"status": {
- "description": "status is the most recently observed status of the Machine Config Operator",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.MachineConfigurationStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.ServiceCatalogControllerManagerStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "MachineConfiguration",
+ "Kind": "ServiceCatalogControllerManager",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.MachineConfigurationList": {
- "description": "MachineConfigurationList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.ServiceCatalogControllerManagerList": {
+ "description": "ServiceCatalogControllerManagerList is a collection of items DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -105654,7 +110821,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.MachineConfiguration"
+ "$ref": "#/definitions/io.openshift.operator.v1.ServiceCatalogControllerManager"
}
},
"kind": {
@@ -105671,46 +110838,25 @@
"Type": "list",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "MachineConfigurationList",
+ "Kind": "ServiceCatalogControllerManagerList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.MachineConfigurationSpec": {
+ "io.openshift.operator.v1.ServiceCatalogControllerManagerSpec": {
"type": "object",
"required": [
- "managementState",
- "forceRedeploymentReason"
+ "managementState"
],
"properties": {
- "failedRevisionLimit": {
- "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
- "type": "integer",
- "format": "int32"
- },
- "forceRedeploymentReason": {
- "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.",
- "type": "string",
- "default": ""
- },
"logLevel": {
"description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "managedBootImages": {
- "description": "managedBootImages allows configuration for the management of boot images for machine resources within the cluster. This configuration allows users to select resources that should be updated to the latest boot images during cluster upgrades, ensuring that new machines always boot with the current cluster version's boot image. When omitted, no boot images will be updated.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ManagedBootImages"
- },
"managementState": {
"description": "managementState indicates whether and how the operator should manage the component",
"type": "string",
"default": ""
},
- "nodeDisruptionPolicy": {
- "description": "nodeDisruptionPolicy allows an admin to set granular node disruption actions for MachineConfig-based updates, such as drains, service reloads, etc. Specifying this will allow for less downtime when doing small configuration updates to the cluster. This configuration has no effect on cluster upgrades which will still incur node disruption where required.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyConfig"
- },
"observedConfig": {
"description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
@@ -105719,11 +110865,6 @@
"description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "succeededRevisionLimit": {
- "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
- "type": "integer",
- "format": "int32"
- },
"unsupportedConfigOverrides": {
"description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
@@ -105733,181 +110874,237 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "MachineConfigurationSpec",
+ "Kind": "ServiceCatalogControllerManagerSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.MachineConfigurationStatus": {
+ "io.openshift.operator.v1.ServiceCatalogControllerManagerStatus": {
"type": "object",
+ "required": [
+ "readyReplicas"
+ ],
"properties": {
"conditions": {
"description": "conditions is a list of conditions and their status",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
},
"x-kubernetes-list-map-keys": [
"type"
],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
+ "x-kubernetes-list-type": "map"
},
- "nodeDisruptionPolicyStatus": {
- "description": "nodeDisruptionPolicyStatus status reflects what the latest cluster-validated policies are, and will be used by the Machine Config Daemon during future node updates.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatus"
+ "generations": {
+ "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "group",
+ "resource",
+ "namespace",
+ "name"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
+ "latestAvailableRevision": {
+ "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "type": "integer",
+ "format": "int32"
},
"observedGeneration": {
"description": "observedGeneration is the last generation change you've dealt with",
"type": "integer",
"format": "int64"
+ },
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "MachineConfigurationStatus",
+ "Kind": "ServiceCatalogControllerManagerStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.MachineManager": {
- "description": "MachineManager describes a target machine resource that is registered for boot image updates. It stores identifying information such as the resource type and the API Group of the resource. It also provides granular control via the selection field.",
+ "io.openshift.operator.v1.SimpleMacvlanConfig": {
+ "description": "SimpleMacvlanConfig contains configurations for macvlan interface.",
"type": "object",
- "required": [
- "resource",
- "apiGroup",
- "selection"
- ],
"properties": {
- "apiGroup": {
- "description": "apiGroup is name of the APIGroup that the machine management resource belongs to. The only current valid value is machine.openshift.io. machine.openshift.io means that the machine manager will only register resources that belong to OpenShift machine API group.",
- "type": "string",
- "default": ""
+ "ipamConfig": {
+ "description": "IPAMConfig configures IPAM module will be used for IP Address Management (IPAM).",
+ "$ref": "#/definitions/io.openshift.operator.v1.IPAMConfig"
},
- "resource": {
- "description": "resource is the machine management resource's type. The only current valid value is machinesets. machinesets means that the machine manager will only register resources of the kind MachineSet.",
- "type": "string",
- "default": ""
+ "master": {
+ "description": "master is the host interface to create the macvlan interface from. If not specified, it will be default route interface",
+ "type": "string"
},
- "selection": {
- "description": "selection allows granular control of the machine management resources that will be registered for boot image updates.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.MachineManagerSelector"
+ "mode": {
+ "description": "mode is the macvlan mode: bridge, private, vepa, passthru. The default is bridge",
+ "type": "string"
+ },
+ "mtu": {
+ "description": "mtu is the mtu to use for the macvlan interface. if unset, host's kernel will select the value.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "MachineManager",
+ "Kind": "SimpleMacvlanConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.MachineManagerSelector": {
+ "io.openshift.operator.v1.StaticIPAMAddresses": {
+ "description": "StaticIPAMAddresses provides IP address and Gateway for static IPAM addresses",
"type": "object",
- "required": [
- "mode"
- ],
"properties": {
- "mode": {
- "description": "mode determines how machine managers will be selected for updates. Valid values are All and Partial. All means that every resource matched by the machine manager will be updated. Partial requires specified selector(s) and allows customisation of which resources matched by the machine manager will be updated.",
+ "address": {
+ "description": "Address is the IP address in CIDR format",
"type": "string",
"default": ""
},
- "partial": {
- "description": "partial provides label selector(s) that can be used to match machine management resources. Only permitted when mode is set to \"Partial\".",
- "$ref": "#/definitions/io.openshift.operator.v1.PartialSelector"
+ "gateway": {
+ "description": "Gateway is IP inside of subnet to designate as the gateway",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "MachineManagerSelector",
+ "Kind": "StaticIPAMAddresses",
"Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "mode",
- "fields-to-discriminateBy": {
- "partial": "Partial"
- }
- }
- ]
+ }
},
- "io.openshift.operator.v1.ManagedBootImages": {
+ "io.openshift.operator.v1.StaticIPAMConfig": {
+ "description": "StaticIPAMConfig contains configurations for static IPAM (IP Address Management)",
"type": "object",
"properties": {
- "machineManagers": {
- "description": "machineManagers can be used to register machine management resources for boot image updates. The Machine Config Operator will watch for changes to this list. Only one entry is permitted per type of machine management resource.",
+ "addresses": {
+ "description": "Addresses configures IP address for the interface",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.MachineManager"
+ "$ref": "#/definitions/io.openshift.operator.v1.StaticIPAMAddresses"
},
- "x-kubernetes-list-map-keys": [
- "resource",
- "apiGroup"
- ],
- "x-kubernetes-list-type": "map"
+ "x-kubernetes-list-type": "atomic"
+ },
+ "dns": {
+ "description": "DNS configures DNS for the interface",
+ "$ref": "#/definitions/io.openshift.operator.v1.StaticIPAMDNS"
+ },
+ "routes": {
+ "description": "Routes configures IP routes for the interface",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.StaticIPAMRoutes"
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "ManagedBootImages",
+ "Kind": "StaticIPAMConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.MyOperatorResource": {
- "description": "MyOperatorResource is an example operator configuration type\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.operator.v1.StaticIPAMDNS": {
+ "description": "StaticIPAMDNS provides DNS related information for static IPAM",
"type": "object",
- "required": [
- "metadata",
- "spec",
- "status"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "domain": {
+ "description": "Domain configures the domainname the local domain used for short hostname lookups",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "nameservers": {
+ "description": "Nameservers points DNS servers for IP lookup",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "spec": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.MyOperatorResourceSpec"
+ "search": {
+ "description": "Search configures priority ordered search domains for short hostname lookups",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "StaticIPAMDNS",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.StaticIPAMRoutes": {
+ "description": "StaticIPAMRoutes provides Destination/Gateway pairs for static IPAM routes",
+ "type": "object",
+ "required": [
+ "destination"
+ ],
+ "properties": {
+ "destination": {
+ "description": "Destination points the IP route destination",
+ "type": "string",
+ "default": ""
},
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.MyOperatorResourceStatus"
+ "gateway": {
+ "description": "Gateway is the route's next-hop IP address If unset, a default gateway is assumed (as determined by the CNI plugin).",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
+ "Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "MyOperatorResource",
+ "Kind": "StaticIPAMRoutes",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.MyOperatorResourceSpec": {
+ "io.openshift.operator.v1.StaticPodOperatorSpec": {
+ "description": "StaticPodOperatorSpec is spec for controllers that manage static pods.",
"type": "object",
"required": [
- "managementState"
+ "managementState",
+ "forceRedeploymentReason"
],
"properties": {
+ "failedRevisionLimit": {
+ "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
+ "type": "integer",
+ "format": "int32"
+ },
+ "forceRedeploymentReason": {
+ "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.",
+ "type": "string",
+ "default": ""
+ },
"logLevel": {
"description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
@@ -105925,6 +111122,11 @@
"description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
+ "succeededRevisionLimit": {
+ "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
+ "type": "integer",
+ "format": "int32"
+ },
"unsupportedConfigOverrides": {
"description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
@@ -105934,11 +111136,12 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "MyOperatorResourceSpec",
+ "Kind": "StaticPodOperatorSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.MyOperatorResourceStatus": {
+ "io.openshift.operator.v1.StaticPodOperatorStatus": {
+ "description": "StaticPodOperatorStatus is status for controllers that manage static pods. There are different needs because individual node status must be tracked.",
"type": "object",
"required": [
"readyReplicas"
@@ -105976,6 +111179,22 @@
"type": "integer",
"format": "int32"
},
+ "latestAvailableRevisionReason": {
+ "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment",
+ "type": "string"
+ },
+ "nodeStatuses": {
+ "description": "nodeStatuses track the deployment values and errors across individual nodes",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.NodeStatus"
+ },
+ "x-kubernetes-list-map-keys": [
+ "nodeName"
+ ],
+ "x-kubernetes-list-type": "map"
+ },
"observedGeneration": {
"description": "observedGeneration is the last generation change you've dealt with",
"type": "integer",
@@ -105996,34 +111215,37 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "MyOperatorResourceStatus",
+ "Kind": "StaticPodOperatorStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.NetFlowConfig": {
+ "io.openshift.operator.v1.StatuspageProvider": {
+ "description": "StatuspageProvider provides identity for statuspage account.",
"type": "object",
+ "required": [
+ "pageID"
+ ],
"properties": {
- "collectors": {
- "description": "netFlow defines the NetFlow collectors that will consume the flow data exported from OVS. It is a list of strings formatted as ip:port with a maximum of ten items",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "pageID": {
+ "description": "pageID is the unique ID assigned by Statuspage for your page. This must be a public page.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "NetFlowConfig",
+ "Kind": "StatuspageProvider",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.Network": {
- "description": "Network describes the cluster's desired network configuration. It is consumed by the cluster-network-operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.Storage": {
+ "description": "Storage provides a means to configure an operator to manage the cluster storage operator. `cluster` is the canonical name.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -106039,24 +111261,26 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
+ "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NetworkSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1.StorageSpec"
},
"status": {
+ "description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NetworkStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1.StorageStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "Network",
+ "Kind": "Storage",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.NetworkList": {
- "description": "NetworkList contains a list of Network configurations\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1.StorageList": {
+ "description": "StorageList contains a list of Storages.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"items"
@@ -106070,117 +111294,34 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.Network"
+ "$ref": "#/definitions/io.openshift.operator.v1.Storage"
}
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
- }
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "NetworkList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.NetworkMigration": {
- "description": "NetworkMigration represents the cluster network migration configuration.",
- "type": "object",
- "properties": {
- "features": {
- "description": "features was previously used to configure which network plugin features would be migrated in a network type migration. DEPRECATED: network type migration is no longer supported, and setting this to a non-empty value will result in the network operator rejecting the configuration.",
- "$ref": "#/definitions/io.openshift.operator.v1.FeaturesMigration"
- },
- "mode": {
- "description": "mode indicates the mode of network type migration. DEPRECATED: network type migration is no longer supported, and setting this to a non-empty value will result in the network operator rejecting the configuration.",
- "type": "string"
- },
- "mtu": {
- "description": "mtu contains the MTU migration configuration. Set this to allow changing the MTU values for the default network. If unset, the operation of changing the MTU for the default network will be rejected.",
- "$ref": "#/definitions/io.openshift.operator.v1.MTUMigration"
- },
- "networkType": {
- "description": "networkType was previously used when changing the default network type. DEPRECATED: network type migration is no longer supported, and setting this to a non-empty value will result in the network operator rejecting the configuration.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "NetworkMigration",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.NetworkSpec": {
- "description": "NetworkSpec is the top-level network configuration object.",
- "type": "object",
- "required": [
- "managementState",
- "clusterNetwork",
- "serviceNetwork",
- "defaultNetwork"
- ],
- "properties": {
- "additionalNetworks": {
- "description": "additionalNetworks is a list of extra networks to make available to pods when multiple networks are enabled.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.AdditionalNetworkDefinition"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "additionalRoutingCapabilities": {
- "description": "additionalRoutingCapabilities describes components and relevant configuration providing additional routing capabilities. When set, it enables such components and the usage of the routing capabilities they provide for the machine network. Upstream operators, like MetalLB operator, requiring these capabilities may rely on, or automatically set this attribute. Network plugins may leverage advanced routing capabilities acquired through the enablement of these components but may require specific configuration on their side to do so; refer to their respective documentation and configuration options.",
- "$ref": "#/definitions/io.openshift.operator.v1.AdditionalRoutingCapabilities"
- },
- "clusterNetwork": {
- "description": "clusterNetwork is the IP address pool to use for pod IPs. Some network providers support multiple ClusterNetworks. Others only support one. This is equivalent to the cluster-cidr.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ClusterNetworkEntry"
- },
- "x-kubernetes-list-type": "atomic"
- },
- "defaultNetwork": {
- "description": "defaultNetwork is the \"default\" network that all pods will receive",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.DefaultNetworkDefinition"
- },
- "deployKubeProxy": {
- "description": "deployKubeProxy specifies whether or not a standalone kube-proxy should be deployed by the operator. Some network providers include kube-proxy or similar functionality. If unset, the plugin will attempt to select the correct value, which is false when ovn-kubernetes is used and true otherwise.",
- "type": "boolean"
- },
- "disableMultiNetwork": {
- "description": "disableMultiNetwork specifies whether or not multiple pod network support should be disabled. If unset, this property defaults to 'false' and multiple network support is enabled.",
- "type": "boolean"
- },
- "disableNetworkDiagnostics": {
- "description": "disableNetworkDiagnostics specifies whether or not PodNetworkConnectivityCheck CRs from a test pod to every node, apiserver and LB should be disabled or not. If unset, this property defaults to 'false' and network diagnostics is enabled. Setting this to 'true' would reduce the additional load of the pods performing the checks.",
- "type": "boolean",
- "default": false
- },
- "exportNetworkFlows": {
- "description": "exportNetworkFlows enables and configures the export of network flow metadata from the pod network by using protocols NetFlow, SFlow or IPFIX. Currently only supported on OVN-Kubernetes plugin. If unset, flows will not be exported to any collector.",
- "$ref": "#/definitions/io.openshift.operator.v1.ExportNetworkFlows"
- },
- "kubeProxyConfig": {
- "description": "kubeProxyConfig lets us configure desired proxy configuration, if deployKubeProxy is true. If not specified, sensible defaults will be chosen by OpenShift directly.",
- "$ref": "#/definitions/io.openshift.operator.v1.ProxyConfig"
- },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "operator.openshift.io",
+ "Version": "v1",
+ "Kind": "StorageList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1.StorageSpec": {
+ "description": "StorageSpec is the specification of the desired behavior of the cluster storage operator.",
+ "type": "object",
+ "required": [
+ "managementState"
+ ],
+ "properties": {
"logLevel": {
"description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
@@ -106190,10 +111331,6 @@
"type": "string",
"default": ""
},
- "migration": {
- "description": "migration enables and configures cluster network migration, for network changes that cannot be made instantly.",
- "$ref": "#/definitions/io.openshift.operator.v1.NetworkMigration"
- },
"observedConfig": {
"description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
@@ -106202,34 +111339,26 @@
"description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
"type": "string"
},
- "serviceNetwork": {
- "description": "serviceNetwork is the ip address pool to use for Service IPs Currently, all existing network providers only support a single value here, but this is an array to allow for growth.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
"unsupportedConfigOverrides": {
"description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
},
- "useMultiNetworkPolicy": {
- "description": "useMultiNetworkPolicy enables a controller which allows for MultiNetworkPolicy objects to be used on additional networks as created by Multus CNI. MultiNetworkPolicy are similar to NetworkPolicy objects, but NetworkPolicy objects only apply to the primary interface. With MultiNetworkPolicy, you can control the traffic that a pod can receive over the secondary interfaces. If unset, this property defaults to 'false' and MultiNetworkPolicy objects are ignored. If 'disableMultiNetwork' is 'true' then the value of this field is ignored.",
- "type": "boolean"
+ "vsphereStorageDriver": {
+ "description": "VSphereStorageDriver indicates the storage driver to use on VSphere clusters. Once this field is set to CSIWithMigrationDriver, it can not be changed. If this is empty, the platform will choose a good default, which may change over time without notice. The current default is CSIWithMigrationDriver and may not be changed. DEPRECATED: This field will be removed in a future release.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "NetworkSpec",
+ "Kind": "StorageSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.NetworkStatus": {
- "description": "NetworkStatus is detailed operator status, which is distilled up to the Network clusteroperator object.",
+ "io.openshift.operator.v1.StorageStatus": {
+ "description": "StorageStatus defines the observed status of the cluster storage operator.",
"type": "object",
"required": [
"readyReplicas"
@@ -106287,150 +111416,65 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "NetworkStatus",
+ "Kind": "StorageStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.NodeDisruptionPolicyClusterStatus": {
- "description": "NodeDisruptionPolicyClusterStatus is the type for the status object, rendered by the controller as a merge of cluster defaults and user provided policies",
+ "io.openshift.operator.v1.SyslogLoggingDestinationParameters": {
+ "description": "SyslogLoggingDestinationParameters describes parameters for the Syslog logging destination type.",
"type": "object",
+ "required": [
+ "address",
+ "port"
+ ],
"properties": {
- "files": {
- "description": "files is a list of MachineConfig file definitions and actions to take to changes on those paths",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatusFile"
- },
- "x-kubernetes-list-map-keys": [
- "path"
- ],
- "x-kubernetes-list-type": "map"
- },
- "sshkey": {
- "description": "sshkey is the overall sshkey MachineConfig definition",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatusSSHKey"
+ "address": {
+ "description": "address is the IP address of the syslog endpoint that receives log messages.",
+ "type": "string",
+ "default": ""
},
- "units": {
- "description": "units is a list MachineConfig unit definitions and actions to take on changes to those services",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatusUnit"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "NodeDisruptionPolicyClusterStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.NodeDisruptionPolicyConfig": {
- "description": "NodeDisruptionPolicyConfig is the overall spec definition for files/units/sshkeys",
- "type": "object",
- "properties": {
- "files": {
- "description": "files is a list of MachineConfig file definitions and actions to take to changes on those paths This list supports a maximum of 50 entries.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicySpecFile"
- },
- "x-kubernetes-list-map-keys": [
- "path"
- ],
- "x-kubernetes-list-type": "map"
+ "facility": {
+ "description": "facility specifies the syslog facility of log messages.\n\nIf this field is empty, the facility is \"local1\".",
+ "type": "string"
},
- "sshkey": {
- "description": "sshkey maps to the ignition.sshkeys field in the MachineConfig object, definition an action for this will apply to all sshkey changes in the cluster",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicySpecSSHKey"
+ "maxLength": {
+ "description": "maxLength is the maximum length of the log message.\n\nValid values are integers in the range 480 to 4096, inclusive.\n\nWhen omitted, the default value is 1024.",
+ "type": "integer",
+ "format": "int64"
},
- "units": {
- "description": "units is a list MachineConfig unit definitions and actions to take on changes to those services This list supports a maximum of 50 entries.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicySpecUnit"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "port": {
+ "description": "port is the UDP port number of the syslog endpoint that receives log messages.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "NodeDisruptionPolicyConfig",
+ "Kind": "SyslogLoggingDestinationParameters",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.NodeDisruptionPolicySpecAction": {
+ "io.openshift.operator.v1.Upstream": {
+ "description": "Upstream can either be of type SystemResolvConf, or of type Network.\n\n - For an Upstream of type SystemResolvConf, no further fields are necessary:\n The upstream will be configured to use /etc/resolv.conf.\n - For an Upstream of type Network, a NetworkResolver field needs to be defined\n with an IP address or IP:port if the upstream listens on a port other than 53.",
"type": "object",
"required": [
"type"
],
"properties": {
- "reload": {
- "description": "reload specifies the service to reload, only valid if type is reload",
- "$ref": "#/definitions/io.openshift.operator.v1.ReloadService"
+ "address": {
+ "description": "Address must be defined when Type is set to Network. It will be ignored otherwise. It must be a valid ipv4 or ipv6 address.",
+ "type": "string"
},
- "restart": {
- "description": "restart specifies the service to restart, only valid if type is restart",
- "$ref": "#/definitions/io.openshift.operator.v1.RestartService"
+ "port": {
+ "description": "Port may be defined when Type is set to Network. It will be ignored otherwise. Port must be between 65535",
+ "type": "integer",
+ "format": "int64"
},
"type": {
- "description": "type represents the commands that will be carried out if this NodeDisruptionPolicySpecActionType is executed Valid values are Reboot, Drain, Reload, Restart, DaemonReload and None. reload/restart requires a corresponding service target specified in the reload/restart field. Other values require no further configuration",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "NodeDisruptionPolicySpecAction",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "reload": "Reload",
- "restart": "Restart"
- }
- }
- ]
- },
- "io.openshift.operator.v1.NodeDisruptionPolicySpecFile": {
- "description": "NodeDisruptionPolicySpecFile is a file entry and corresponding actions to take and is used in the NodeDisruptionPolicyConfig object",
- "type": "object",
- "required": [
- "path",
- "actions"
- ],
- "properties": {
- "actions": {
- "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicySpecAction"
- },
- "x-kubernetes-list-type": "atomic"
- },
- "path": {
- "description": "path is the location of a file being managed through a MachineConfig. The Actions in the policy will apply to changes to the file at this path.",
+ "description": "Type defines whether this upstream contains an IP/IP:port resolver or the local /etc/resolv.conf. Type accepts 2 possible values: SystemResolvConf or Network.\n\n* When SystemResolvConf is used, the Upstream structure does not require any further fields to be defined:\n /etc/resolv.conf will be used\n* When Network is used, the Upstream structure must contain at least an Address",
"type": "string",
"default": ""
}
@@ -106439,164 +111483,70 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "NodeDisruptionPolicySpecFile",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.NodeDisruptionPolicySpecSSHKey": {
- "description": "NodeDisruptionPolicySpecSSHKey is actions to take for any SSHKey change and is used in the NodeDisruptionPolicyConfig object",
- "type": "object",
- "required": [
- "actions"
- ],
- "properties": {
- "actions": {
- "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicySpecAction"
- },
- "x-kubernetes-list-type": "atomic"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "NodeDisruptionPolicySpecSSHKey",
+ "Kind": "Upstream",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.NodeDisruptionPolicySpecUnit": {
- "description": "NodeDisruptionPolicySpecUnit is a systemd unit name and corresponding actions to take and is used in the NodeDisruptionPolicyConfig object",
+ "io.openshift.operator.v1.UpstreamResolvers": {
+ "description": "UpstreamResolvers defines a schema for configuring the CoreDNS forward plugin in the specific case of the default (\".\") server. It defers from ForwardPlugin in the default values it accepts: * At least one upstream should be specified. * the default policy is Sequential",
"type": "object",
- "required": [
- "name",
- "actions"
- ],
"properties": {
- "actions": {
- "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicySpecAction"
- },
- "x-kubernetes-list-type": "atomic"
+ "policy": {
+ "description": "Policy is used to determine the order in which upstream servers are selected for querying. Any one of the following values may be specified:\n\n* \"Random\" picks a random upstream server for each query. * \"RoundRobin\" picks upstream servers in a round-robin order, moving to the next server for each new query. * \"Sequential\" tries querying upstream servers in a sequential order until one responds, starting with the first server for each new query.\n\nThe default value is \"Sequential\"",
+ "type": "string"
},
- "name": {
- "description": "name represents the service name of a systemd service managed through a MachineConfig Actions specified will be applied for changes to the named service. Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".",
+ "protocolStrategy": {
+ "description": "protocolStrategy specifies the protocol to use for upstream DNS requests. Valid values for protocolStrategy are \"TCP\" and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is to use the protocol of the original client request. \"TCP\" specifies that the platform should use TCP for all upstream DNS requests, even if the client request uses UDP. \"TCP\" is useful for UDP-specific issues such as those created by non-compliant upstream resolvers, but may consume more bandwidth or increase DNS response time. Note that protocolStrategy only affects the protocol of DNS requests that CoreDNS makes to upstream resolvers. It does not affect the protocol of DNS requests between clients and CoreDNS.",
"type": "string",
"default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "NodeDisruptionPolicySpecUnit",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.NodeDisruptionPolicyStatus": {
- "type": "object",
- "properties": {
- "clusterPolicies": {
- "description": "clusterPolicies is a merge of cluster default and user provided node disruption policies.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyClusterStatus"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "NodeDisruptionPolicyStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.NodeDisruptionPolicyStatusAction": {
- "type": "object",
- "required": [
- "type"
- ],
- "properties": {
- "reload": {
- "description": "reload specifies the service to reload, only valid if type is reload",
- "$ref": "#/definitions/io.openshift.operator.v1.ReloadService"
},
- "restart": {
- "description": "restart specifies the service to restart, only valid if type is restart",
- "$ref": "#/definitions/io.openshift.operator.v1.RestartService"
+ "transportConfig": {
+ "description": "transportConfig is used to configure the transport type, server name, and optional custom CA or CA bundle to use when forwarding DNS requests to an upstream resolver.\n\nThe default value is \"\" (empty) which results in a standard cleartext connection being used when forwarding DNS requests to an upstream resolver.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1.DNSTransportConfig"
},
- "type": {
- "description": "type represents the commands that will be carried out if this NodeDisruptionPolicyStatusActionType is executed Valid values are Reboot, Drain, Reload, Restart, DaemonReload, None and Special. reload/restart requires a corresponding service target specified in the reload/restart field. Other values require no further configuration",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "NodeDisruptionPolicyStatusAction",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "reload": "Reload",
- "restart": "Restart"
- }
- }
- ]
- },
- "io.openshift.operator.v1.NodeDisruptionPolicyStatusFile": {
- "description": "NodeDisruptionPolicyStatusFile is a file entry and corresponding actions to take and is used in the NodeDisruptionPolicyClusterStatus object",
- "type": "object",
- "required": [
- "path",
- "actions"
- ],
- "properties": {
- "actions": {
- "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.",
+ "upstreams": {
+ "description": "Upstreams is a list of resolvers to forward name queries for the \".\" domain. Each instance of CoreDNS performs health checking of Upstreams. When a healthy upstream returns an error during the exchange, another resolver is tried from Upstreams. The Upstreams are selected in the order specified in Policy.\n\nA maximum of 15 upstreams is allowed per ForwardPlugin. If no Upstreams are specified, /etc/resolv.conf is used by default",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatusAction"
- },
- "x-kubernetes-list-type": "atomic"
- },
- "path": {
- "description": "path is the location of a file being managed through a MachineConfig. The Actions in the policy will apply to changes to the file at this path.",
- "type": "string",
- "default": ""
+ "$ref": "#/definitions/io.openshift.operator.v1.Upstream"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "NodeDisruptionPolicyStatusFile",
+ "Kind": "UpstreamResolvers",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.NodeDisruptionPolicyStatusSSHKey": {
- "description": "NodeDisruptionPolicyStatusSSHKey is actions to take for any SSHKey change and is used in the NodeDisruptionPolicyClusterStatus object",
+ "io.openshift.operator.v1.VSphereCSIDriverConfigSpec": {
+ "description": "VSphereCSIDriverConfigSpec defines properties that can be configured for vsphere CSI driver.",
"type": "object",
- "required": [
- "actions"
- ],
"properties": {
- "actions": {
- "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.",
+ "globalMaxSnapshotsPerBlockVolume": {
+ "description": "globalMaxSnapshotsPerBlockVolume is a global configuration parameter that applies to volumes on all kinds of datastores. If omitted, the platform chooses a default, which is subject to change over time, currently that default is 3. Snapshots can not be disabled using this parameter. Increasing number of snapshots above 3 can have negative impact on performance, for more details see: https://kb.vmware.com/s/article/1025279 Volume snapshot documentation: https://docs.vmware.com/en/VMware-vSphere-Container-Storage-Plug-in/3.0/vmware-vsphere-csp-getting-started/GUID-E0B41C69-7EEB-450F-A73D-5FD2FF39E891.html",
+ "type": "integer",
+ "format": "int64"
+ },
+ "granularMaxSnapshotsPerBlockVolumeInVSAN": {
+ "description": "granularMaxSnapshotsPerBlockVolumeInVSAN is a granular configuration parameter on vSAN datastore only. It overrides GlobalMaxSnapshotsPerBlockVolume if set, while it falls back to the global constraint if unset. Snapshots for VSAN can not be disabled using this parameter.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "granularMaxSnapshotsPerBlockVolumeInVVOL": {
+ "description": "granularMaxSnapshotsPerBlockVolumeInVVOL is a granular configuration parameter on Virtual Volumes datastore only. It overrides GlobalMaxSnapshotsPerBlockVolume if set, while it falls back to the global constraint if unset. Snapshots for VVOL can not be disabled using this parameter.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "topologyCategories": {
+ "description": "topologyCategories indicates tag categories with which vcenter resources such as hostcluster or datacenter were tagged with. If cluster Infrastructure object has a topology, values specified in Infrastructure object will be used and modifications to topologyCategories will be rejected.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatusAction"
+ "type": "string",
+ "default": ""
},
"x-kubernetes-list-type": "atomic"
}
@@ -106605,238 +111555,75 @@
"Type": "nested",
"Group": "operator.openshift.io",
"Version": "v1",
- "Kind": "NodeDisruptionPolicyStatusSSHKey",
+ "Kind": "VSphereCSIDriverConfigSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.NodeDisruptionPolicyStatusUnit": {
- "description": "NodeDisruptionPolicyStatusUnit is a systemd unit name and corresponding actions to take and is used in the NodeDisruptionPolicyClusterStatus object",
+ "io.openshift.operator.v1alpha1.BackupJobReference": {
+ "description": "BackupJobReference holds a reference to the batch/v1 Job created to run the etcd backup",
"type": "object",
"required": [
- "name",
- "actions"
+ "namespace",
+ "name"
],
"properties": {
- "actions": {
- "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeDisruptionPolicyStatusAction"
- },
- "x-kubernetes-list-type": "atomic"
- },
"name": {
- "description": "name represents the service name of a systemd service managed through a MachineConfig Actions specified will be applied for changes to the named service. Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".",
+ "description": "name is the name of the Job. Required",
"type": "string",
"default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "NodeDisruptionPolicyStatusUnit",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.NodePlacement": {
- "description": "NodePlacement describes node scheduling configuration for an ingress controller.",
- "type": "object",
- "properties": {
- "nodeSelector": {
- "description": "nodeSelector is the node selector applied to ingress controller deployments.\n\nIf set, the specified selector is used and replaces the default.\n\nIf unset, the default depends on the value of the defaultPlacement field in the cluster config.openshift.io/v1/ingresses status.\n\nWhen defaultPlacement is Workers, the default is:\n\n kubernetes.io/os: linux\n node-role.kubernetes.io/worker: ''\n\nWhen defaultPlacement is ControlPlane, the default is:\n\n kubernetes.io/os: linux\n node-role.kubernetes.io/master: ''\n\nThese defaults are subject to change.\n\nNote that using nodeSelector.matchExpressions is not supported. Only nodeSelector.matchLabels may be used. This is a limitation of the Kubernetes API: the pod spec does not allow complex expressions for node selectors.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
- },
- "tolerations": {
- "description": "tolerations is a list of tolerations applied to ingress controller deployments.\n\nThe default is an empty list.\n\nSee https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.Toleration"
- },
- "x-kubernetes-list-type": "atomic"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "NodePlacement",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.NodePortStrategy": {
- "description": "NodePortStrategy holds parameters for the NodePortService endpoint publishing strategy.",
- "type": "object",
- "properties": {
- "protocol": {
- "description": "protocol specifies whether the IngressController expects incoming connections to use plain TCP or whether the IngressController expects PROXY protocol.\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nThe following values are valid for this field:\n\n* The empty string. * \"TCP\". * \"PROXY\".\n\nThe empty string specifies the default, which is TCP without PROXY protocol. Note that the default is subject to change.",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "NodePortStrategy",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.NodeStatus": {
- "description": "NodeStatus provides information about the current state of a particular node managed by this operator.",
- "type": "object",
- "required": [
- "nodeName",
- "currentRevision"
- ],
- "properties": {
- "currentRevision": {
- "description": "currentRevision is the generation of the most recently successful deployment",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "lastFailedCount": {
- "description": "lastFailedCount is how often the installer pod of the last failed revision failed.",
- "type": "integer",
- "format": "int32"
- },
- "lastFailedReason": {
- "description": "lastFailedReason is a machine readable failure reason string.",
- "type": "string"
- },
- "lastFailedRevision": {
- "description": "lastFailedRevision is the generation of the deployment we tried and failed to deploy.",
- "type": "integer",
- "format": "int32"
- },
- "lastFailedRevisionErrors": {
- "description": "lastFailedRevisionErrors is a list of human readable errors during the failed deployment referenced in lastFailedRevision.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
},
- "lastFailedTime": {
- "description": "lastFailedTime is the time the last failed revision failed the last time.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "lastFallbackCount": {
- "description": "lastFallbackCount is how often a fallback to a previous revision happened.",
- "type": "integer",
- "format": "int32"
- },
- "nodeName": {
- "description": "nodeName is the name of the node",
+ "namespace": {
+ "description": "namespace is the namespace of the Job. this is always expected to be \"openshift-etcd\" since the user provided PVC is also required to be in \"openshift-etcd\" Required",
"type": "string",
"default": ""
- },
- "targetRevision": {
- "description": "targetRevision is the generation of the deployment we're trying to apply",
- "type": "integer",
- "format": "int32"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "NodeStatus",
+ "Version": "v1alpha1",
+ "Kind": "BackupJobReference",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.OAuthAPIServerStatus": {
+ "io.openshift.operator.v1alpha1.DelegatedAuthentication": {
+ "description": "DelegatedAuthentication allows authentication to be disabled.",
"type": "object",
"properties": {
- "latestAvailableRevision": {
- "description": "LatestAvailableRevision is the latest revision used as suffix of revisioned secrets like encryption-config. A new revision causes a new deployment of pods.",
- "type": "integer",
- "format": "int32"
+ "disabled": {
+ "description": "disabled indicates that authentication should be disabled. By default it will use delegated authentication.",
+ "type": "boolean"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OAuthAPIServerStatus",
+ "Version": "v1alpha1",
+ "Kind": "DelegatedAuthentication",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.OVNKubernetesConfig": {
- "description": "ovnKubernetesConfig contains the configuration parameters for networks using the ovn-kubernetes network project",
+ "io.openshift.operator.v1alpha1.DelegatedAuthorization": {
+ "description": "DelegatedAuthorization allows authorization to be disabled.",
"type": "object",
"properties": {
- "egressIPConfig": {
- "description": "egressIPConfig holds the configuration for EgressIP options.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.EgressIPConfig"
- },
- "gatewayConfig": {
- "description": "gatewayConfig holds the configuration for node gateway options.",
- "$ref": "#/definitions/io.openshift.operator.v1.GatewayConfig"
- },
- "genevePort": {
- "description": "geneve port is the UDP port to be used by geneve encapulation. Default is 6081",
- "type": "integer",
- "format": "int64"
- },
- "hybridOverlayConfig": {
- "description": "HybridOverlayConfig configures an additional overlay network for peers that are not using OVN.",
- "$ref": "#/definitions/io.openshift.operator.v1.HybridOverlayConfig"
- },
- "ipsecConfig": {
- "description": "ipsecConfig enables and configures IPsec for pods on the pod network within the cluster.",
- "default": {
- "mode": "Disabled"
- },
- "$ref": "#/definitions/io.openshift.operator.v1.IPsecConfig"
- },
- "ipv4": {
- "description": "ipv4 allows users to configure IP settings for IPv4 connections. When ommitted, this means no opinions and the default configuration is used. Check individual fields within ipv4 for details of default values.",
- "$ref": "#/definitions/io.openshift.operator.v1.IPv4OVNKubernetesConfig"
- },
- "ipv6": {
- "description": "ipv6 allows users to configure IP settings for IPv6 connections. When ommitted, this means no opinions and the default configuration is used. Check individual fields within ipv4 for details of default values.",
- "$ref": "#/definitions/io.openshift.operator.v1.IPv6OVNKubernetesConfig"
- },
- "mtu": {
- "description": "mtu is the MTU to use for the tunnel interface. This must be 100 bytes smaller than the uplink mtu. Default is 1400",
- "type": "integer",
- "format": "int64"
- },
- "policyAuditConfig": {
- "description": "policyAuditConfig is the configuration for network policy audit events. If unset, reported defaults are used.",
- "$ref": "#/definitions/io.openshift.operator.v1.PolicyAuditConfig"
- },
- "routeAdvertisements": {
- "description": "routeAdvertisements determines if the functionality to advertise cluster network routes through a dynamic routing protocol, such as BGP, is enabled or not. This functionality is configured through the ovn-kubernetes RouteAdvertisements CRD. Requires the 'FRR' routing capability provider to be enabled as an additional routing capability. Allowed values are \"Enabled\", \"Disabled\" and ommited. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is \"Disabled\".",
- "type": "string"
- },
- "v4InternalSubnet": {
- "description": "v4InternalSubnet is a v4 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. The value cannot be changed after installation. Default is 100.64.0.0/16",
- "type": "string"
- },
- "v6InternalSubnet": {
- "description": "v6InternalSubnet is a v6 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. The value cannot be changed after installation. Default is fd98::/48",
- "type": "string"
+ "disabled": {
+ "description": "disabled indicates that authorization should be disabled. By default it will use delegated authorization.",
+ "type": "boolean"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OVNKubernetesConfig",
+ "Version": "v1alpha1",
+ "Kind": "DelegatedAuthorization",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.OpenShiftAPIServer": {
- "description": "OpenShiftAPIServer provides information to configure an operator to manage openshift-apiserver.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1alpha1.EtcdBackup": {
+ "description": "# EtcdBackup provides configuration options and status for a one-time backup attempt of the etcd cluster\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "metadata",
"spec"
],
"properties": {
@@ -106849,31 +111636,30 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec is the specification of the desired behavior of the OpenShift API Server.",
+ "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftAPIServerSpec"
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.EtcdBackupSpec"
},
"status": {
- "description": "status defines the observed status of the OpenShift API Server.",
+ "description": "status holds observed values from the cluster. They may not be overridden.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftAPIServerStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.EtcdBackupStatus"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OpenShiftAPIServer",
+ "Version": "v1alpha1",
+ "Kind": "EtcdBackup",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.OpenShiftAPIServerList": {
- "description": "OpenShiftAPIServerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1alpha1.EtcdBackupList": {
+ "description": "EtcdBackupList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
"metadata",
@@ -106885,11 +111671,10 @@
"type": "string"
},
"items": {
- "description": "Items contains the items",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftAPIServer"
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.EtcdBackup"
}
},
"kind": {
@@ -106897,7 +111682,6 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
@@ -106905,114 +111689,152 @@
"x-fabric8-info": {
"Type": "list",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OpenShiftAPIServerList",
+ "Version": "v1alpha1",
+ "Kind": "EtcdBackupList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.OpenShiftAPIServerSpec": {
+ "io.openshift.operator.v1alpha1.EtcdBackupSpec": {
"type": "object",
- "required": [
- "managementState"
- ],
"properties": {
- "logLevel": {
- "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "managementState": {
- "description": "managementState indicates whether and how the operator should manage the component",
+ "pvcName": {
+ "description": "PVCName specifies the name of the PersistentVolumeClaim (PVC) which binds a PersistentVolume where the etcd backup file would be saved The PVC itself must always be created in the \"openshift-etcd\" namespace If the PVC is left unspecified \"\" then the platform will choose a reasonable default location to save the backup. In the future this would be backups saved across the control-plane master nodes.",
"type": "string",
"default": ""
- },
- "observedConfig": {
- "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "operatorLogLevel": {
- "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "unsupportedConfigOverrides": {
- "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OpenShiftAPIServerSpec",
+ "Version": "v1alpha1",
+ "Kind": "EtcdBackupSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.OpenShiftAPIServerStatus": {
+ "io.openshift.operator.v1alpha1.EtcdBackupStatus": {
"type": "object",
"required": [
- "readyReplicas"
+ "backupJob"
],
"properties": {
+ "backupJob": {
+ "description": "backupJob is the reference to the Job that executes the backup. Optional",
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.BackupJobReference"
+ },
"conditions": {
- "description": "conditions is a list of conditions and their status",
+ "description": "conditions provide details on the status of the etcd backup job.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
},
"x-kubernetes-list-map-keys": [
"type"
],
- "x-kubernetes-list-type": "map"
- },
- "generations": {
- "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
- },
- "x-kubernetes-list-map-keys": [
- "group",
- "resource",
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "EtcdBackupStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1alpha1.GenerationHistory": {
+ "description": "GenerationHistory keeps track of the generation for a given resource so that decisions about forced updated can be made. DEPRECATED: Use fields in v1.GenerationStatus instead",
+ "type": "object",
+ "required": [
+ "group",
+ "resource",
+ "namespace",
+ "name",
+ "lastGeneration"
+ ],
+ "properties": {
+ "group": {
+ "description": "group is the group of the thing you're tracking",
+ "type": "string",
+ "default": ""
},
- "latestAvailableRevision": {
- "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "lastGeneration": {
+ "description": "lastGeneration is the last generation of the workload controller involved",
"type": "integer",
- "format": "int32"
+ "format": "int64",
+ "default": 0
},
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
+ "name": {
+ "description": "name is the name of the thing you're tracking",
+ "type": "string",
+ "default": ""
},
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "namespace": {
+ "description": "namespace is where the thing you're tracking is",
+ "type": "string",
+ "default": ""
},
- "version": {
- "description": "version is the level this availability applies to",
- "type": "string"
+ "resource": {
+ "description": "resource is the resource type of the thing you're tracking",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OpenShiftAPIServerStatus",
+ "Version": "v1alpha1",
+ "Kind": "GenerationHistory",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.OpenShiftControllerManager": {
- "description": "OpenShiftControllerManager provides information to configure an operator to manage openshift-controller-manager.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1alpha1.GenericOperatorConfig": {
+ "description": "GenericOperatorConfig provides information to configure an operator\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "authentication": {
+ "description": "authentication allows configuration of authentication for the endpoints",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.DelegatedAuthentication"
+ },
+ "authorization": {
+ "description": "authorization allows configuration of authentication for the endpoints",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.DelegatedAuthorization"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "leaderElection": {
+ "description": "leaderElection provides information to elect a leader. Only override this if you have a specific need",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.LeaderElection"
+ },
+ "servingInfo": {
+ "description": "ServingInfo is the HTTP serving information for the controller's endpoints",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "operator.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "GenericOperatorConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1alpha1.ImageContentSourcePolicy": {
+ "description": "ImageContentSourcePolicy holds cluster-wide information about how to handle registry mirror rules. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "metadata",
"spec"
],
"properties": {
@@ -107030,24 +111852,21 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
+ "description": "spec holds user settable values for configuration",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftControllerManagerSpec"
- },
- "status": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftControllerManagerStatus"
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.ImageContentSourcePolicySpec"
}
},
"x-fabric8-info": {
"Type": "object",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OpenShiftControllerManager",
+ "Version": "v1alpha1",
+ "Kind": "ImageContentSourcePolicy",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.OpenShiftControllerManagerList": {
- "description": "OpenShiftControllerManagerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.operator.v1alpha1.ImageContentSourcePolicyList": {
+ "description": "ImageContentSourcePolicyList lists the items in the ImageContentSourcePolicy CRD.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
"metadata",
@@ -107059,11 +111878,10 @@
"type": "string"
},
"items": {
- "description": "Items contains the items",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OpenShiftControllerManager"
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.ImageContentSourcePolicy"
}
},
"kind": {
@@ -107079,184 +111897,190 @@
"x-fabric8-info": {
"Type": "list",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OpenShiftControllerManagerList",
+ "Version": "v1alpha1",
+ "Kind": "ImageContentSourcePolicyList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.OpenShiftControllerManagerSpec": {
+ "io.openshift.operator.v1alpha1.ImageContentSourcePolicySpec": {
+ "description": "ImageContentSourcePolicySpec is the specification of the ImageContentSourcePolicy CRD.",
+ "type": "object",
+ "properties": {
+ "repositoryDigestMirrors": {
+ "description": "repositoryDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in RepositoryDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. Only image pull specifications that have an image digest will have this behavior applied to them - tags will continue to be pulled from the specified repository in the pull spec.\n\nEach “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.RepositoryDigestMirrors"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "operator.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ImageContentSourcePolicySpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.operator.v1alpha1.LoggingConfig": {
+ "description": "LoggingConfig holds information about configuring logging DEPRECATED: Use v1.LogLevel instead",
"type": "object",
"required": [
- "managementState"
+ "level",
+ "vmodule"
],
"properties": {
- "logLevel": {
- "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
+ "level": {
+ "description": "level is passed to glog.",
+ "type": "integer",
+ "format": "int64",
+ "default": 0
},
- "managementState": {
- "description": "managementState indicates whether and how the operator should manage the component",
+ "vmodule": {
+ "description": "vmodule is passed to glog.",
"type": "string",
"default": ""
- },
- "observedConfig": {
- "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "operatorLogLevel": {
- "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "unsupportedConfigOverrides": {
- "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OpenShiftControllerManagerSpec",
+ "Version": "v1alpha1",
+ "Kind": "LoggingConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.OpenShiftControllerManagerStatus": {
+ "io.openshift.operator.v1alpha1.NodeStatus": {
+ "description": "NodeStatus provides information about the current state of a particular node managed by this operator. Deprecated: Use v1.NodeStatus instead",
"type": "object",
"required": [
- "readyReplicas"
+ "nodeName",
+ "currentDeploymentGeneration",
+ "targetDeploymentGeneration",
+ "lastFailedDeploymentGeneration",
+ "lastFailedDeploymentErrors"
],
"properties": {
- "conditions": {
- "description": "conditions is a list of conditions and their status",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
+ "currentDeploymentGeneration": {
+ "description": "currentDeploymentGeneration is the generation of the most recently successful deployment",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "generations": {
- "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "lastFailedDeploymentErrors": {
+ "description": "lastFailedDeploymentGenerationErrors is a list of the errors during the failed deployment referenced in lastFailedDeploymentGeneration",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
- },
- "x-kubernetes-list-map-keys": [
- "group",
- "resource",
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "type": "string",
+ "default": ""
+ }
},
- "latestAvailableRevision": {
- "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "lastFailedDeploymentGeneration": {
+ "description": "lastFailedDeploymentGeneration is the generation of the deployment we tried and failed to deploy.",
"type": "integer",
- "format": "int32"
+ "format": "int32",
+ "default": 0
},
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
+ "nodeName": {
+ "description": "nodeName is the name of the node",
+ "type": "string",
+ "default": ""
},
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "targetDeploymentGeneration": {
+ "description": "targetDeploymentGeneration is the generation of the deployment we're trying to apply",
"type": "integer",
"format": "int32",
"default": 0
- },
- "version": {
- "description": "version is the level this availability applies to",
- "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OpenShiftControllerManagerStatus",
+ "Version": "v1alpha1",
+ "Kind": "NodeStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.OpenShiftSDNConfig": {
- "description": "OpenShiftSDNConfig was used to configure the OpenShift SDN plugin. It is no longer used.",
+ "io.openshift.operator.v1alpha1.OLM": {
+ "description": "OLM provides information to configure an operator to manage the OLM controllers\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "mode"
+ "metadata",
+ "spec"
],
"properties": {
- "enableUnidling": {
- "description": "enableUnidling controls whether or not the service proxy will support idling and unidling of services. By default, unidling is enabled.",
- "type": "boolean"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "mode": {
- "description": "mode is one of \"Multitenant\", \"Subnet\", or \"NetworkPolicy\"",
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "mtu": {
- "description": "mtu is the mtu to use for the tunnel interface. Defaults to 1450 if unset. This must be 50 bytes smaller than the machine's uplink.",
- "type": "integer",
- "format": "int64"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "useExternalOpenvswitch": {
- "description": "useExternalOpenvswitch used to control whether the operator would deploy an OVS DaemonSet itself or expect someone else to start OVS. As of 4.6, OVS is always run as a system service, and this flag is ignored.",
- "type": "boolean"
+ "spec": {
+ "description": "spec holds user settable values for configuration",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.OLMSpec"
},
- "vxlanPort": {
- "description": "vxlanPort is the port to use for all vxlan packets. The default is 4789.",
- "type": "integer",
- "format": "int64"
+ "status": {
+ "description": "status holds observed values from the cluster. They may not be overridden.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.OLMStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "object",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OpenShiftSDNConfig",
- "Scope": "Namespaced"
+ "Version": "v1alpha1",
+ "Kind": "OLM",
+ "Scope": "Clustered"
}
},
- "io.openshift.operator.v1.OperatorCondition": {
- "description": "OperatorCondition is just the standard condition fields.",
+ "io.openshift.operator.v1alpha1.OLMList": {
+ "description": "OLMList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "type",
- "status"
+ "metadata",
+ "items"
],
"properties": {
- "lastTransitionTime": {
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "reason": {
- "type": "string"
+ "items": {
+ "description": "Items contains the items",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.OLM"
+ }
},
- "status": {
- "type": "string",
- "default": ""
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "type": {
- "type": "string",
- "default": ""
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
+ "Type": "list",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OperatorCondition",
+ "Version": "v1alpha1",
+ "Kind": "OLMList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.OperatorSpec": {
- "description": "OperatorSpec contains common fields operators need. It is intended to be anonymous included inside of the Spec struct for your particular operator.",
+ "io.openshift.operator.v1alpha1.OLMSpec": {
"type": "object",
"required": [
"managementState"
@@ -107287,12 +112111,12 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OperatorSpec",
+ "Version": "v1alpha1",
+ "Kind": "OLMSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.OperatorStatus": {
+ "io.openshift.operator.v1alpha1.OLMStatus": {
"type": "object",
"required": [
"readyReplicas"
@@ -107349,117 +112173,77 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "OperatorStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.PartialSelector": {
- "description": "PartialSelector provides label selector(s) that can be used to match machine management resources.",
- "type": "object",
- "properties": {
- "machineResourceSelector": {
- "description": "machineResourceSelector is a label selector that can be used to select machine resources like MachineSets.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "PartialSelector",
+ "Version": "v1alpha1",
+ "Kind": "OLMStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.Perspective": {
- "description": "Perspective defines a perspective that cluster admins want to show/hide in the perspective switcher dropdown",
+ "io.openshift.operator.v1alpha1.OperatorCondition": {
+ "description": "OperatorCondition is just the standard condition fields. DEPRECATED: Use v1.OperatorCondition instead",
"type": "object",
"required": [
- "id",
- "visibility"
+ "type",
+ "status"
],
"properties": {
- "id": {
- "description": "id defines the id of the perspective. Example: \"dev\", \"admin\". The available perspective ids can be found in the code snippet section next to the yaml editor. Incorrect or unknown ids will be ignored.",
+ "lastTransitionTime": {
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "type": "string"
+ },
+ "reason": {
+ "type": "string"
+ },
+ "status": {
"type": "string",
"default": ""
},
- "pinnedResources": {
- "description": "pinnedResources defines the list of default pinned resources that users will see on the perspective navigation if they have not customized these pinned resources themselves. The list of available Kubernetes resources could be read via `kubectl api-resources`. The console will also provide a configuration UI and a YAML snippet that will list the available resources that can be pinned to the navigation. Incorrect or unknown resources will be ignored.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.PinnedResourceReference"
- }
- },
- "visibility": {
- "description": "visibility defines the state of perspective along with access review checks if needed for that perspective.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.PerspectiveVisibility"
+ "type": {
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "Perspective",
+ "Version": "v1alpha1",
+ "Kind": "OperatorCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.PerspectiveVisibility": {
- "description": "PerspectiveVisibility defines the criteria to show/hide a perspective",
+ "io.openshift.operator.v1alpha1.OperatorSpec": {
+ "description": "OperatorSpec contains common fields for an operator to need. It is intended to be anonymous included inside of the Spec struct for you particular operator. DEPRECATED: Use v1.OperatorSpec instead",
"type": "object",
"required": [
- "state"
+ "managementState",
+ "imagePullSpec",
+ "imagePullPolicy",
+ "version"
],
"properties": {
- "accessReview": {
- "description": "accessReview defines required and missing access review checks.",
- "$ref": "#/definitions/io.openshift.operator.v1.ResourceAttributesAccessReview"
- },
- "state": {
- "description": "state defines the perspective is enabled or disabled or access review check is required.",
+ "imagePullPolicy": {
+ "description": "imagePullPolicy specifies the image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.",
"type": "string",
"default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "PerspectiveVisibility",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "state",
- "fields-to-discriminateBy": {
- "accessReview": "AccessReview"
- }
- }
- ]
- },
- "io.openshift.operator.v1.PinnedResourceReference": {
- "description": "PinnedResourceReference includes the group, version and type of resource",
- "type": "object",
- "required": [
- "group",
- "version",
- "resource"
- ],
- "properties": {
- "group": {
- "description": "group is the API Group of the Resource. Enter empty string for the core group. This value should consist of only lowercase alphanumeric characters, hyphens and periods. Example: \"\", \"apps\", \"build.openshift.io\", etc.",
+ },
+ "imagePullSpec": {
+ "description": "imagePullSpec is the image to use for the component.",
"type": "string",
"default": ""
},
- "resource": {
- "description": "resource is the type that is being referenced. It is normally the plural form of the resource kind in lowercase. This value should consist of only lowercase alphanumeric characters and hyphens. Example: \"deployments\", \"deploymentconfigs\", \"pods\", etc.",
+ "logging": {
+ "description": "logging contains glog parameters for the component pods. It's always a command line arg for the moment",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.LoggingConfig"
+ },
+ "managementState": {
+ "description": "managementState indicates whether and how the operator should manage the component",
"type": "string",
"default": ""
},
"version": {
- "description": "version is the API Version of the Resource. This value should consist of only lowercase alphanumeric characters. Example: \"v1\", \"v1beta1\", etc.",
+ "description": "version is the desired state in major.minor.micro-patch. Usually patch is ignored.",
"type": "string",
"default": ""
}
@@ -107467,360 +112251,366 @@
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "PinnedResourceReference",
+ "Version": "v1alpha1",
+ "Kind": "OperatorSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.PolicyAuditConfig": {
+ "io.openshift.operator.v1alpha1.OperatorStatus": {
+ "description": "OperatorStatus contains common fields for an operator to need. It is intended to be anonymous included inside of the Status struct for you particular operator. DEPRECATED: Use v1.OperatorStatus instead",
"type": "object",
"properties": {
- "destination": {
- "description": "destination is the location for policy log messages. Regardless of this config, persistent logs will always be dumped to the host at /var/log/ovn/ however Additionally syslog output may be configured as follows. Valid values are: - \"libc\" -\u003e to use the libc syslog() function of the host node's journdald process - \"udp:host:port\" -\u003e for sending syslog over UDP - \"unix:file\" -\u003e for using the UNIX domain socket directly - \"null\" -\u003e to discard all messages logged to syslog The default is \"null\"",
- "type": "string"
- },
- "maxFileSize": {
- "description": "maxFilesSize is the max size an ACL_audit log file is allowed to reach before rotation occurs Units are in MB and the Default is 50MB",
- "type": "integer",
- "format": "int64"
+ "conditions": {
+ "description": "conditions is a list of conditions and their status",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.OperatorCondition"
+ }
},
- "maxLogFiles": {
- "description": "maxLogFiles specifies the maximum number of ACL_audit log files that can be present.",
- "type": "integer",
- "format": "int32"
+ "currentVersionAvailability": {
+ "description": "currentVersionAvailability is availability information for the current version. If it is unmanged or removed, this doesn't exist.",
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.VersionAvailability"
},
- "rateLimit": {
- "description": "rateLimit is the approximate maximum number of messages to generate per-second per-node. If unset the default of 20 msg/sec is used.",
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
"type": "integer",
"format": "int64"
},
- "syslogFacility": {
- "description": "syslogFacility the RFC5424 facility for generated messages, e.g. \"kern\". Default is \"local0\"",
+ "state": {
+ "description": "state indicates what the operator has observed to be its current operational status.",
"type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "PolicyAuditConfig",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.PrivateStrategy": {
- "description": "PrivateStrategy holds parameters for the Private endpoint publishing strategy.",
- "type": "object",
- "properties": {
- "protocol": {
- "description": "protocol specifies whether the IngressController expects incoming connections to use plain TCP or whether the IngressController expects PROXY protocol.\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nThe following values are valid for this field:\n\n* The empty string. * \"TCP\". * \"PROXY\".\n\nThe empty string specifies the default, which is TCP without PROXY protocol. Note that the default is subject to change.",
+ },
+ "targetVersionAvailability": {
+ "description": "targetVersionAvailability is availability information for the target version if we are migrating",
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.VersionAvailability"
+ },
+ "taskSummary": {
+ "description": "taskSummary is a high level summary of what the controller is currently attempting to do. It is high-level, human-readable and not guaranteed in any way. (I needed this for debugging and realized it made a great summary).",
"type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "PrivateStrategy",
+ "Version": "v1alpha1",
+ "Kind": "OperatorStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ProjectAccess": {
- "description": "ProjectAccess contains options for project access roles",
+ "io.openshift.operator.v1alpha1.RepositoryDigestMirrors": {
+ "description": "RepositoryDigestMirrors holds cluster-wide information about how to handle mirros in the registries config. Note: the mirrors only work when pulling the images that are referenced by their digests.",
"type": "object",
+ "required": [
+ "source"
+ ],
"properties": {
- "availableClusterRoles": {
- "description": "availableClusterRoles is the list of ClusterRole names that are assignable to users through the project access tab.",
+ "mirrors": {
+ "description": "mirrors is one or more repositories that may also contain the same images. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. Other cluster configuration, including (but not limited to) other repositoryDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
+ },
+ "source": {
+ "description": "source is the repository that users refer to, e.g. in image pull specifications.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "ProjectAccess",
+ "Version": "v1alpha1",
+ "Kind": "RepositoryDigestMirrors",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ProviderLoadBalancerParameters": {
- "description": "ProviderLoadBalancerParameters holds desired load balancer information specific to the underlying infrastructure provider.",
+ "io.openshift.operator.v1alpha1.StaticPodOperatorStatus": {
+ "description": "StaticPodOperatorStatus is status for controllers that manage static pods. There are different needs because individual node status must be tracked. DEPRECATED: Use v1.StaticPodOperatorStatus instead",
"type": "object",
"required": [
- "type"
+ "latestAvailableDeploymentGeneration",
+ "nodeStatuses"
],
"properties": {
- "aws": {
- "description": "aws provides configuration settings that are specific to AWS load balancers.\n\nIf empty, defaults will be applied. See specific aws fields for details about their defaults.",
- "$ref": "#/definitions/io.openshift.operator.v1.AWSLoadBalancerParameters"
+ "conditions": {
+ "description": "conditions is a list of conditions and their status",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.OperatorCondition"
+ }
},
- "gcp": {
- "description": "gcp provides configuration settings that are specific to GCP load balancers.\n\nIf empty, defaults will be applied. See specific gcp fields for details about their defaults.",
- "$ref": "#/definitions/io.openshift.operator.v1.GCPLoadBalancerParameters"
+ "currentVersionAvailability": {
+ "description": "currentVersionAvailability is availability information for the current version. If it is unmanged or removed, this doesn't exist.",
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.VersionAvailability"
},
- "ibm": {
- "description": "ibm provides configuration settings that are specific to IBM Cloud load balancers.\n\nIf empty, defaults will be applied. See specific ibm fields for details about their defaults.",
- "$ref": "#/definitions/io.openshift.operator.v1.IBMLoadBalancerParameters"
+ "latestAvailableDeploymentGeneration": {
+ "description": "latestAvailableDeploymentGeneration is the deploymentID of the most recent deployment",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
},
- "type": {
- "description": "type is the underlying infrastructure provider for the load balancer. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"IBM\", \"Nutanix\", \"OpenStack\", and \"VSphere\".",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "ProviderLoadBalancerParameters",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "aws": "AWS",
- "gcp": "GCP",
- "ibm": "IBM"
+ "nodeStatuses": {
+ "description": "nodeStatuses track the deployment values and errors across individual nodes",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.NodeStatus"
}
- }
- ]
- },
- "io.openshift.operator.v1.ProxyConfig": {
- "description": "ProxyConfig defines the configuration knobs for kubeproxy All of these are optional and have sensible defaults",
- "type": "object",
- "properties": {
- "bindAddress": {
- "description": "The address to \"bind\" on Defaults to 0.0.0.0",
- "type": "string"
},
- "iptablesSyncPeriod": {
- "description": "An internal kube-proxy parameter. In older releases of OCP, this sometimes needed to be adjusted in large clusters for performance reasons, but this is no longer necessary, and there is no reason to change this from the default value. Default: 30s",
+ "observedGeneration": {
+ "description": "observedGeneration is the last generation change you've dealt with",
+ "type": "integer",
+ "format": "int64"
+ },
+ "state": {
+ "description": "state indicates what the operator has observed to be its current operational status.",
"type": "string"
},
- "proxyArguments": {
- "description": "Any additional arguments to pass to the kubeproxy process",
- "type": "object",
- "additionalProperties": {
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- }
+ "targetVersionAvailability": {
+ "description": "targetVersionAvailability is availability information for the target version if we are migrating",
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.VersionAvailability"
+ },
+ "taskSummary": {
+ "description": "taskSummary is a high level summary of what the controller is currently attempting to do. It is high-level, human-readable and not guaranteed in any way. (I needed this for debugging and realized it made a great summary).",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "ProxyConfig",
+ "Version": "v1alpha1",
+ "Kind": "StaticPodOperatorStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.QuickStarts": {
- "description": "QuickStarts allow cluster admins to customize available ConsoleQuickStart resources.",
+ "io.openshift.operator.v1alpha1.VersionAvailability": {
+ "description": "VersionAvailability gives information about the synchronization and operational status of a particular version of the component DEPRECATED: Use fields in v1.OperatorStatus instead",
"type": "object",
+ "required": [
+ "version",
+ "updatedReplicas",
+ "readyReplicas",
+ "errors",
+ "generations"
+ ],
"properties": {
- "disabled": {
- "description": "disabled is a list of ConsoleQuickStart resource names that are not shown to users.",
+ "errors": {
+ "description": "errors indicates what failures are associated with the operator trying to manage this version",
"type": "array",
"items": {
"type": "string",
"default": ""
}
+ },
+ "generations": {
+ "description": "generations allows an operator to track what the generation of \"important\" resources was the last time we updated them",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.operator.v1alpha1.GenerationHistory"
+ }
+ },
+ "readyReplicas": {
+ "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "updatedReplicas": {
+ "description": "updatedReplicas indicates how many replicas are at the desired state",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "version": {
+ "description": "version is the level this availability applies to",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
"Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "QuickStarts",
+ "Version": "v1alpha1",
+ "Kind": "VersionAvailability",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ReloadService": {
- "description": "ReloadService allows the user to specify the services to be reloaded",
+ "io.openshift.platform.v1alpha1.ActiveBundleDeployment": {
+ "description": "ActiveBundleDeployment references a BundleDeployment resource.",
"type": "object",
"required": [
- "serviceName"
+ "name"
],
"properties": {
- "serviceName": {
- "description": "serviceName is the full name (e.g. crio.service) of the service to be reloaded Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".",
+ "name": {
+ "description": "name is the metadata.name of the referenced BundleDeployment object.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "ReloadService",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.ResourceAttributesAccessReview": {
- "description": "ResourceAttributesAccessReview defines the visibility of the perspective depending on the access review checks. `required` and `missing` can work together esp. in the case where the cluster admin wants to show another perspective to users without specific permissions. Out of `required` and `missing` atleast one property should be non-empty.",
- "type": "object",
- "properties": {
- "missing": {
- "description": "missing defines a list of permission checks. The perspective will only be shown when at least one check fails. When omitted, the access review is skipped and the perspective will not be shown unless it is required to do so based on the configuration of the required access review list.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes"
- }
- },
- "required": {
- "description": "required defines a list of permission checks. The perspective will only be shown when all checks are successful. When omitted, the access review is skipped and the perspective will not be shown unless it is required to do so based on the configuration of the missing access review list.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes"
- }
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "ResourceAttributesAccessReview",
+ "Group": "platform.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "ActiveBundleDeployment",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.RestartService": {
- "description": "RestartService allows the user to specify the services to be restarted",
+ "io.openshift.platform.v1alpha1.Package": {
+ "description": "Package contains fields to configure which OLM package this PlatformOperator will install",
"type": "object",
"required": [
- "serviceName"
+ "name"
],
"properties": {
- "serviceName": {
- "description": "serviceName is the full name (e.g. crio.service) of the service to be restarted Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".",
+ "name": {
+ "description": "name contains the desired OLM-based Operator package name that is defined in an existing CatalogSource resource in the cluster.\n\nThis configured package will be managed with the cluster's lifecycle. In the current implementation, it will be retrieving this name from a list of supported operators out of the catalogs included with OpenShift.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "RestartService",
+ "Group": "platform.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "Package",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.RouteAdmissionPolicy": {
- "description": "RouteAdmissionPolicy is an admission policy for allowing new route claims.",
+ "io.openshift.platform.v1alpha1.PlatformOperator": {
+ "description": "PlatformOperator is the Schema for the PlatformOperators API.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
- "namespaceOwnership": {
- "description": "namespaceOwnership describes how host name claims across namespaces should be handled.\n\nValue must be one of:\n\n- Strict: Do not allow routes in different namespaces to claim the same host.\n\n- InterNamespaceAllowed: Allow routes to claim different paths of the same\n host name across namespaces.\n\nIf empty, the default is Strict.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "wildcardPolicy": {
- "description": "wildcardPolicy describes how routes with wildcard policies should be handled for the ingress controller. WildcardPolicy controls use of routes [1] exposed by the ingress controller based on the route's wildcard policy.\n\n[1] https://github.com/openshift/api/blob/master/route/v1/types.go\n\nNote: Updating WildcardPolicy from WildcardsAllowed to WildcardsDisallowed will cause admitted routes with a wildcard policy of Subdomain to stop working. These routes must be updated to a wildcard policy of None to be readmitted by the ingress controller.\n\nWildcardPolicy supports WildcardsAllowed and WildcardsDisallowed values.\n\nIf empty, defaults to \"WildcardsDisallowed\".",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.platform.v1alpha1.PlatformOperatorSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.platform.v1alpha1.PlatformOperatorStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "RouteAdmissionPolicy",
- "Scope": "Namespaced"
+ "Type": "object",
+ "Group": "platform.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PlatformOperator",
+ "Scope": "Clustered"
}
},
- "io.openshift.operator.v1.SFlowConfig": {
+ "io.openshift.platform.v1alpha1.PlatformOperatorList": {
+ "description": "PlatformOperatorList contains a list of PlatformOperators\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "collectors": {
- "description": "sFlowCollectors is list of strings formatted as ip:port with a maximum of ten items",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
"type": "array",
"items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "default": {},
+ "$ref": "#/definitions/io.openshift.platform.v1alpha1.PlatformOperator"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "SFlowConfig",
+ "Type": "list",
+ "Group": "platform.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PlatformOperatorList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.Server": {
- "description": "Server defines the schema for a server that runs per instance of CoreDNS.",
+ "io.openshift.platform.v1alpha1.PlatformOperatorSpec": {
+ "description": "PlatformOperatorSpec defines the desired state of PlatformOperator.",
"type": "object",
"required": [
- "name",
- "zones",
- "forwardPlugin"
+ "package"
],
"properties": {
- "forwardPlugin": {
- "description": "forwardPlugin defines a schema for configuring CoreDNS to proxy DNS messages to upstream resolvers.",
+ "package": {
+ "description": "package contains the desired package and its configuration for this PlatformOperator.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ForwardPlugin"
- },
- "name": {
- "description": "name is required and specifies a unique name for the server. Name must comply with the Service Name Syntax of rfc6335.",
- "type": "string",
- "default": ""
- },
- "zones": {
- "description": "zones is required and specifies the subdomains that Server is authoritative for. Zones must conform to the rfc1123 definition of a subdomain. Specifying the cluster domain (i.e., \"cluster.local\") is invalid.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "$ref": "#/definitions/io.openshift.platform.v1alpha1.Package"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "Server",
+ "Group": "platform.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PlatformOperatorSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ServiceAccountIssuerStatus": {
+ "io.openshift.platform.v1alpha1.PlatformOperatorStatus": {
+ "description": "PlatformOperatorStatus defines the observed state of PlatformOperator",
"type": "object",
- "required": [
- "name"
- ],
"properties": {
- "expirationTime": {
- "description": "expirationTime is the time after which this service account issuer will be pruned and removed from the trusted list of service account issuers.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ "activeBundleDeployment": {
+ "description": "activeBundleDeployment is the reference to the BundleDeployment resource that's being managed by this PO resource. If this field is not populated in the status then it means the PlatformOperator has either not been installed yet or is failing to install.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.platform.v1alpha1.ActiveBundleDeployment"
},
- "name": {
- "description": "name is the name of the service account issuer",
- "type": "string",
- "default": ""
+ "conditions": {
+ "description": "conditions represent the latest available observations of a platform operator's current state.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
+ },
+ "x-kubernetes-list-map-keys": [
+ "type"
+ ],
+ "x-kubernetes-list-type": "map",
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "ServiceAccountIssuerStatus",
+ "Group": "platform.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "PlatformOperatorStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ServiceCA": {
- "description": "ServiceCA provides information to configure an operator to manage the service cert controllers\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.project.v1.Project": {
+ "description": "Projects are the unit of isolation and collaboration in OpenShift. A project has one or more members, a quota on the resources that the project may consume, and the security controls on the resources in the project. Within a project, members may have different roles - project administrators can set membership, editors can create and manage the resources, and viewers can see but not access running containers. In a normal cluster project administrators are not able to alter their quotas - that is restricted to cluster administrators.\n\nListing or watching projects will return only projects the user has the reader role on.\n\nAn OpenShift project is an alternative representation of a Kubernetes namespace. Projects are exposed as editable to end users while namespaces are not. Direct creation of a project is typically restricted to administrators, while end users should use the requestproject resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "metadata",
- "spec"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -107836,29 +112626,28 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec holds user settable values for configuration",
+ "description": "Spec defines the behavior of the Namespace.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ServiceCASpec"
+ "$ref": "#/definitions/io.openshift.project.v1.ProjectSpec"
},
"status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
+ "description": "Status describes the current status of a Namespace",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ServiceCAStatus"
+ "$ref": "#/definitions/io.openshift.project.v1.ProjectStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "operator.openshift.io",
+ "Group": "project.openshift.io",
"Version": "v1",
- "Kind": "ServiceCA",
+ "Kind": "Project",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.ServiceCAList": {
- "description": "ServiceCAList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.project.v1.ProjectList": {
+ "description": "ProjectList is a list of Project objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"items"
],
"properties": {
@@ -107867,11 +112656,11 @@
"type": "string"
},
"items": {
- "description": "Items contains the items",
+ "description": "Items is the list of projects",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ServiceCA"
+ "$ref": "#/definitions/io.openshift.project.v1.Project"
}
},
"kind": {
@@ -107886,114 +112675,103 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "operator.openshift.io",
+ "Group": "project.openshift.io",
"Version": "v1",
- "Kind": "ServiceCAList",
+ "Kind": "ProjectList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ServiceCASpec": {
+ "io.openshift.project.v1.ProjectRequest": {
+ "description": "ProjectRequest is the set of options necessary to fully qualify a project request\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "managementState"
- ],
"properties": {
- "logLevel": {
- "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "managementState": {
- "description": "managementState indicates whether and how the operator should manage the component",
- "type": "string",
- "default": ""
+ "description": {
+ "description": "Description is the description to apply to a project",
+ "type": "string"
},
- "observedConfig": {
- "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "displayName": {
+ "description": "DisplayName is the display name to apply to a project",
+ "type": "string"
},
- "operatorLogLevel": {
- "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "unsupportedConfigOverrides": {
- "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "project.openshift.io",
+ "Version": "v1",
+ "Kind": "ProjectRequest",
+ "Scope": "Clustered"
+ }
+ },
+ "io.openshift.project.v1.ProjectSpec": {
+ "description": "ProjectSpec describes the attributes on a Project",
+ "type": "object",
+ "properties": {
+ "finalizers": {
+ "description": "Finalizers is an opaque list of values that must be empty to permanently remove object from storage",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "project.openshift.io",
"Version": "v1",
- "Kind": "ServiceCASpec",
+ "Kind": "ProjectSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ServiceCAStatus": {
+ "io.openshift.project.v1.ProjectStatus": {
+ "description": "ProjectStatus is information about the current status of a Project",
"type": "object",
- "required": [
- "readyReplicas"
- ],
"properties": {
"conditions": {
- "description": "conditions is a list of conditions and their status",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
- },
- "generations": {
- "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "description": "Represents the latest available observations of the project current state.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ "$ref": "#/definitions/io.k8s.api.core.v1.NamespaceCondition"
},
- "x-kubernetes-list-map-keys": [
- "group",
- "resource",
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "latestAvailableRevision": {
- "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
- "type": "integer",
- "format": "int32"
- },
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
- },
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "version": {
- "description": "version is the level this availability applies to",
- "type": "string"
+ "phase": {
+ "description": "Phase is the current lifecycle phase of the project\n\nPossible enum values:\n - `\"Active\"` means the namespace is available for use in the system\n - `\"Terminating\"` means the namespace is undergoing graceful termination",
+ "type": "string",
+ "enum": [
+ "Active",
+ "Terminating"
+ ]
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "project.openshift.io",
"Version": "v1",
- "Kind": "ServiceCAStatus",
+ "Kind": "ProjectStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ServiceCatalogAPIServer": {
- "description": "ServiceCatalogAPIServer provides information to configure an operator to manage Service Catalog API Server DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.quota.v1.AppliedClusterResourceQuota": {
+ "description": "AppliedClusterResourceQuota mirrors ClusterResourceQuota at a project scope, for projection into a project. It allows a project-admin to know which ClusterResourceQuotas are applied to his project and their associated usage.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
+ "metadata",
"spec"
],
"properties": {
@@ -108011,27 +112789,28 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
+ "description": "Spec defines the desired quota",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ServiceCatalogAPIServerSpec"
+ "$ref": "#/definitions/io.openshift.quota.v1.ClusterResourceQuotaSpec"
},
"status": {
+ "description": "Status defines the actual enforced quota and its current usage",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ServiceCatalogAPIServerStatus"
+ "$ref": "#/definitions/io.openshift.quota.v1.ClusterResourceQuotaStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "operator.openshift.io",
+ "Group": "quota.openshift.io",
"Version": "v1",
- "Kind": "ServiceCatalogAPIServer",
- "Scope": "Clustered"
+ "Kind": "AppliedClusterResourceQuota",
+ "Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ServiceCatalogAPIServerList": {
- "description": "ServiceCatalogAPIServerList is a collection of items DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.quota.v1.AppliedClusterResourceQuotaList": {
+ "description": "AppliedClusterResourceQuotaList is a collection of AppliedClusterResourceQuotas\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"items"
],
"properties": {
@@ -108040,11 +112819,11 @@
"type": "string"
},
"items": {
- "description": "Items contains the items",
+ "description": "Items is a list of AppliedClusterResourceQuota",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ServiceCatalogAPIServer"
+ "$ref": "#/definitions/io.openshift.quota.v1.AppliedClusterResourceQuota"
}
},
"kind": {
@@ -108059,112 +112838,14 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "ServiceCatalogAPIServerList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.ServiceCatalogAPIServerSpec": {
- "type": "object",
- "required": [
- "managementState"
- ],
- "properties": {
- "logLevel": {
- "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "managementState": {
- "description": "managementState indicates whether and how the operator should manage the component",
- "type": "string",
- "default": ""
- },
- "observedConfig": {
- "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "operatorLogLevel": {
- "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "unsupportedConfigOverrides": {
- "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "ServiceCatalogAPIServerSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.ServiceCatalogAPIServerStatus": {
- "type": "object",
- "required": [
- "readyReplicas"
- ],
- "properties": {
- "conditions": {
- "description": "conditions is a list of conditions and their status",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
- },
- "generations": {
- "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
- },
- "x-kubernetes-list-map-keys": [
- "group",
- "resource",
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "latestAvailableRevision": {
- "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
- "type": "integer",
- "format": "int32"
- },
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
- },
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "version": {
- "description": "version is the level this availability applies to",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "quota.openshift.io",
"Version": "v1",
- "Kind": "ServiceCatalogAPIServerStatus",
+ "Kind": "AppliedClusterResourceQuotaList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ServiceCatalogControllerManager": {
- "description": "ServiceCatalogControllerManager provides information to configure an operator to manage Service Catalog Controller Manager DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.quota.v1.ClusterResourceQuota": {
+ "description": "ClusterResourceQuota mirrors ResourceQuota at a cluster scope. This object is easily convertible to synthetic ResourceQuota object to allow quota evaluation re-use.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"metadata",
@@ -108185,27 +112866,28 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
+ "description": "Spec defines the desired quota",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ServiceCatalogControllerManagerSpec"
+ "$ref": "#/definitions/io.openshift.quota.v1.ClusterResourceQuotaSpec"
},
"status": {
+ "description": "Status defines the actual enforced quota and its current usage",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ServiceCatalogControllerManagerStatus"
+ "$ref": "#/definitions/io.openshift.quota.v1.ClusterResourceQuotaStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "operator.openshift.io",
+ "Group": "quota.openshift.io",
"Version": "v1",
- "Kind": "ServiceCatalogControllerManager",
+ "Kind": "ClusterResourceQuota",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1.ServiceCatalogControllerManagerList": {
- "description": "ServiceCatalogControllerManagerList is a collection of items DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.quota.v1.ClusterResourceQuotaList": {
+ "description": "ClusterResourceQuotaList is a collection of ClusterResourceQuotas\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"items"
],
"properties": {
@@ -108214,11 +112896,11 @@
"type": "string"
},
"items": {
- "description": "Items contains the items",
+ "description": "Items is a list of ClusterResourceQuotas",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.ServiceCatalogControllerManager"
+ "$ref": "#/definitions/io.openshift.quota.v1.ClusterResourceQuota"
}
},
"kind": {
@@ -108233,451 +112915,374 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "operator.openshift.io",
+ "Group": "quota.openshift.io",
"Version": "v1",
- "Kind": "ServiceCatalogControllerManagerList",
+ "Kind": "ClusterResourceQuotaList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ServiceCatalogControllerManagerSpec": {
+ "io.openshift.quota.v1.ClusterResourceQuotaSelector": {
+ "description": "ClusterResourceQuotaSelector is used to select projects. At least one of LabelSelector or AnnotationSelector must present. If only one is present, it is the only selection criteria. If both are specified, the project must match both restrictions.",
"type": "object",
- "required": [
- "managementState"
- ],
"properties": {
- "logLevel": {
- "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "managementState": {
- "description": "managementState indicates whether and how the operator should manage the component",
- "type": "string",
- "default": ""
- },
- "observedConfig": {
- "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "operatorLogLevel": {
- "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
+ "annotations": {
+ "description": "AnnotationSelector is used to select projects by annotation.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
},
- "unsupportedConfigOverrides": {
- "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "labels": {
+ "description": "LabelSelector is used to select projects by label.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "quota.openshift.io",
"Version": "v1",
- "Kind": "ServiceCatalogControllerManagerSpec",
+ "Kind": "ClusterResourceQuotaSelector",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.ServiceCatalogControllerManagerStatus": {
+ "io.openshift.quota.v1.ClusterResourceQuotaSpec": {
+ "description": "ClusterResourceQuotaSpec defines the desired quota restrictions",
"type": "object",
"required": [
- "readyReplicas"
+ "selector",
+ "quota"
],
"properties": {
- "conditions": {
- "description": "conditions is a list of conditions and their status",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
- },
- "generations": {
- "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
- },
- "x-kubernetes-list-map-keys": [
- "group",
- "resource",
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "latestAvailableRevision": {
- "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
- "type": "integer",
- "format": "int32"
- },
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
- },
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "quota": {
+ "description": "Quota defines the desired quota",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaSpec"
},
- "version": {
- "description": "version is the level this availability applies to",
- "type": "string"
+ "selector": {
+ "description": "Selector is the selector used to match projects. It should only select active projects on the scale of dozens (though it can select many more less active projects). These projects will contend on object creation through this resource.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.quota.v1.ClusterResourceQuotaSelector"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "quota.openshift.io",
"Version": "v1",
- "Kind": "ServiceCatalogControllerManagerStatus",
+ "Kind": "ClusterResourceQuotaSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.SimpleMacvlanConfig": {
- "description": "SimpleMacvlanConfig contains configurations for macvlan interface.",
+ "io.openshift.quota.v1.ClusterResourceQuotaStatus": {
+ "description": "ClusterResourceQuotaStatus defines the actual enforced quota and its current usage",
"type": "object",
+ "required": [
+ "total"
+ ],
"properties": {
- "ipamConfig": {
- "description": "IPAMConfig configures IPAM module will be used for IP Address Management (IPAM).",
- "$ref": "#/definitions/io.openshift.operator.v1.IPAMConfig"
- },
- "master": {
- "description": "master is the host interface to create the macvlan interface from. If not specified, it will be default route interface",
- "type": "string"
- },
- "mode": {
- "description": "mode is the macvlan mode: bridge, private, vepa, passthru. The default is bridge",
- "type": "string"
+ "namespaces": {
+ "description": "Namespaces slices the usage by project. This division allows for quick resolution of deletion reconciliation inside of a single project without requiring a recalculation across all projects. This can be used to pull the deltas for a given project.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.quota.v1.ResourceQuotaStatusByNamespace"
+ }
},
- "mtu": {
- "description": "mtu is the mtu to use for the macvlan interface. if unset, host's kernel will select the value.",
- "type": "integer",
- "format": "int64"
+ "total": {
+ "description": "Total defines the actual enforced quota and its current usage across all projects",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaStatus"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "quota.openshift.io",
"Version": "v1",
- "Kind": "SimpleMacvlanConfig",
+ "Kind": "ClusterResourceQuotaStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.StaticIPAMAddresses": {
- "description": "StaticIPAMAddresses provides IP address and Gateway for static IPAM addresses",
+ "io.openshift.quota.v1.ResourceQuotaStatusByNamespace": {
+ "description": "ResourceQuotaStatusByNamespace gives status for a particular project",
"type": "object",
+ "required": [
+ "namespace",
+ "status"
+ ],
"properties": {
- "address": {
- "description": "Address is the IP address in CIDR format",
+ "namespace": {
+ "description": "Namespace the project this status applies to",
"type": "string",
"default": ""
},
- "gateway": {
- "description": "Gateway is IP inside of subnet to designate as the gateway",
- "type": "string"
+ "status": {
+ "description": "Status indicates how many resources have been consumed by this project",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaStatus"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "quota.openshift.io",
"Version": "v1",
- "Kind": "StaticIPAMAddresses",
+ "Kind": "ResourceQuotaStatusByNamespace",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.StaticIPAMConfig": {
- "description": "StaticIPAMConfig contains configurations for static IPAM (IP Address Management)",
+ "io.openshift.route.v1.LocalObjectReference": {
+ "description": "LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace.",
"type": "object",
"properties": {
- "addresses": {
- "description": "Addresses configures IP address for the interface",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.StaticIPAMAddresses"
- },
- "x-kubernetes-list-type": "atomic"
- },
- "dns": {
- "description": "DNS configures DNS for the interface",
- "$ref": "#/definitions/io.openshift.operator.v1.StaticIPAMDNS"
- },
- "routes": {
- "description": "Routes configures IP routes for the interface",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.StaticIPAMRoutes"
- },
- "x-kubernetes-list-type": "atomic"
+ "name": {
+ "description": "name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "route.openshift.io",
"Version": "v1",
- "Kind": "StaticIPAMConfig",
+ "Kind": "LocalObjectReference",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-map-type": "atomic"
},
- "io.openshift.operator.v1.StaticIPAMDNS": {
- "description": "StaticIPAMDNS provides DNS related information for static IPAM",
+ "io.openshift.route.v1.Route": {
+ "description": "A route allows developers to expose services through an HTTP(S) aware load balancing and proxy layer via a public DNS entry. The route may further specify TLS options and a certificate, or specify a public CNAME that the router should also accept for HTTP and HTTPS traffic. An administrator typically configures their router to be visible outside the cluster firewall, and may also add additional security, caching, or traffic controls on the service content. Routers usually talk directly to the service endpoints.\n\nOnce a route is created, the `host` field may not be changed. Generally, routers use the oldest route with a given host when resolving conflicts.\n\nRouters are subject to additional customization and may support additional controls via the annotations field.\n\nBecause administrators may configure multiple routers, the route status field is used to return information to clients about the names and states of the route under each router. If a client chooses a duplicate name, for instance, the route status conditions are used to indicate the route cannot be chosen.\n\nTo enable HTTP/2 ALPN on a route it requires a custom (non-wildcard) certificate. This prevents connection coalescing by clients, notably web browsers. We do not support HTTP/2 ALPN on routes that use the default certificate because of the risk of connection re-use/coalescing. Routes that do not have their own custom certificate will not be HTTP/2 ALPN-enabled on either the frontend or the backend.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
- "domain": {
- "description": "Domain configures the domainname the local domain used for short hostname lookups",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "nameservers": {
- "description": "Nameservers points DNS servers for IP lookup",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "search": {
- "description": "Search configures priority ordered search domains for short hostname lookups",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec is the desired state of the route",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.route.v1.RouteSpec"
+ },
+ "status": {
+ "description": "status is the current state of the route",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.route.v1.RouteStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
+ "Type": "object",
+ "Group": "route.openshift.io",
"Version": "v1",
- "Kind": "StaticIPAMDNS",
+ "Kind": "Route",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.StaticIPAMRoutes": {
- "description": "StaticIPAMRoutes provides Destination/Gateway pairs for static IPAM routes",
+ "io.openshift.route.v1.RouteHTTPHeader": {
+ "description": "RouteHTTPHeader specifies configuration for setting or deleting an HTTP header.",
"type": "object",
"required": [
- "destination"
+ "name",
+ "action"
],
"properties": {
- "destination": {
- "description": "Destination points the IP route destination",
+ "action": {
+ "description": "action specifies actions to perform on headers, such as setting or deleting headers.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.route.v1.RouteHTTPHeaderActionUnion"
+ },
+ "name": {
+ "description": "name specifies the name of a header on which to perform an action. Its value must be a valid HTTP header name as defined in RFC 2616 section 4.2. The name must consist only of alphanumeric and the following special characters, \"-!#$%\u0026'*+.^_`\". The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Cookie, Set-Cookie. It must be no more than 255 characters in length. Header name must be unique.",
"type": "string",
"default": ""
- },
- "gateway": {
- "description": "Gateway is the route's next-hop IP address If unset, a default gateway is assumed (as determined by the CNI plugin).",
- "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "route.openshift.io",
"Version": "v1",
- "Kind": "StaticIPAMRoutes",
+ "Kind": "RouteHTTPHeader",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.StaticPodOperatorSpec": {
- "description": "StaticPodOperatorSpec is spec for controllers that manage static pods.",
+ "io.openshift.route.v1.RouteHTTPHeaderActionUnion": {
+ "description": "RouteHTTPHeaderActionUnion specifies an action to take on an HTTP header.",
"type": "object",
"required": [
- "managementState",
- "forceRedeploymentReason"
+ "type"
],
"properties": {
- "failedRevisionLimit": {
- "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
- "type": "integer",
- "format": "int32"
- },
- "forceRedeploymentReason": {
- "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.",
- "type": "string",
- "default": ""
- },
- "logLevel": {
- "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
+ "set": {
+ "description": "set defines the HTTP header that should be set: added if it doesn't exist or replaced if it does. This field is required when type is Set and forbidden otherwise.",
+ "$ref": "#/definitions/io.openshift.route.v1.RouteSetHTTPHeader"
},
- "managementState": {
- "description": "managementState indicates whether and how the operator should manage the component",
+ "type": {
+ "description": "type defines the type of the action to be applied on the header. Possible values are Set or Delete. Set allows you to set HTTP request and response headers. Delete allows you to delete HTTP request and response headers.",
"type": "string",
"default": ""
- },
- "observedConfig": {
- "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "operatorLogLevel": {
- "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "succeededRevisionLimit": {
- "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)",
- "type": "integer",
- "format": "int32"
- },
- "unsupportedConfigOverrides": {
- "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "route.openshift.io",
"Version": "v1",
- "Kind": "StaticPodOperatorSpec",
+ "Kind": "RouteHTTPHeaderActionUnion",
"Scope": "Namespaced"
- }
+ },
+ "x-kubernetes-unions": [
+ {
+ "discriminator": "type",
+ "fields-to-discriminateBy": {
+ "set": "Set"
+ }
+ }
+ ]
},
- "io.openshift.operator.v1.StaticPodOperatorStatus": {
- "description": "StaticPodOperatorStatus is status for controllers that manage static pods. There are different needs because individual node status must be tracked.",
+ "io.openshift.route.v1.RouteHTTPHeaderActions": {
+ "description": "RouteHTTPHeaderActions defines configuration for actions on HTTP request and response headers.",
"type": "object",
- "required": [
- "readyReplicas"
- ],
"properties": {
- "conditions": {
- "description": "conditions is a list of conditions and their status",
+ "request": {
+ "description": "request is a list of HTTP request headers to modify. Currently, actions may define to either `Set` or `Delete` headers values. Actions defined here will modify the request headers of all requests made through a route. These actions are applied to a specific Route defined within a cluster i.e. connections made through a route. Currently, actions may define to either `Set` or `Delete` headers values. Route actions will be executed after IngressController actions for request headers. Actions are applied in sequence as defined in this list. A maximum of 20 request header actions may be configured. You can use this field to specify HTTP request headers that should be set or deleted when forwarding connections from the client to your application. Sample fetchers allowed are \"req.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[req.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\". Any request header configuration applied directly via a Route resource using this API will override header configuration for a header of the same name applied via spec.httpHeaders.actions on the IngressController or route annotation. Note: This field cannot be used if your route uses TLS passthrough.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ "$ref": "#/definitions/io.openshift.route.v1.RouteHTTPHeader"
},
"x-kubernetes-list-map-keys": [
- "type"
+ "name"
],
"x-kubernetes-list-type": "map"
},
- "generations": {
- "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "response": {
+ "description": "response is a list of HTTP response headers to modify. Currently, actions may define to either `Set` or `Delete` headers values. Actions defined here will modify the response headers of all requests made through a route. These actions are applied to a specific Route defined within a cluster i.e. connections made through a route. Route actions will be executed before IngressController actions for response headers. Actions are applied in sequence as defined in this list. A maximum of 20 response header actions may be configured. You can use this field to specify HTTP response headers that should be set or deleted when forwarding responses from your application to the client. Sample fetchers allowed are \"res.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[res.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\". Note: This field cannot be used if your route uses TLS passthrough.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
+ "$ref": "#/definitions/io.openshift.route.v1.RouteHTTPHeader"
},
"x-kubernetes-list-map-keys": [
- "group",
- "resource",
- "namespace",
"name"
],
"x-kubernetes-list-type": "map"
- },
- "latestAvailableRevision": {
- "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
- "type": "integer",
- "format": "int32"
- },
- "latestAvailableRevisionReason": {
- "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment",
- "type": "string"
- },
- "nodeStatuses": {
- "description": "nodeStatuses track the deployment values and errors across individual nodes",
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "route.openshift.io",
+ "Version": "v1",
+ "Kind": "RouteHTTPHeaderActions",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.route.v1.RouteHTTPHeaders": {
+ "description": "RouteHTTPHeaders defines policy for HTTP headers.",
+ "type": "object",
+ "properties": {
+ "actions": {
+ "description": "actions specifies options for modifying headers and their values. Note that this option only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). Headers cannot be modified for TLS passthrough connections. Setting the HSTS (`Strict-Transport-Security`) header is not supported via actions. `Strict-Transport-Security` may only be configured using the \"haproxy.router.openshift.io/hsts_header\" route annotation, and only in accordance with the policy specified in Ingress.Spec.RequiredHSTSPolicies. In case of HTTP request headers, the actions specified in spec.httpHeaders.actions on the Route will be executed after the actions specified in the IngressController's spec.httpHeaders.actions field. In case of HTTP response headers, the actions specified in spec.httpHeaders.actions on the IngressController will be executed after the actions specified in the Route's spec.httpHeaders.actions field. The headers set via this API will not appear in access logs. Any actions defined here are applied after any actions related to the following other fields: cache-control, spec.clientTLS, spec.httpHeaders.forwardedHeaderPolicy, spec.httpHeaders.uniqueId, and spec.httpHeaders.headerNameCaseAdjustments. The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Cookie, Set-Cookie. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController. Please refer to the documentation for that API field for more details.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.route.v1.RouteHTTPHeaderActions"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "route.openshift.io",
+ "Version": "v1",
+ "Kind": "RouteHTTPHeaders",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.route.v1.RouteIngress": {
+ "description": "RouteIngress holds information about the places where a route is exposed.",
+ "type": "object",
+ "properties": {
+ "conditions": {
+ "description": "Conditions is the state of the route, may be empty.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.NodeStatus"
+ "$ref": "#/definitions/io.openshift.route.v1.RouteIngressCondition"
},
"x-kubernetes-list-map-keys": [
- "nodeName"
+ "type"
],
"x-kubernetes-list-type": "map"
},
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
+ "host": {
+ "description": "Host is the host string under which the route is exposed; this value is required",
+ "type": "string"
},
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "routerCanonicalHostname": {
+ "description": "CanonicalHostname is the external host name for the router that can be used as a CNAME for the host requested for this route. This value is optional and may not be set in all cases.",
+ "type": "string"
},
- "version": {
- "description": "version is the level this availability applies to",
+ "routerName": {
+ "description": "Name is a name chosen by the router to identify itself; this value is required",
+ "type": "string"
+ },
+ "wildcardPolicy": {
+ "description": "Wildcard policy is the wildcard policy that was allowed where this route is exposed.",
"type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1",
- "Kind": "StaticPodOperatorStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1.StatuspageProvider": {
- "description": "StatuspageProvider provides identity for statuspage account.",
- "type": "object",
- "required": [
- "pageID"
- ],
- "properties": {
- "pageID": {
- "description": "pageID is the unique ID assigned by Statuspage for your page. This must be a public page.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "route.openshift.io",
"Version": "v1",
- "Kind": "StatuspageProvider",
+ "Kind": "RouteIngress",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.Storage": {
- "description": "Storage provides a means to configure an operator to manage the cluster storage operator. `cluster` is the canonical name.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.route.v1.RouteIngressCondition": {
+ "description": "RouteIngressCondition contains details for the current condition of this route on a particular router.",
"type": "object",
"required": [
- "spec"
+ "type",
+ "status"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "lastTransitionTime": {
+ "description": "RFC 3339 date and time when this condition last transitioned",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "message": {
+ "description": "Human readable message indicating details about last transition.",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec holds user settable values for configuration",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.StorageSpec"
+ "reason": {
+ "description": "(brief) reason for the condition's last transition, and is usually a machine and human readable constant",
+ "type": "string"
},
"status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.StorageStatus"
+ "description": "Status is the status of the condition. Can be True, False, Unknown.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "Type is the type of the condition. Currently only Admitted or UnservableInFutureVersions.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "operator.openshift.io",
+ "Type": "nested",
+ "Group": "route.openshift.io",
"Version": "v1",
- "Kind": "Storage",
- "Scope": "Clustered"
+ "Kind": "RouteIngressCondition",
+ "Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.StorageList": {
- "description": "StorageList contains a list of Storages.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.route.v1.RouteList": {
+ "description": "RouteList is a collection of Routes.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"items"
@@ -108688,10 +113293,11 @@
"type": "string"
},
"items": {
+ "description": "items is a list of routes",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.Storage"
+ "$ref": "#/definitions/io.openshift.route.v1.Route"
}
},
"kind": {
@@ -108706,319 +113312,313 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "operator.openshift.io",
+ "Group": "route.openshift.io",
"Version": "v1",
- "Kind": "StorageList",
+ "Kind": "RouteList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.StorageSpec": {
- "description": "StorageSpec is the specification of the desired behavior of the cluster storage operator.",
+ "io.openshift.route.v1.RoutePort": {
+ "description": "RoutePort defines a port mapping from a router to an endpoint in the service endpoints.",
"type": "object",
"required": [
- "managementState"
+ "targetPort"
],
"properties": {
- "logLevel": {
- "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "managementState": {
- "description": "managementState indicates whether and how the operator should manage the component",
- "type": "string",
- "default": ""
- },
- "observedConfig": {
- "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "operatorLogLevel": {
- "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "unsupportedConfigOverrides": {
- "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "vsphereStorageDriver": {
- "description": "VSphereStorageDriver indicates the storage driver to use on VSphere clusters. Once this field is set to CSIWithMigrationDriver, it can not be changed. If this is empty, the platform will choose a good default, which may change over time without notice. The current default is CSIWithMigrationDriver and may not be changed. DEPRECATED: This field will be removed in a future release.",
+ "targetPort": {
+ "description": "The target port on pods selected by the service this route points to. If this is a string, it will be looked up as a named port in the target endpoints port list. Required",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "route.openshift.io",
+ "Version": "v1",
+ "Kind": "RoutePort",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.route.v1.RouteSetHTTPHeader": {
+ "description": "RouteSetHTTPHeader specifies what value needs to be set on an HTTP header.",
+ "type": "object",
+ "required": [
+ "value"
+ ],
+ "properties": {
+ "value": {
+ "description": "value specifies a header value. Dynamic values can be added. The value will be interpreted as an HAProxy format string as defined in http://cbonte.github.io/haproxy-dconv/2.6/configuration.html#8.2.6 and may use HAProxy's %[] syntax and otherwise must be a valid HTTP header value as defined in https://datatracker.ietf.org/doc/html/rfc7230#section-3.2. The value of this field must be no more than 16384 characters in length. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "route.openshift.io",
"Version": "v1",
- "Kind": "StorageSpec",
+ "Kind": "RouteSetHTTPHeader",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.StorageStatus": {
- "description": "StorageStatus defines the observed status of the cluster storage operator.",
+ "io.openshift.route.v1.RouteSpec": {
+ "description": "RouteSpec describes the hostname or path the route exposes, any security information, and one to four backends (services) the route points to. Requests are distributed among the backends depending on the weights assigned to each backend. When using roundrobin scheduling the portion of requests that go to each backend is the backend weight divided by the sum of all of the backend weights. When the backend has more than one endpoint the requests that end up on the backend are roundrobin distributed among the endpoints. Weights are between 0 and 256 with default 100. Weight 0 causes no requests to the backend. If all weights are zero the route will be considered to have no backends and return a standard 503 response.\n\nThe `tls` field is optional and allows specific certificates or behavior for the route. Routers typically configure a default certificate on a wildcard domain to terminate routes without explicit certificates, but custom hostnames usually must choose passthrough (send traffic directly to the backend via the TLS Server-Name- Indication field) or provide a certificate.",
"type": "object",
"required": [
- "readyReplicas"
+ "to"
],
"properties": {
- "conditions": {
- "description": "conditions is a list of conditions and their status",
+ "alternateBackends": {
+ "description": "alternateBackends allows up to 3 additional backends to be assigned to the route. Only the Service kind is allowed, and it will be defaulted to Service. Use the weight field in RouteTargetReference object to specify relative preference.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
+ "$ref": "#/definitions/io.openshift.route.v1.RouteTargetReference"
},
"x-kubernetes-list-map-keys": [
- "type"
+ "name",
+ "kind"
],
"x-kubernetes-list-type": "map"
},
- "generations": {
- "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
- },
- "x-kubernetes-list-map-keys": [
- "group",
- "resource",
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "host": {
+ "description": "host is an alias/DNS that points to the service. Optional. If not specified a route name will typically be automatically chosen. Must follow DNS952 subdomain conventions.",
+ "type": "string"
},
- "latestAvailableRevision": {
- "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
- "type": "integer",
- "format": "int32"
+ "httpHeaders": {
+ "description": "httpHeaders defines policy for HTTP headers.",
+ "$ref": "#/definitions/io.openshift.route.v1.RouteHTTPHeaders"
},
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
+ "path": {
+ "description": "path that the router watches for, to route traffic for to the service. Optional",
+ "type": "string"
},
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "port": {
+ "description": "If specified, the port to be used by the router. Most routers will use all endpoints exposed by the service by default - set this value to instruct routers which port to use.",
+ "$ref": "#/definitions/io.openshift.route.v1.RoutePort"
},
- "version": {
- "description": "version is the level this availability applies to",
+ "subdomain": {
+ "description": "subdomain is a DNS subdomain that is requested within the ingress controller's domain (as a subdomain). If host is set this field is ignored. An ingress controller may choose to ignore this suggested name, in which case the controller will report the assigned name in the status.ingress array or refuse to admit the route. If this value is set and the server does not support this field host will be populated automatically. Otherwise host is left empty. The field may have multiple parts separated by a dot, but not all ingress controllers may honor the request. This field may not be changed after creation except by a user with the update routes/custom-host permission.\n\nExample: subdomain `frontend` automatically receives the router subdomain `apps.mycluster.com` to have a full hostname `frontend.apps.mycluster.com`.",
+ "type": "string"
+ },
+ "tls": {
+ "description": "The tls field provides the ability to configure certificates and termination for the route.",
+ "$ref": "#/definitions/io.openshift.route.v1.TLSConfig"
+ },
+ "to": {
+ "description": "to is an object the route should use as the primary backend. Only the Service kind is allowed, and it will be defaulted to Service. If the weight field (0-256 default 100) is set to zero, no traffic will be sent to this backend.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.route.v1.RouteTargetReference"
+ },
+ "wildcardPolicy": {
+ "description": "Wildcard policy if any for the route. Currently only 'Subdomain' or 'None' is allowed.",
"type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "route.openshift.io",
"Version": "v1",
- "Kind": "StorageStatus",
+ "Kind": "RouteSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.SyslogLoggingDestinationParameters": {
- "description": "SyslogLoggingDestinationParameters describes parameters for the Syslog logging destination type.",
+ "io.openshift.route.v1.RouteStatus": {
+ "description": "RouteStatus provides relevant info about the status of a route, including which routers acknowledge it.",
"type": "object",
- "required": [
- "address",
- "port"
- ],
"properties": {
- "address": {
- "description": "address is the IP address of the syslog endpoint that receives log messages.",
- "type": "string",
- "default": ""
- },
- "facility": {
- "description": "facility specifies the syslog facility of log messages.\n\nIf this field is empty, the facility is \"local1\".",
- "type": "string"
- },
- "maxLength": {
- "description": "maxLength is the maximum length of the log message.\n\nValid values are integers in the range 480 to 4096, inclusive.\n\nWhen omitted, the default value is 1024.",
- "type": "integer",
- "format": "int64"
- },
- "port": {
- "description": "port is the UDP port number of the syslog endpoint that receives log messages.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "ingress": {
+ "description": "ingress describes the places where the route may be exposed. The list of ingress points may contain duplicate Host or RouterName values. Routes are considered live once they are `Ready`",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.route.v1.RouteIngress"
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "route.openshift.io",
"Version": "v1",
- "Kind": "SyslogLoggingDestinationParameters",
+ "Kind": "RouteStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.Upstream": {
- "description": "Upstream can either be of type SystemResolvConf, or of type Network.\n\n - For an Upstream of type SystemResolvConf, no further fields are necessary:\n The upstream will be configured to use /etc/resolv.conf.\n - For an Upstream of type Network, a NetworkResolver field needs to be defined\n with an IP address or IP:port if the upstream listens on a port other than 53.",
+ "io.openshift.route.v1.RouteTargetReference": {
+ "description": "RouteTargetReference specifies the target that resolve into endpoints. Only the 'Service' kind is allowed. Use 'weight' field to emphasize one over others.",
"type": "object",
"required": [
- "type"
+ "kind",
+ "name"
],
"properties": {
- "address": {
- "description": "Address must be defined when Type is set to Network. It will be ignored otherwise. It must be a valid ipv4 or ipv6 address.",
- "type": "string"
- },
- "port": {
- "description": "Port may be defined when Type is set to Network. It will be ignored otherwise. Port must be between 65535",
- "type": "integer",
- "format": "int64"
+ "kind": {
+ "description": "The kind of target that the route is referring to. Currently, only 'Service' is allowed",
+ "type": "string",
+ "default": ""
},
- "type": {
- "description": "Type defines whether this upstream contains an IP/IP:port resolver or the local /etc/resolv.conf. Type accepts 2 possible values: SystemResolvConf or Network.\n\n* When SystemResolvConf is used, the Upstream structure does not require any further fields to be defined:\n /etc/resolv.conf will be used\n* When Network is used, the Upstream structure must contain at least an Address",
+ "name": {
+ "description": "name of the service/target that is being referred to. e.g. name of the service",
"type": "string",
"default": ""
+ },
+ "weight": {
+ "description": "weight as an integer between 0 and 256, default 100, that specifies the target's relative weight against other target reference objects. 0 suppresses requests to this backend.",
+ "type": "integer",
+ "format": "int32"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "route.openshift.io",
"Version": "v1",
- "Kind": "Upstream",
+ "Kind": "RouteTargetReference",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.UpstreamResolvers": {
- "description": "UpstreamResolvers defines a schema for configuring the CoreDNS forward plugin in the specific case of the default (\".\") server. It defers from ForwardPlugin in the default values it accepts: * At least one upstream should be specified. * the default policy is Sequential",
+ "io.openshift.route.v1.RouterShard": {
+ "description": "RouterShard has information of a routing shard and is used to generate host names and routing table entries when a routing shard is allocated for a specific route. Caveat: This is WIP and will likely undergo modifications when sharding support is added.",
"type": "object",
+ "required": [
+ "shardName",
+ "dnsSuffix"
+ ],
"properties": {
- "policy": {
- "description": "Policy is used to determine the order in which upstream servers are selected for querying. Any one of the following values may be specified:\n\n* \"Random\" picks a random upstream server for each query. * \"RoundRobin\" picks upstream servers in a round-robin order, moving to the next server for each new query. * \"Sequential\" tries querying upstream servers in a sequential order until one responds, starting with the first server for each new query.\n\nThe default value is \"Sequential\"",
- "type": "string"
- },
- "protocolStrategy": {
- "description": "protocolStrategy specifies the protocol to use for upstream DNS requests. Valid values for protocolStrategy are \"TCP\" and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is to use the protocol of the original client request. \"TCP\" specifies that the platform should use TCP for all upstream DNS requests, even if the client request uses UDP. \"TCP\" is useful for UDP-specific issues such as those created by non-compliant upstream resolvers, but may consume more bandwidth or increase DNS response time. Note that protocolStrategy only affects the protocol of DNS requests that CoreDNS makes to upstream resolvers. It does not affect the protocol of DNS requests between clients and CoreDNS.",
+ "dnsSuffix": {
+ "description": "dnsSuffix for the shard ala: shard-1.v3.openshift.com",
"type": "string",
"default": ""
},
- "transportConfig": {
- "description": "transportConfig is used to configure the transport type, server name, and optional custom CA or CA bundle to use when forwarding DNS requests to an upstream resolver.\n\nThe default value is \"\" (empty) which results in a standard cleartext connection being used when forwarding DNS requests to an upstream resolver.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.DNSTransportConfig"
- },
- "upstreams": {
- "description": "Upstreams is a list of resolvers to forward name queries for the \".\" domain. Each instance of CoreDNS performs health checking of Upstreams. When a healthy upstream returns an error during the exchange, another resolver is tried from Upstreams. The Upstreams are selected in the order specified in Policy.\n\nA maximum of 15 upstreams is allowed per ForwardPlugin. If no Upstreams are specified, /etc/resolv.conf is used by default",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.Upstream"
- }
+ "shardName": {
+ "description": "shardName uniquely identifies a router shard in the \"set\" of routers used for routing traffic to the services.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "route.openshift.io",
"Version": "v1",
- "Kind": "UpstreamResolvers",
+ "Kind": "RouterShard",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1.VSphereCSIDriverConfigSpec": {
- "description": "VSphereCSIDriverConfigSpec defines properties that can be configured for vsphere CSI driver.",
+ "io.openshift.route.v1.TLSConfig": {
+ "description": "TLSConfig defines config used to secure a route and provide termination",
"type": "object",
+ "required": [
+ "termination"
+ ],
"properties": {
- "globalMaxSnapshotsPerBlockVolume": {
- "description": "globalMaxSnapshotsPerBlockVolume is a global configuration parameter that applies to volumes on all kinds of datastores. If omitted, the platform chooses a default, which is subject to change over time, currently that default is 3. Snapshots can not be disabled using this parameter. Increasing number of snapshots above 3 can have negative impact on performance, for more details see: https://kb.vmware.com/s/article/1025279 Volume snapshot documentation: https://docs.vmware.com/en/VMware-vSphere-Container-Storage-Plug-in/3.0/vmware-vsphere-csp-getting-started/GUID-E0B41C69-7EEB-450F-A73D-5FD2FF39E891.html",
- "type": "integer",
- "format": "int64"
+ "caCertificate": {
+ "description": "caCertificate provides the cert authority certificate contents",
+ "type": "string"
},
- "granularMaxSnapshotsPerBlockVolumeInVSAN": {
- "description": "granularMaxSnapshotsPerBlockVolumeInVSAN is a granular configuration parameter on vSAN datastore only. It overrides GlobalMaxSnapshotsPerBlockVolume if set, while it falls back to the global constraint if unset. Snapshots for VSAN can not be disabled using this parameter.",
- "type": "integer",
- "format": "int64"
+ "certificate": {
+ "description": "certificate provides certificate contents. This should be a single serving certificate, not a certificate chain. Do not include a CA certificate.",
+ "type": "string"
},
- "granularMaxSnapshotsPerBlockVolumeInVVOL": {
- "description": "granularMaxSnapshotsPerBlockVolumeInVVOL is a granular configuration parameter on Virtual Volumes datastore only. It overrides GlobalMaxSnapshotsPerBlockVolume if set, while it falls back to the global constraint if unset. Snapshots for VVOL can not be disabled using this parameter.",
- "type": "integer",
- "format": "int64"
+ "destinationCACertificate": {
+ "description": "destinationCACertificate provides the contents of the ca certificate of the final destination. When using reencrypt termination this file should be provided in order to have routers use it for health checks on the secure connection. If this field is not specified, the router may provide its own destination CA and perform hostname validation using the short service name (service.namespace.svc), which allows infrastructure generated certificates to automatically verify.",
+ "type": "string"
},
- "topologyCategories": {
- "description": "topologyCategories indicates tag categories with which vcenter resources such as hostcluster or datacenter were tagged with. If cluster Infrastructure object has a topology, values specified in Infrastructure object will be used and modifications to topologyCategories will be rejected.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "externalCertificate": {
+ "description": "externalCertificate provides certificate contents as a secret reference. This should be a single serving certificate, not a certificate chain. Do not include a CA certificate. The secret referenced should be present in the same namespace as that of the Route. Forbidden when `certificate` is set.",
+ "$ref": "#/definitions/io.openshift.route.v1.LocalObjectReference"
+ },
+ "insecureEdgeTerminationPolicy": {
+ "description": "insecureEdgeTerminationPolicy indicates the desired behavior for insecure connections to a route. While each router may make its own decisions on which ports to expose, this is normally port 80.\n\nIf a route does not specify insecureEdgeTerminationPolicy, then the default behavior is \"None\".\n\n* Allow - traffic is sent to the server on the insecure port (edge/reencrypt terminations only).\n\n* None - no traffic is allowed on the insecure port (default).\n\n* Redirect - clients are redirected to the secure port.",
+ "type": "string"
+ },
+ "key": {
+ "description": "key provides key file contents",
+ "type": "string"
+ },
+ "termination": {
+ "description": "termination indicates termination type.\n\n* edge - TLS termination is done by the router and http is used to communicate with the backend (default) * passthrough - Traffic is sent straight to the destination without the router providing TLS termination * reencrypt - TLS termination is done by the router and https is used to communicate with the backend\n\nNote: passthrough termination is incompatible with httpHeader actions",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
+ "Group": "route.openshift.io",
"Version": "v1",
- "Kind": "VSphereCSIDriverConfigSpec",
+ "Kind": "TLSConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.BackupJobReference": {
- "description": "BackupJobReference holds a reference to the batch/v1 Job created to run the etcd backup",
+ "io.openshift.security.v1.AllowedFlexVolume": {
+ "description": "AllowedFlexVolume represents a single Flexvolume that is allowed to be used.",
"type": "object",
"required": [
- "namespace",
- "name"
+ "driver"
],
"properties": {
- "name": {
- "description": "name is the name of the Job. Required",
- "type": "string",
- "default": ""
- },
- "namespace": {
- "description": "namespace is the namespace of the Job. this is always expected to be \"openshift-etcd\" since the user provided PVC is also required to be in \"openshift-etcd\" Required",
+ "driver": {
+ "description": "Driver is the name of the Flexvolume driver.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "BackupJobReference",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "AllowedFlexVolume",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.DelegatedAuthentication": {
- "description": "DelegatedAuthentication allows authentication to be disabled.",
+ "io.openshift.security.v1.FSGroupStrategyOptions": {
+ "description": "FSGroupStrategyOptions defines the strategy type and options used to create the strategy.",
"type": "object",
"properties": {
- "disabled": {
- "description": "disabled indicates that authentication should be disabled. By default it will use delegated authentication.",
- "type": "boolean"
+ "ranges": {
+ "description": "Ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.security.v1.IDRange"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "type": {
+ "description": "Type is the strategy that will dictate what FSGroup is used in the SecurityContext.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "DelegatedAuthentication",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "FSGroupStrategyOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.DelegatedAuthorization": {
- "description": "DelegatedAuthorization allows authorization to be disabled.",
+ "io.openshift.security.v1.IDRange": {
+ "description": "IDRange provides a min/max of an allowed range of IDs.",
"type": "object",
"properties": {
- "disabled": {
- "description": "disabled indicates that authorization should be disabled. By default it will use delegated authorization.",
- "type": "boolean"
+ "max": {
+ "description": "Max is the end of the range, inclusive.",
+ "type": "integer",
+ "format": "int64"
+ },
+ "min": {
+ "description": "Min is the start of the range, inclusive.",
+ "type": "integer",
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "DelegatedAuthorization",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "IDRange",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.EtcdBackup": {
- "description": "# EtcdBackup provides configuration options and status for a one-time backup attempt of the etcd cluster\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.security.v1.PodSecurityPolicyReview": {
+ "description": "PodSecurityPolicyReview checks which service accounts (not users, since that would be cluster-wide) can create the `PodTemplateSpec` in question.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"spec"
@@ -109033,384 +113633,257 @@
"type": "string"
},
"metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec holds user settable values for configuration",
+ "description": "spec is the PodSecurityPolicy to check.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.EtcdBackupSpec"
+ "$ref": "#/definitions/io.openshift.security.v1.PodSecurityPolicyReviewSpec"
},
"status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
+ "description": "status represents the current information/status for the PodSecurityPolicyReview.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.EtcdBackupStatus"
+ "$ref": "#/definitions/io.openshift.security.v1.PodSecurityPolicyReviewStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "EtcdBackup",
- "Scope": "Clustered"
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "PodSecurityPolicyReview",
+ "Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.EtcdBackupList": {
- "description": "EtcdBackupList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.security.v1.PodSecurityPolicyReviewSpec": {
+ "description": "PodSecurityPolicyReviewSpec defines specification for PodSecurityPolicyReview",
"type": "object",
"required": [
- "metadata",
- "items"
+ "template"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "items": {
+ "serviceAccountNames": {
+ "description": "serviceAccountNames is an optional set of ServiceAccounts to run the check with. If serviceAccountNames is empty, the template.spec.serviceAccountName is used, unless it's empty, in which case \"default\" is used instead. If serviceAccountNames is specified, template.spec.serviceAccountName is ignored.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.EtcdBackup"
+ "type": "string",
+ "default": ""
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
+ "template": {
+ "description": "template is the PodTemplateSpec to check. The template.spec.serviceAccountName field is used if serviceAccountNames is empty, unless the template.spec.serviceAccountName is empty, in which case \"default\" is used. If serviceAccountNames is specified, template.spec.serviceAccountName is ignored.",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
- }
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "EtcdBackupList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1alpha1.EtcdBackupSpec": {
- "type": "object",
- "properties": {
- "pvcName": {
- "description": "PVCName specifies the name of the PersistentVolumeClaim (PVC) which binds a PersistentVolume where the etcd backup file would be saved The PVC itself must always be created in the \"openshift-etcd\" namespace If the PVC is left unspecified \"\" then the platform will choose a reasonable default location to save the backup. In the future this would be backups saved across the control-plane master nodes.",
- "type": "string",
- "default": ""
+ "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "EtcdBackupSpec",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "PodSecurityPolicyReviewSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.EtcdBackupStatus": {
+ "io.openshift.security.v1.PodSecurityPolicyReviewStatus": {
+ "description": "PodSecurityPolicyReviewStatus represents the status of PodSecurityPolicyReview.",
"type": "object",
"required": [
- "backupJob"
+ "allowedServiceAccounts"
],
"properties": {
- "backupJob": {
- "description": "backupJob is the reference to the Job that executes the backup. Optional",
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.BackupJobReference"
- },
- "conditions": {
- "description": "conditions provide details on the status of the etcd backup job.",
+ "allowedServiceAccounts": {
+ "description": "allowedServiceAccounts returns the list of service accounts in *this* namespace that have the power to create the PodTemplateSpec.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
+ "$ref": "#/definitions/io.openshift.security.v1.ServiceAccountPodSecurityPolicyReviewStatus"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "EtcdBackupStatus",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "PodSecurityPolicyReviewStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.GenerationHistory": {
- "description": "GenerationHistory keeps track of the generation for a given resource so that decisions about forced updated can be made. DEPRECATED: Use fields in v1.GenerationStatus instead",
+ "io.openshift.security.v1.PodSecurityPolicySelfSubjectReview": {
+ "description": "PodSecurityPolicySelfSubjectReview checks whether this user/SA tuple can create the PodTemplateSpec\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "group",
- "resource",
- "namespace",
- "name",
- "lastGeneration"
+ "spec"
],
- "properties": {
- "group": {
- "description": "group is the group of the thing you're tracking",
- "type": "string",
- "default": ""
- },
- "lastGeneration": {
- "description": "lastGeneration is the last generation of the workload controller involved",
- "type": "integer",
- "format": "int64",
- "default": 0
- },
- "name": {
- "description": "name is the name of the thing you're tracking",
- "type": "string",
- "default": ""
- },
- "namespace": {
- "description": "namespace is where the thing you're tracking is",
- "type": "string",
- "default": ""
- },
- "resource": {
- "description": "resource is the resource type of the thing you're tracking",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "GenerationHistory",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1alpha1.GenericOperatorConfig": {
- "description": "GenericOperatorConfig provides information to configure an operator\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
- "type": "object",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "authentication": {
- "description": "authentication allows configuration of authentication for the endpoints",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.DelegatedAuthentication"
- },
- "authorization": {
- "description": "authorization allows configuration of authentication for the endpoints",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.DelegatedAuthorization"
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "leaderElection": {
- "description": "leaderElection provides information to elect a leader. Only override this if you have a specific need",
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.LeaderElection"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "servingInfo": {
- "description": "ServingInfo is the HTTP serving information for the controller's endpoints",
+ "spec": {
+ "description": "spec defines specification the PodSecurityPolicySelfSubjectReview.",
"default": {},
- "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo"
+ "$ref": "#/definitions/io.openshift.security.v1.PodSecurityPolicySelfSubjectReviewSpec"
+ },
+ "status": {
+ "description": "status represents the current information/status for the PodSecurityPolicySelfSubjectReview.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.security.v1.PodSecurityPolicySubjectReviewStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "GenericOperatorConfig",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "PodSecurityPolicySelfSubjectReview",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.ImageContentSourcePolicy": {
- "description": "ImageContentSourcePolicy holds cluster-wide information about how to handle registry mirror rules. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.security.v1.PodSecurityPolicySelfSubjectReviewSpec": {
+ "description": "PodSecurityPolicySelfSubjectReviewSpec contains specification for PodSecurityPolicySelfSubjectReview.",
"type": "object",
"required": [
- "spec"
+ "template"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec holds user settable values for configuration",
+ "template": {
+ "description": "template is the PodTemplateSpec to check.",
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.ImageContentSourcePolicySpec"
+ "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ImageContentSourcePolicy",
- "Scope": "Clustered"
+ "Type": "nested",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "PodSecurityPolicySelfSubjectReviewSpec",
+ "Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.ImageContentSourcePolicyList": {
- "description": "ImageContentSourcePolicyList lists the items in the ImageContentSourcePolicy CRD.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.security.v1.PodSecurityPolicySubjectReview": {
+ "description": "PodSecurityPolicySubjectReview checks whether a particular user/SA tuple can create the PodTemplateSpec.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
- "items"
+ "spec"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.ImageContentSourcePolicy"
- }
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
- }
- },
- "x-fabric8-info": {
- "Type": "list",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ImageContentSourcePolicyList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1alpha1.ImageContentSourcePolicySpec": {
- "description": "ImageContentSourcePolicySpec is the specification of the ImageContentSourcePolicy CRD.",
- "type": "object",
- "properties": {
- "repositoryDigestMirrors": {
- "description": "repositoryDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in RepositoryDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. Only image pull specifications that have an image digest will have this behavior applied to them - tags will continue to be pulled from the specified repository in the pull spec.\n\nEach “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.RepositoryDigestMirrors"
- }
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ImageContentSourcePolicySpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1alpha1.LoggingConfig": {
- "description": "LoggingConfig holds information about configuring logging DEPRECATED: Use v1.LogLevel instead",
- "type": "object",
- "required": [
- "level",
- "vmodule"
- ],
- "properties": {
- "level": {
- "description": "level is passed to glog.",
- "type": "integer",
- "format": "int64",
- "default": 0
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "vmodule": {
- "description": "vmodule is passed to glog.",
- "type": "string",
- "default": ""
+ "spec": {
+ "description": "spec defines specification for the PodSecurityPolicySubjectReview.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.security.v1.PodSecurityPolicySubjectReviewSpec"
+ },
+ "status": {
+ "description": "status represents the current information/status for the PodSecurityPolicySubjectReview.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.security.v1.PodSecurityPolicySubjectReviewStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "LoggingConfig",
+ "Type": "object",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "PodSecurityPolicySubjectReview",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.NodeStatus": {
- "description": "NodeStatus provides information about the current state of a particular node managed by this operator. Deprecated: Use v1.NodeStatus instead",
+ "io.openshift.security.v1.PodSecurityPolicySubjectReviewSpec": {
+ "description": "PodSecurityPolicySubjectReviewSpec defines specification for PodSecurityPolicySubjectReview",
"type": "object",
"required": [
- "nodeName",
- "currentDeploymentGeneration",
- "targetDeploymentGeneration",
- "lastFailedDeploymentGeneration",
- "lastFailedDeploymentErrors"
+ "template"
],
"properties": {
- "currentDeploymentGeneration": {
- "description": "currentDeploymentGeneration is the generation of the most recently successful deployment",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "lastFailedDeploymentErrors": {
- "description": "lastFailedDeploymentGenerationErrors is a list of the errors during the failed deployment referenced in lastFailedDeploymentGeneration",
+ "groups": {
+ "description": "groups is the groups you're testing for.",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "lastFailedDeploymentGeneration": {
- "description": "lastFailedDeploymentGeneration is the generation of the deployment we tried and failed to deploy.",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "template": {
+ "description": "template is the PodTemplateSpec to check. If template.spec.serviceAccountName is empty it will not be defaulted. If its non-empty, it will be checked.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec"
},
- "nodeName": {
- "description": "nodeName is the name of the node",
- "type": "string",
- "default": ""
+ "user": {
+ "description": "user is the user you're testing for. If you specify \"user\" but not \"group\", then is it interpreted as \"What if user were not a member of any groups. If user and groups are empty, then the check is performed using *only* the serviceAccountName in the template.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "PodSecurityPolicySubjectReviewSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.security.v1.PodSecurityPolicySubjectReviewStatus": {
+ "description": "PodSecurityPolicySubjectReviewStatus contains information/status for PodSecurityPolicySubjectReview.",
+ "type": "object",
+ "properties": {
+ "allowedBy": {
+ "description": "allowedBy is a reference to the rule that allows the PodTemplateSpec. A rule can be a SecurityContextConstraint or a PodSecurityPolicy A `nil`, indicates that it was denied.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
},
- "targetDeploymentGeneration": {
- "description": "targetDeploymentGeneration is the generation of the deployment we're trying to apply",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "reason": {
+ "description": "A machine-readable description of why this operation is in the \"Failure\" status. If this value is empty there is no information available.",
+ "type": "string"
+ },
+ "template": {
+ "description": "template is the PodTemplateSpec after the defaulting is applied.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "NodeStatus",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "PodSecurityPolicySubjectReviewStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.OLM": {
- "description": "OLM provides information to configure an operator to manage the OLM controllers\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.security.v1.RangeAllocation": {
+ "description": "RangeAllocation is used so we can easily expose a RangeAllocation typed for security group\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
- "metadata",
- "spec"
+ "range",
+ "data"
],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
+ "data": {
+ "description": "data is a byte array representing the serialized state of a range allocation. It is a bitmap with each bit set to one to represent a range is taken.",
+ "type": "string",
+ "format": "byte"
+ },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
@@ -109420,30 +113893,24 @@
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "spec": {
- "description": "spec holds user settable values for configuration",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.OLMSpec"
- },
- "status": {
- "description": "status holds observed values from the cluster. They may not be overridden.",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.OLMStatus"
+ "range": {
+ "description": "range is a string representing a unique label for a range of uids, \"1000000000-2000000000/10000\".",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "OLM",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "RangeAllocation",
"Scope": "Clustered"
}
},
- "io.openshift.operator.v1alpha1.OLMList": {
- "description": "OLMList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.security.v1.RangeAllocationList": {
+ "description": "RangeAllocationList is a list of RangeAllocations objects\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"items"
],
"properties": {
@@ -109452,11 +113919,11 @@
"type": "string"
},
"items": {
- "description": "Items contains the items",
+ "description": "List of RangeAllocations.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.OLM"
+ "$ref": "#/definitions/io.openshift.security.v1.RangeAllocation"
}
},
"kind": {
@@ -109471,420 +113938,368 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "OLMList",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "RangeAllocationList",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.OLMSpec": {
+ "io.openshift.security.v1.RunAsUserStrategyOptions": {
+ "description": "RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.",
"type": "object",
- "required": [
- "managementState"
- ],
"properties": {
- "logLevel": {
- "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
- "type": "string"
- },
- "managementState": {
- "description": "managementState indicates whether and how the operator should manage the component",
- "type": "string",
- "default": ""
- },
- "observedConfig": {
- "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- },
- "operatorLogLevel": {
- "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".",
+ "type": {
+ "description": "Type is the strategy that will dictate what RunAsUser is used in the SecurityContext.",
"type": "string"
},
- "unsupportedConfigOverrides": {
- "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "OLMSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1alpha1.OLMStatus": {
- "type": "object",
- "required": [
- "readyReplicas"
- ],
- "properties": {
- "conditions": {
- "description": "conditions is a list of conditions and their status",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition"
- },
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
- },
- "generations": {
- "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus"
- },
- "x-kubernetes-list-map-keys": [
- "group",
- "resource",
- "namespace",
- "name"
- ],
- "x-kubernetes-list-type": "map"
- },
- "latestAvailableRevision": {
- "description": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "uid": {
+ "description": "UID is the user id that containers must run as. Required for the MustRunAs strategy if not using namespace/service account allocated uids.",
"type": "integer",
- "format": "int32"
+ "format": "int64"
},
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
+ "uidRangeMax": {
+ "description": "UIDRangeMax defines the max value for a strategy that allocates by range.",
"type": "integer",
"format": "int64"
},
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "uidRangeMin": {
+ "description": "UIDRangeMin defines the min value for a strategy that allocates by range.",
"type": "integer",
- "format": "int32",
- "default": 0
- },
- "version": {
- "description": "version is the level this availability applies to",
- "type": "string"
+ "format": "int64"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "OLMStatus",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "RunAsUserStrategyOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.OperatorCondition": {
- "description": "OperatorCondition is just the standard condition fields. DEPRECATED: Use v1.OperatorCondition instead",
+ "io.openshift.security.v1.SELinuxContextStrategyOptions": {
+ "description": "SELinuxContextStrategyOptions defines the strategy type and any options used to create the strategy.",
"type": "object",
- "required": [
- "type",
- "status"
- ],
"properties": {
- "lastTransitionTime": {
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "type": "string"
- },
- "reason": {
- "type": "string"
- },
- "status": {
- "type": "string",
- "default": ""
+ "seLinuxOptions": {
+ "description": "seLinuxOptions required to run as; required for MustRunAs",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SELinuxOptions"
},
"type": {
- "type": "string",
- "default": ""
+ "description": "Type is the strategy that will dictate what SELinux context is used in the SecurityContext.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "OperatorCondition",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "SELinuxContextStrategyOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.operator.v1alpha1.OperatorSpec": {
- "description": "OperatorSpec contains common fields for an operator to need. It is intended to be anonymous included inside of the Spec struct for you particular operator. DEPRECATED: Use v1.OperatorSpec instead",
+ "io.openshift.security.v1.SecurityContextConstraints": {
+ "description": "SecurityContextConstraints governs the ability to make requests that affect the SecurityContext that will be applied to a container. For historical reasons SCC was exposed under the core Kubernetes API group. That exposure is deprecated and will be removed in a future release - users should instead use the security.openshift.io group to manage SecurityContextConstraints.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "managementState",
- "imagePullSpec",
- "imagePullPolicy",
- "version"
+ "priority",
+ "allowPrivilegedContainer",
+ "defaultAddCapabilities",
+ "requiredDropCapabilities",
+ "allowedCapabilities",
+ "allowHostDirVolumePlugin",
+ "volumes",
+ "allowHostNetwork",
+ "allowHostPorts",
+ "allowHostPID",
+ "allowHostIPC",
+ "readOnlyRootFilesystem"
],
"properties": {
- "imagePullPolicy": {
- "description": "imagePullPolicy specifies the image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.",
- "type": "string",
- "default": ""
+ "allowHostDirVolumePlugin": {
+ "description": "AllowHostDirVolumePlugin determines if the policy allow containers to use the HostDir volume plugin",
+ "type": "boolean",
+ "default": false
},
- "imagePullSpec": {
- "description": "imagePullSpec is the image to use for the component.",
- "type": "string",
- "default": ""
+ "allowHostIPC": {
+ "description": "AllowHostIPC determines if the policy allows host ipc in the containers.",
+ "type": "boolean",
+ "default": false
},
- "logging": {
- "description": "logging contains glog parameters for the component pods. It's always a command line arg for the moment",
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.LoggingConfig"
+ "allowHostNetwork": {
+ "description": "AllowHostNetwork determines if the policy allows the use of HostNetwork in the pod spec.",
+ "type": "boolean",
+ "default": false
},
- "managementState": {
- "description": "managementState indicates whether and how the operator should manage the component",
- "type": "string",
- "default": ""
+ "allowHostPID": {
+ "description": "AllowHostPID determines if the policy allows host pid in the containers.",
+ "type": "boolean",
+ "default": false
},
- "version": {
- "description": "version is the desired state in major.minor.micro-patch. Usually patch is ignored.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "OperatorSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1alpha1.OperatorStatus": {
- "description": "OperatorStatus contains common fields for an operator to need. It is intended to be anonymous included inside of the Status struct for you particular operator. DEPRECATED: Use v1.OperatorStatus instead",
- "type": "object",
- "properties": {
- "conditions": {
- "description": "conditions is a list of conditions and their status",
+ "allowHostPorts": {
+ "description": "AllowHostPorts determines if the policy allows host ports in the containers.",
+ "type": "boolean",
+ "default": false
+ },
+ "allowPrivilegeEscalation": {
+ "description": "AllowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.",
+ "type": "boolean"
+ },
+ "allowPrivilegedContainer": {
+ "description": "AllowPrivilegedContainer determines if a container can request to be run as privileged.",
+ "type": "boolean",
+ "default": false
+ },
+ "allowedCapabilities": {
+ "description": "AllowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field maybe added at the pod author's discretion. You must not list a capability in both AllowedCapabilities and RequiredDropCapabilities. To allow all capabilities you may use '*'.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.OperatorCondition"
- }
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "currentVersionAvailability": {
- "description": "currentVersionAvailability is availability information for the current version. If it is unmanged or removed, this doesn't exist.",
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.VersionAvailability"
+ "allowedFlexVolumes": {
+ "description": "AllowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the \"Volumes\" field.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.security.v1.AllowedFlexVolume"
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
+ "allowedUnsafeSysctls": {
+ "description": "AllowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.\n\nExamples: e.g. \"foo/*\" allows \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" allows \"foo.bar\", \"foo.baz\", etc.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "state": {
- "description": "state indicates what the operator has observed to be its current operational status.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "targetVersionAvailability": {
- "description": "targetVersionAvailability is availability information for the target version if we are migrating",
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.VersionAvailability"
+ "defaultAddCapabilities": {
+ "description": "DefaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capabiility in both DefaultAddCapabilities and RequiredDropCapabilities.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "taskSummary": {
- "description": "taskSummary is a high level summary of what the controller is currently attempting to do. It is high-level, human-readable and not guaranteed in any way. (I needed this for debugging and realized it made a great summary).",
- "type": "string"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "OperatorStatus",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1alpha1.RepositoryDigestMirrors": {
- "description": "RepositoryDigestMirrors holds cluster-wide information about how to handle mirros in the registries config. Note: the mirrors only work when pulling the images that are referenced by their digests.",
- "type": "object",
- "required": [
- "source"
- ],
- "properties": {
- "mirrors": {
- "description": "mirrors is one or more repositories that may also contain the same images. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. Other cluster configuration, including (but not limited to) other repositoryDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering.",
+ "defaultAllowPrivilegeEscalation": {
+ "description": "DefaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.",
+ "type": "boolean"
+ },
+ "forbiddenSysctls": {
+ "description": "ForbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.\n\nExamples: e.g. \"foo/*\" forbids \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" forbids \"foo.bar\", \"foo.baz\", etc.",
"type": "array",
"items": {
"type": "string",
"default": ""
- }
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "source": {
- "description": "source is the repository that users refer to, e.g. in image pull specifications.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "RepositoryDigestMirrors",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.operator.v1alpha1.StaticPodOperatorStatus": {
- "description": "StaticPodOperatorStatus is status for controllers that manage static pods. There are different needs because individual node status must be tracked. DEPRECATED: Use v1.StaticPodOperatorStatus instead",
- "type": "object",
- "required": [
- "latestAvailableDeploymentGeneration",
- "nodeStatuses"
- ],
- "properties": {
- "conditions": {
- "description": "conditions is a list of conditions and their status",
+ "fsGroup": {
+ "description": "FSGroup is the strategy that will dictate what fs group is used by the SecurityContext.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.security.v1.FSGroupStrategyOptions"
+ },
+ "groups": {
+ "description": "The groups that have permission to use this security context constraints",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.OperatorCondition"
- }
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "currentVersionAvailability": {
- "description": "currentVersionAvailability is availability information for the current version. If it is unmanged or removed, this doesn't exist.",
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.VersionAvailability"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "latestAvailableDeploymentGeneration": {
- "description": "latestAvailableDeploymentGeneration is the deploymentID of the most recent deployment",
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "priority": {
+ "description": "Priority influences the sort order of SCCs when evaluating which SCCs to try first for a given pod request based on access in the Users and Groups fields. The higher the int, the higher priority. An unset value is considered a 0 priority. If scores for multiple SCCs are equal they will be sorted from most restrictive to least restrictive. If both priorities and restrictions are equal the SCCs will be sorted by name.",
"type": "integer",
- "format": "int32",
- "default": 0
+ "format": "int32"
},
- "nodeStatuses": {
- "description": "nodeStatuses track the deployment values and errors across individual nodes",
+ "readOnlyRootFilesystem": {
+ "description": "ReadOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the SCC should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.",
+ "type": "boolean",
+ "default": false
+ },
+ "requiredDropCapabilities": {
+ "description": "RequiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.",
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.NodeStatus"
- }
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "observedGeneration": {
- "description": "observedGeneration is the last generation change you've dealt with",
- "type": "integer",
- "format": "int64"
+ "runAsUser": {
+ "description": "RunAsUser is the strategy that will dictate what RunAsUser is used in the SecurityContext.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.security.v1.RunAsUserStrategyOptions"
},
- "state": {
- "description": "state indicates what the operator has observed to be its current operational status.",
- "type": "string"
+ "seLinuxContext": {
+ "description": "SELinuxContext is the strategy that will dictate what labels will be set in the SecurityContext.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.security.v1.SELinuxContextStrategyOptions"
},
- "targetVersionAvailability": {
- "description": "targetVersionAvailability is availability information for the target version if we are migrating",
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.VersionAvailability"
+ "seccompProfiles": {
+ "description": "SeccompProfiles lists the allowed profiles that may be set for the pod or container's seccomp annotations. An unset (nil) or empty value means that no profiles may be specifid by the pod or container.\tThe wildcard '*' may be used to allow all profiles. When used to generate a value for a pod the first non-wildcard profile will be used as the default.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
},
- "taskSummary": {
- "description": "taskSummary is a high level summary of what the controller is currently attempting to do. It is high-level, human-readable and not guaranteed in any way. (I needed this for debugging and realized it made a great summary).",
- "type": "string"
+ "supplementalGroups": {
+ "description": "SupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.security.v1.SupplementalGroupsStrategyOptions"
+ },
+ "userNamespaceLevel": {
+ "description": "userNamespaceLevel determines if the policy allows host users in containers. Valid values are \"AllowHostLevel\", \"RequirePodLevel\", and omitted. When \"AllowHostLevel\" is set, a pod author may set `hostUsers` to either `true` or `false`. When \"RequirePodLevel\" is set, a pod author must set `hostUsers` to `false`. When omitted, the default value is \"AllowHostLevel\".",
+ "type": "string",
+ "default": "AllowHostLevel"
+ },
+ "users": {
+ "description": "The users who have permissions to use this security context constraints",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "volumes": {
+ "description": "Volumes is a white list of allowed volume plugins. FSType corresponds directly with the field names of a VolumeSource (azureFile, configMap, emptyDir). To allow all volumes you may use \"*\". To allow no volumes, set to [\"none\"].",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ },
+ "x-kubernetes-list-type": "atomic"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "StaticPodOperatorStatus",
- "Scope": "Namespaced"
+ "Type": "object",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "SecurityContextConstraints",
+ "Scope": "Clustered"
}
},
- "io.openshift.operator.v1alpha1.VersionAvailability": {
- "description": "VersionAvailability gives information about the synchronization and operational status of a particular version of the component DEPRECATED: Use fields in v1.OperatorStatus instead",
+ "io.openshift.security.v1.SecurityContextConstraintsList": {
+ "description": "SecurityContextConstraintsList is a list of SecurityContextConstraints objects\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "version",
- "updatedReplicas",
- "readyReplicas",
- "errors",
- "generations"
+ "items"
],
"properties": {
- "errors": {
- "description": "errors indicates what failures are associated with the operator trying to manage this version",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "generations": {
- "description": "generations allows an operator to track what the generation of \"important\" resources was the last time we updated them",
+ "items": {
+ "description": "List of security context constraints.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.operator.v1alpha1.GenerationHistory"
+ "$ref": "#/definitions/io.openshift.security.v1.SecurityContextConstraints"
}
},
- "readyReplicas": {
- "description": "readyReplicas indicates how many replicas are ready and at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
- },
- "updatedReplicas": {
- "description": "updatedReplicas indicates how many replicas are at the desired state",
- "type": "integer",
- "format": "int32",
- "default": 0
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "version": {
- "description": "version is the level this availability applies to",
- "type": "string",
- "default": ""
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "operator.openshift.io",
- "Version": "v1alpha1",
- "Kind": "VersionAvailability",
+ "Type": "list",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "SecurityContextConstraintsList",
"Scope": "Namespaced"
}
},
- "io.openshift.platform.v1alpha1.ActiveBundleDeployment": {
- "description": "ActiveBundleDeployment references a BundleDeployment resource.",
+ "io.openshift.security.v1.ServiceAccountPodSecurityPolicyReviewStatus": {
+ "description": "ServiceAccountPodSecurityPolicyReviewStatus represents ServiceAccount name and related review status",
"type": "object",
"required": [
"name"
],
"properties": {
+ "allowedBy": {
+ "description": "allowedBy is a reference to the rule that allows the PodTemplateSpec. A rule can be a SecurityContextConstraint or a PodSecurityPolicy A `nil`, indicates that it was denied.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
"name": {
- "description": "name is the metadata.name of the referenced BundleDeployment object.",
+ "description": "name contains the allowed and the denied ServiceAccount name",
"type": "string",
"default": ""
+ },
+ "reason": {
+ "description": "A machine-readable description of why this operation is in the \"Failure\" status. If this value is empty there is no information available.",
+ "type": "string"
+ },
+ "template": {
+ "description": "template is the PodTemplateSpec after the defaulting is applied.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "platform.openshift.io",
- "Version": "v1alpha1",
- "Kind": "ActiveBundleDeployment",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "ServiceAccountPodSecurityPolicyReviewStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.platform.v1alpha1.Package": {
- "description": "Package contains fields to configure which OLM package this PlatformOperator will install",
+ "io.openshift.security.v1.SupplementalGroupsStrategyOptions": {
+ "description": "SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.",
"type": "object",
- "required": [
- "name"
- ],
"properties": {
- "name": {
- "description": "name contains the desired OLM-based Operator package name that is defined in an existing CatalogSource resource in the cluster.\n\nThis configured package will be managed with the cluster's lifecycle. In the current implementation, it will be retrieving this name from a list of supported operators out of the catalogs included with OpenShift.",
- "type": "string",
- "default": ""
+ "ranges": {
+ "description": "Ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.security.v1.IDRange"
+ },
+ "x-kubernetes-list-type": "atomic"
+ },
+ "type": {
+ "description": "Type is the strategy that will dictate what supplemental groups is used in the SecurityContext.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "platform.openshift.io",
- "Version": "v1alpha1",
- "Kind": "Package",
+ "Group": "security.openshift.io",
+ "Version": "v1",
+ "Kind": "SupplementalGroupsStrategyOptions",
"Scope": "Namespaced"
}
},
- "io.openshift.platform.v1alpha1.PlatformOperator": {
- "description": "PlatformOperator is the Schema for the PlatformOperators API.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.sharedresource.v1alpha1.SharedConfigMap": {
+ "description": "SharedConfigMap allows a ConfigMap to be shared across namespaces. Pods can mount the shared ConfigMap by adding a CSI volume to the pod specification using the \"csi.sharedresource.openshift.io\" CSI driver and a reference to the SharedConfigMap in the volume attributes:\n\nspec:\n volumes:\n - name: shared-configmap\n csi:\n driver: csi.sharedresource.openshift.io\n volumeAttributes:\n sharedConfigMap: my-share\n\nFor the mount to be successful, the pod's service account must be granted permission to 'use' the named SharedConfigMap object within its namespace with an appropriate Role and RoleBinding. For compactness, here are example `oc` invocations for creating such Role and RoleBinding objects.\n\n `oc create role shared-resource-my-share --verb=use --resource=sharedconfigmaps.sharedresource.openshift.io --resource-name=my-share`\n `oc create rolebinding shared-resource-my-share --role=shared-resource-my-share --serviceaccount=my-namespace:default`\n\nShared resource objects, in this case ConfigMaps, have default permissions of list, get, and watch for system authenticated users.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -109900,24 +114315,26 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
+ "description": "spec is the specification of the desired shared configmap",
"default": {},
- "$ref": "#/definitions/io.openshift.platform.v1alpha1.PlatformOperatorSpec"
+ "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedConfigMapSpec"
},
"status": {
+ "description": "status is the observed status of the shared configmap",
"default": {},
- "$ref": "#/definitions/io.openshift.platform.v1alpha1.PlatformOperatorStatus"
+ "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedConfigMapStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "platform.openshift.io",
+ "Group": "sharedresource.openshift.io",
"Version": "v1alpha1",
- "Kind": "PlatformOperator",
+ "Kind": "SharedConfigMap",
"Scope": "Clustered"
}
},
- "io.openshift.platform.v1alpha1.PlatformOperatorList": {
- "description": "PlatformOperatorList contains a list of PlatformOperators\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.openshift.sharedresource.v1alpha1.SharedConfigMapList": {
+ "description": "SharedConfigMapList contains a list of SharedConfigMap objects.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
"items"
@@ -109931,7 +114348,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.platform.v1alpha1.PlatformOperator"
+ "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedConfigMap"
}
},
"kind": {
@@ -109946,67 +114363,89 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "platform.openshift.io",
+ "Group": "sharedresource.openshift.io",
"Version": "v1alpha1",
- "Kind": "PlatformOperatorList",
+ "Kind": "SharedConfigMapList",
"Scope": "Namespaced"
}
},
- "io.openshift.platform.v1alpha1.PlatformOperatorSpec": {
- "description": "PlatformOperatorSpec defines the desired state of PlatformOperator.",
+ "io.openshift.sharedresource.v1alpha1.SharedConfigMapReference": {
+ "description": "SharedConfigMapReference contains information about which ConfigMap to share",
"type": "object",
"required": [
- "package"
+ "name",
+ "namespace"
],
"properties": {
- "package": {
- "description": "package contains the desired package and its configuration for this PlatformOperator.",
- "default": {},
- "$ref": "#/definitions/io.openshift.platform.v1alpha1.Package"
+ "name": {
+ "description": "name represents the name of the ConfigMap that is being referenced.",
+ "type": "string",
+ "default": ""
+ },
+ "namespace": {
+ "description": "namespace represents the namespace where the referenced ConfigMap is located.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "platform.openshift.io",
+ "Group": "sharedresource.openshift.io",
"Version": "v1alpha1",
- "Kind": "PlatformOperatorSpec",
+ "Kind": "SharedConfigMapReference",
"Scope": "Namespaced"
}
},
- "io.openshift.platform.v1alpha1.PlatformOperatorStatus": {
- "description": "PlatformOperatorStatus defines the observed state of PlatformOperator",
+ "io.openshift.sharedresource.v1alpha1.SharedConfigMapSpec": {
+ "description": "SharedConfigMapSpec defines the desired state of a SharedConfigMap",
"type": "object",
+ "required": [
+ "configMapRef"
+ ],
"properties": {
- "activeBundleDeployment": {
- "description": "activeBundleDeployment is the reference to the BundleDeployment resource that's being managed by this PO resource. If this field is not populated in the status then it means the PlatformOperator has either not been installed yet or is failing to install.",
+ "configMapRef": {
+ "description": "configMapRef is a reference to the ConfigMap to share",
"default": {},
- "$ref": "#/definitions/io.openshift.platform.v1alpha1.ActiveBundleDeployment"
+ "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedConfigMapReference"
},
+ "description": {
+ "description": "description is a user readable explanation of what the backing resource provides.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "sharedresource.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "SharedConfigMapSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.sharedresource.v1alpha1.SharedConfigMapStatus": {
+ "description": "SharedSecretStatus contains the observed status of the shared resource",
+ "type": "object",
+ "properties": {
"conditions": {
- "description": "conditions represent the latest available observations of a platform operator's current state.",
+ "description": "conditions represents any observations made on this particular shared resource by the underlying CSI driver or Share controller.",
"type": "array",
"items": {
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
},
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map",
"x-kubernetes-patch-merge-key": "type",
"x-kubernetes-patch-strategy": "merge"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "platform.openshift.io",
+ "Group": "sharedresource.openshift.io",
"Version": "v1alpha1",
- "Kind": "PlatformOperatorStatus",
+ "Kind": "SharedConfigMapStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.project.v1.Project": {
- "description": "Projects are the unit of isolation and collaboration in OpenShift. A project has one or more members, a quota on the resources that the project may consume, and the security controls on the resources in the project. Within a project, members may have different roles - project administrators can set membership, editors can create and manage the resources, and viewers can see but not access running containers. In a normal cluster project administrators are not able to alter their quotas - that is restricted to cluster administrators.\n\nListing or watching projects will return only projects the user has the reader role on.\n\nAn OpenShift project is an alternative representation of a Kubernetes namespace. Projects are exposed as editable to end users while namespaces are not. Direct creation of a project is typically restricted to administrators, while end users should use the requestproject resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.sharedresource.v1alpha1.SharedSecret": {
+ "description": "SharedSecret allows a Secret to be shared across namespaces. Pods can mount the shared Secret by adding a CSI volume to the pod specification using the \"csi.sharedresource.openshift.io\" CSI driver and a reference to the SharedSecret in the volume attributes:\n\nspec:\n volumes:\n - name: shared-secret\n csi:\n driver: csi.sharedresource.openshift.io\n volumeAttributes:\n sharedSecret: my-share\n\nFor the mount to be successful, the pod's service account must be granted permission to 'use' the named SharedSecret object within its namespace with an appropriate Role and RoleBinding. For compactness, here are example `oc` invocations for creating such Role and RoleBinding objects.\n\n `oc create role shared-resource-my-share --verb=use --resource=sharedsecrets.sharedresource.openshift.io --resource-name=my-share`\n `oc create rolebinding shared-resource-my-share --role=shared-resource-my-share --serviceaccount=my-namespace:default`\n\nShared resource objects, in this case Secrets, have default permissions of list, get, and watch for system authenticated users.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.",
"type": "object",
"properties": {
"apiVersion": {
@@ -110023,26 +114462,26 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "Spec defines the behavior of the Namespace.",
+ "description": "spec is the specification of the desired shared secret",
"default": {},
- "$ref": "#/definitions/io.openshift.project.v1.ProjectSpec"
+ "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedSecretSpec"
},
"status": {
- "description": "Status describes the current status of a Namespace",
+ "description": "status is the observed status of the shared secret",
"default": {},
- "$ref": "#/definitions/io.openshift.project.v1.ProjectStatus"
+ "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedSecretStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "project.openshift.io",
- "Version": "v1",
- "Kind": "Project",
+ "Group": "sharedresource.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "SharedSecret",
"Scope": "Clustered"
}
},
- "io.openshift.project.v1.ProjectList": {
- "description": "ProjectList is a list of Project objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.sharedresource.v1alpha1.SharedSecretList": {
+ "description": "SharedSecretList contains a list of SharedSecret objects.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.",
"type": "object",
"required": [
"items"
@@ -110053,11 +114492,10 @@
"type": "string"
},
"items": {
- "description": "Items is the list of projects",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.project.v1.Project"
+ "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedSecret"
}
},
"kind": {
@@ -110072,103 +114510,91 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "project.openshift.io",
- "Version": "v1",
- "Kind": "ProjectList",
+ "Group": "sharedresource.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "SharedSecretList",
"Scope": "Namespaced"
}
},
- "io.openshift.project.v1.ProjectRequest": {
- "description": "ProjectRequest is the set of options necessary to fully qualify a project request\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.sharedresource.v1alpha1.SharedSecretReference": {
+ "description": "SharedSecretReference contains information about which Secret to share",
"type": "object",
+ "required": [
+ "name",
+ "namespace"
+ ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "description": {
- "description": "Description is the description to apply to a project",
- "type": "string"
- },
- "displayName": {
- "description": "DisplayName is the display name to apply to a project",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "name": {
+ "description": "name represents the name of the Secret that is being referenced.",
+ "type": "string",
+ "default": ""
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "namespace": {
+ "description": "namespace represents the namespace where the referenced Secret is located.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "project.openshift.io",
- "Version": "v1",
- "Kind": "ProjectRequest",
- "Scope": "Clustered"
+ "Type": "nested",
+ "Group": "sharedresource.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "SharedSecretReference",
+ "Scope": "Namespaced"
}
},
- "io.openshift.project.v1.ProjectSpec": {
- "description": "ProjectSpec describes the attributes on a Project",
+ "io.openshift.sharedresource.v1alpha1.SharedSecretSpec": {
+ "description": "SharedSecretSpec defines the desired state of a SharedSecret",
"type": "object",
+ "required": [
+ "secretRef"
+ ],
"properties": {
- "finalizers": {
- "description": "Finalizers is an opaque list of values that must be empty to permanently remove object from storage",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "description": {
+ "description": "description is a user readable explanation of what the backing resource provides.",
+ "type": "string"
+ },
+ "secretRef": {
+ "description": "secretRef is a reference to the Secret to share",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedSecretReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "project.openshift.io",
- "Version": "v1",
- "Kind": "ProjectSpec",
+ "Group": "sharedresource.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "SharedSecretSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.project.v1.ProjectStatus": {
- "description": "ProjectStatus is information about the current status of a Project",
+ "io.openshift.sharedresource.v1alpha1.SharedSecretStatus": {
+ "description": "SharedSecretStatus contains the observed status of the shared resource",
"type": "object",
"properties": {
"conditions": {
- "description": "Represents the latest available observations of the project current state.",
+ "description": "conditions represents any observations made on this particular shared resource by the underlying CSI driver or Share controller.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.NamespaceCondition"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
},
"x-kubernetes-patch-merge-key": "type",
"x-kubernetes-patch-strategy": "merge"
- },
- "phase": {
- "description": "Phase is the current lifecycle phase of the project\n\nPossible enum values:\n - `\"Active\"` means the namespace is available for use in the system\n - `\"Terminating\"` means the namespace is undergoing graceful termination",
- "type": "string",
- "enum": [
- "Active",
- "Terminating"
- ]
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "project.openshift.io",
- "Version": "v1",
- "Kind": "ProjectStatus",
+ "Group": "sharedresource.openshift.io",
+ "Version": "v1alpha1",
+ "Kind": "SharedSecretStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.quota.v1.AppliedClusterResourceQuota": {
- "description": "AppliedClusterResourceQuota mirrors ClusterResourceQuota at a project scope, for projection into a project. It allows a project-admin to know which ClusterResourceQuotas are applied to his project and their associated usage.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.template.v1.BrokerTemplateInstance": {
+ "description": "BrokerTemplateInstance holds the service broker-related state associated with a TemplateInstance. BrokerTemplateInstance is part of an experimental API.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"spec"
],
"properties": {
@@ -110186,26 +114612,21 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "Spec defines the desired quota",
- "default": {},
- "$ref": "#/definitions/io.openshift.quota.v1.ClusterResourceQuotaSpec"
- },
- "status": {
- "description": "Status defines the actual enforced quota and its current usage",
+ "description": "spec describes the state of this BrokerTemplateInstance.",
"default": {},
- "$ref": "#/definitions/io.openshift.quota.v1.ClusterResourceQuotaStatus"
+ "$ref": "#/definitions/io.openshift.template.v1.BrokerTemplateInstanceSpec"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "quota.openshift.io",
+ "Group": "template.openshift.io",
"Version": "v1",
- "Kind": "AppliedClusterResourceQuota",
- "Scope": "Namespaced"
+ "Kind": "BrokerTemplateInstance",
+ "Scope": "Clustered"
}
},
- "io.openshift.quota.v1.AppliedClusterResourceQuotaList": {
- "description": "AppliedClusterResourceQuotaList is a collection of AppliedClusterResourceQuotas\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.template.v1.BrokerTemplateInstanceList": {
+ "description": "BrokerTemplateInstanceList is a list of BrokerTemplateInstance objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"items"
@@ -110216,11 +114637,11 @@
"type": "string"
},
"items": {
- "description": "Items is a list of AppliedClusterResourceQuota",
+ "description": "items is a list of BrokerTemplateInstances",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.quota.v1.AppliedClusterResourceQuota"
+ "$ref": "#/definitions/io.openshift.template.v1.BrokerTemplateInstance"
}
},
"kind": {
@@ -110235,17 +114656,152 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "quota.openshift.io",
+ "Group": "template.openshift.io",
+ "Version": "v1",
+ "Kind": "BrokerTemplateInstanceList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.template.v1.BrokerTemplateInstanceSpec": {
+ "description": "BrokerTemplateInstanceSpec describes the state of a BrokerTemplateInstance.",
+ "type": "object",
+ "required": [
+ "templateInstance",
+ "secret"
+ ],
+ "properties": {
+ "bindingIDs": {
+ "description": "bindingids is a list of 'binding_id's provided during successive bind calls to the template service broker.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "secret": {
+ "description": "secret is a reference to a Secret object residing in a namespace, containing the necessary template parameters.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "templateInstance": {
+ "description": "templateinstance is a reference to a TemplateInstance object residing in a namespace.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "template.openshift.io",
+ "Version": "v1",
+ "Kind": "BrokerTemplateInstanceSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.template.v1.Parameter": {
+ "description": "Parameter defines a name/value variable that is to be processed during the Template to Config transformation.",
+ "type": "object",
+ "required": [
+ "name"
+ ],
+ "properties": {
+ "description": {
+ "description": "Description of a parameter. Optional.",
+ "type": "string"
+ },
+ "displayName": {
+ "description": "Optional: The name that will show in UI instead of parameter 'Name'",
+ "type": "string"
+ },
+ "from": {
+ "description": "From is an input value for the generator. Optional.",
+ "type": "string"
+ },
+ "generate": {
+ "description": "generate specifies the generator to be used to generate random string from an input value specified by From field. The result string is stored into Value field. If empty, no generator is being used, leaving the result Value untouched. Optional.\n\nThe only supported generator is \"expression\", which accepts a \"from\" value in the form of a simple regular expression containing the range expression \"[a-zA-Z0-9]\", and the length expression \"a{length}\".\n\nExamples:\n\nfrom | value ----------------------------- \"test[0-9]{1}x\" | \"test7x\" \"[0-1]{8}\" | \"01001100\" \"0x[A-F0-9]{4}\" | \"0xB3AF\" \"[a-zA-Z0-9]{8}\" | \"hW4yQU5i\"",
+ "type": "string"
+ },
+ "name": {
+ "description": "Name must be set and it can be referenced in Template Items using ${PARAMETER_NAME}. Required.",
+ "type": "string",
+ "default": ""
+ },
+ "required": {
+ "description": "Optional: Indicates the parameter must have a value. Defaults to false.",
+ "type": "boolean"
+ },
+ "value": {
+ "description": "Value holds the Parameter data. If specified, the generator will be ignored. The value replaces all occurrences of the Parameter ${Name} expression during the Template to Config transformation. Optional.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "template.openshift.io",
+ "Version": "v1",
+ "Kind": "Parameter",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.template.v1.Template": {
+ "description": "Template contains the inputs needed to produce a Config.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "objects"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "labels": {
+ "description": "labels is a optional set of labels that are applied to every object during the Template to Config transformation.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "message": {
+ "description": "message is an optional instructional message that will be displayed when this template is instantiated. This field should inform the user how to utilize the newly created resources. Parameter substitution will be performed on the message before being displayed so that generated credentials and other parameters can be included in the output.",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "objects": {
+ "description": "objects is an array of resources to include in this template. If a namespace value is hardcoded in the object, it will be removed during template instantiation, however if the namespace value is, or contains, a ${PARAMETER_REFERENCE}, the resolved value after parameter substitution will be respected and the object will be created in that namespace.",
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ }
+ },
+ "parameters": {
+ "description": "parameters is an optional array of Parameters used during the Template to Config transformation.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.template.v1.Parameter"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "template.openshift.io",
"Version": "v1",
- "Kind": "AppliedClusterResourceQuotaList",
+ "Kind": "Template",
"Scope": "Namespaced"
}
},
- "io.openshift.quota.v1.ClusterResourceQuota": {
- "description": "ClusterResourceQuota mirrors ResourceQuota at a cluster scope. This object is easily convertible to synthetic ResourceQuota object to allow quota evaluation re-use.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.template.v1.TemplateInstance": {
+ "description": "TemplateInstance requests and records the instantiation of a Template. TemplateInstance is part of an experimental API.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "metadata",
"spec"
],
"properties": {
@@ -110263,26 +114819,70 @@
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "Spec defines the desired quota",
+ "description": "spec describes the desired state of this TemplateInstance.",
"default": {},
- "$ref": "#/definitions/io.openshift.quota.v1.ClusterResourceQuotaSpec"
+ "$ref": "#/definitions/io.openshift.template.v1.TemplateInstanceSpec"
},
"status": {
- "description": "Status defines the actual enforced quota and its current usage",
+ "description": "status describes the current state of this TemplateInstance.",
"default": {},
- "$ref": "#/definitions/io.openshift.quota.v1.ClusterResourceQuotaStatus"
+ "$ref": "#/definitions/io.openshift.template.v1.TemplateInstanceStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "quota.openshift.io",
+ "Group": "template.openshift.io",
"Version": "v1",
- "Kind": "ClusterResourceQuota",
- "Scope": "Clustered"
+ "Kind": "TemplateInstance",
+ "Scope": "Namespaced"
}
},
- "io.openshift.quota.v1.ClusterResourceQuotaList": {
- "description": "ClusterResourceQuotaList is a collection of ClusterResourceQuotas\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.template.v1.TemplateInstanceCondition": {
+ "description": "TemplateInstanceCondition contains condition information for a TemplateInstance.",
+ "type": "object",
+ "required": [
+ "type",
+ "status",
+ "lastTransitionTime",
+ "reason",
+ "message"
+ ],
+ "properties": {
+ "lastTransitionTime": {
+ "description": "LastTransitionTime is the last time a condition status transitioned from one state to another.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "message": {
+ "description": "Message is a human readable description of the details of the last transition, complementing reason.",
+ "type": "string",
+ "default": ""
+ },
+ "reason": {
+ "description": "Reason is a brief machine readable explanation for the condition's last transition.",
+ "type": "string",
+ "default": ""
+ },
+ "status": {
+ "description": "Status of the condition, one of True, False or Unknown.",
+ "type": "string",
+ "default": ""
+ },
+ "type": {
+ "description": "Type of the condition, currently Ready or InstantiateFailure.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "template.openshift.io",
+ "Version": "v1",
+ "Kind": "TemplateInstanceCondition",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.template.v1.TemplateInstanceList": {
+ "description": "TemplateInstanceList is a list of TemplateInstance objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
"items"
@@ -110293,11 +114893,11 @@
"type": "string"
},
"items": {
- "description": "Items is a list of ClusterResourceQuotas",
+ "description": "items is a list of Templateinstances",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.quota.v1.ClusterResourceQuota"
+ "$ref": "#/definitions/io.openshift.template.v1.TemplateInstance"
}
},
"kind": {
@@ -110312,144 +114912,193 @@
},
"x-fabric8-info": {
"Type": "list",
- "Group": "quota.openshift.io",
+ "Group": "template.openshift.io",
"Version": "v1",
- "Kind": "ClusterResourceQuotaList",
+ "Kind": "TemplateInstanceList",
"Scope": "Namespaced"
}
},
- "io.openshift.quota.v1.ClusterResourceQuotaSelector": {
- "description": "ClusterResourceQuotaSelector is used to select projects. At least one of LabelSelector or AnnotationSelector must present. If only one is present, it is the only selection criteria. If both are specified, the project must match both restrictions.",
+ "io.openshift.template.v1.TemplateInstanceObject": {
+ "description": "TemplateInstanceObject references an object created by a TemplateInstance.",
"type": "object",
"properties": {
- "annotations": {
- "description": "AnnotationSelector is used to select projects by annotation.",
+ "ref": {
+ "description": "ref is a reference to the created object. When used under .spec, only name and namespace are used; these can contain references to parameters which will be substituted following the usual rules.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "template.openshift.io",
+ "Version": "v1",
+ "Kind": "TemplateInstanceObject",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.template.v1.TemplateInstanceRequester": {
+ "description": "TemplateInstanceRequester holds the identity of an agent requesting a template instantiation.",
+ "type": "object",
+ "properties": {
+ "extra": {
+ "description": "extra holds additional information provided by the authenticator.",
"type": "object",
"additionalProperties": {
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "groups": {
+ "description": "groups represent the groups this user is a part of.",
+ "type": "array",
+ "items": {
"type": "string",
"default": ""
}
},
- "labels": {
- "description": "LabelSelector is used to select projects by label.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+ "uid": {
+ "description": "uid is a unique value that identifies this user across time; if this user is deleted and another user by the same name is added, they will have different UIDs.",
+ "type": "string"
+ },
+ "username": {
+ "description": "username uniquely identifies this user among all active users.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "quota.openshift.io",
+ "Group": "template.openshift.io",
"Version": "v1",
- "Kind": "ClusterResourceQuotaSelector",
+ "Kind": "TemplateInstanceRequester",
"Scope": "Namespaced"
}
},
- "io.openshift.quota.v1.ClusterResourceQuotaSpec": {
- "description": "ClusterResourceQuotaSpec defines the desired quota restrictions",
+ "io.openshift.template.v1.TemplateInstanceSpec": {
+ "description": "TemplateInstanceSpec describes the desired state of a TemplateInstance.",
"type": "object",
"required": [
- "selector",
- "quota"
+ "template"
],
"properties": {
- "quota": {
- "description": "Quota defines the desired quota",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaSpec"
+ "requester": {
+ "description": "requester holds the identity of the agent requesting the template instantiation.",
+ "$ref": "#/definitions/io.openshift.template.v1.TemplateInstanceRequester"
},
- "selector": {
- "description": "Selector is the selector used to match projects. It should only select active projects on the scale of dozens (though it can select many more less active projects). These projects will contend on object creation through this resource.",
+ "secret": {
+ "description": "secret is a reference to a Secret object containing the necessary template parameters.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ },
+ "template": {
+ "description": "template is a full copy of the template for instantiation.",
"default": {},
- "$ref": "#/definitions/io.openshift.quota.v1.ClusterResourceQuotaSelector"
+ "$ref": "#/definitions/io.openshift.template.v1.Template"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "quota.openshift.io",
+ "Group": "template.openshift.io",
"Version": "v1",
- "Kind": "ClusterResourceQuotaSpec",
+ "Kind": "TemplateInstanceSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.quota.v1.ClusterResourceQuotaStatus": {
- "description": "ClusterResourceQuotaStatus defines the actual enforced quota and its current usage",
+ "io.openshift.template.v1.TemplateInstanceStatus": {
+ "description": "TemplateInstanceStatus describes the current state of a TemplateInstance.",
"type": "object",
- "required": [
- "total"
- ],
"properties": {
- "namespaces": {
- "description": "Namespaces slices the usage by project. This division allows for quick resolution of deletion reconciliation inside of a single project without requiring a recalculation across all projects. This can be used to pull the deltas for a given project.",
+ "conditions": {
+ "description": "conditions represent the latest available observations of a TemplateInstance's current state.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.quota.v1.ResourceQuotaStatusByNamespace"
+ "$ref": "#/definitions/io.openshift.template.v1.TemplateInstanceCondition"
}
},
- "total": {
- "description": "Total defines the actual enforced quota and its current usage across all projects",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaStatus"
+ "objects": {
+ "description": "Objects references the objects created by the TemplateInstance.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.template.v1.TemplateInstanceObject"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "quota.openshift.io",
+ "Group": "template.openshift.io",
"Version": "v1",
- "Kind": "ClusterResourceQuotaStatus",
+ "Kind": "TemplateInstanceStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.quota.v1.ResourceQuotaStatusByNamespace": {
- "description": "ResourceQuotaStatusByNamespace gives status for a particular project",
+ "io.openshift.template.v1.TemplateList": {
+ "description": "TemplateList is a list of Template objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "namespace",
- "status"
+ "items"
],
"properties": {
- "namespace": {
- "description": "Namespace the project this status applies to",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "status": {
- "description": "Status indicates how many resources have been consumed by this project",
+ "items": {
+ "description": "Items is a list of templates",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.template.v1.Template"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaStatus"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "quota.openshift.io",
+ "Type": "list",
+ "Group": "template.openshift.io",
"Version": "v1",
- "Kind": "ResourceQuotaStatusByNamespace",
+ "Kind": "TemplateList",
"Scope": "Namespaced"
}
},
- "io.openshift.route.v1.LocalObjectReference": {
- "description": "LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace.",
+ "io.openshift.tuned.v1.OperandConfig": {
"type": "object",
"properties": {
- "name": {
- "description": "name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names",
- "type": "string"
+ "debug": {
+ "description": "turn debugging on/off for the TuneD daemon: true/false (default is false)",
+ "type": "boolean"
+ },
+ "tunedConfig": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.tuned.v1.TuneDConfig"
+ },
+ "verbosity": {
+ "description": "klog logging verbosity",
+ "type": "integer",
+ "format": "int32"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "route.openshift.io",
+ "Group": "tuned.openshift.io",
"Version": "v1",
- "Kind": "LocalObjectReference",
+ "Kind": "OperandConfig",
"Scope": "Namespaced"
- },
- "x-kubernetes-map-type": "atomic"
+ }
},
- "io.openshift.route.v1.Route": {
- "description": "A route allows developers to expose services through an HTTP(S) aware load balancing and proxy layer via a public DNS entry. The route may further specify TLS options and a certificate, or specify a public CNAME that the router should also accept for HTTP and HTTPS traffic. An administrator typically configures their router to be visible outside the cluster firewall, and may also add additional security, caching, or traffic controls on the service content. Routers usually talk directly to the service endpoints.\n\nOnce a route is created, the `host` field may not be changed. Generally, routers use the oldest route with a given host when resolving conflicts.\n\nRouters are subject to additional customization and may support additional controls via the annotations field.\n\nBecause administrators may configure multiple routers, the route status field is used to return information to clients about the names and states of the route under each router. If a client chooses a duplicate name, for instance, the route status conditions are used to indicate the route cannot be chosen.\n\nTo enable HTTP/2 ALPN on a route it requires a custom (non-wildcard) certificate. This prevents connection coalescing by clients, notably web browsers. We do not support HTTP/2 ALPN on routes that use the default certificate because of the risk of connection re-use/coalescing. Routes that do not have their own custom certificate will not be HTTP/2 ALPN-enabled on either the frontend or the backend.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.tuned.v1.Profile": {
+ "description": "Profile is a specification for a Profile resource.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -110460,226 +115109,251 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec is the desired state of the route",
"default": {},
- "$ref": "#/definitions/io.openshift.route.v1.RouteSpec"
+ "$ref": "#/definitions/io.openshift.tuned.v1.ProfileSpec"
},
"status": {
- "description": "status is the current state of the route",
"default": {},
- "$ref": "#/definitions/io.openshift.route.v1.RouteStatus"
+ "$ref": "#/definitions/io.openshift.tuned.v1.ProfileStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "route.openshift.io",
+ "Group": "tuned.openshift.io",
"Version": "v1",
- "Kind": "Route",
+ "Kind": "Profile",
"Scope": "Namespaced"
}
},
- "io.openshift.route.v1.RouteHTTPHeader": {
- "description": "RouteHTTPHeader specifies configuration for setting or deleting an HTTP header.",
+ "io.openshift.tuned.v1.ProfileConfig": {
"type": "object",
"required": [
- "name",
- "action"
+ "tunedProfile"
],
"properties": {
- "action": {
- "description": "action specifies actions to perform on headers, such as setting or deleting headers.",
+ "debug": {
+ "description": "option to debug TuneD daemon execution",
+ "type": "boolean",
+ "default": false
+ },
+ "providerName": {
+ "description": "Name of the cloud provider as taken from the Node providerID: \u003cProviderName\u003e://\u003cProviderSpecificNodeID\u003e",
+ "type": "string"
+ },
+ "tunedConfig": {
"default": {},
- "$ref": "#/definitions/io.openshift.route.v1.RouteHTTPHeaderActionUnion"
+ "$ref": "#/definitions/io.openshift.tuned.v1.TuneDConfig"
},
- "name": {
- "description": "name specifies the name of a header on which to perform an action. Its value must be a valid HTTP header name as defined in RFC 2616 section 4.2. The name must consist only of alphanumeric and the following special characters, \"-!#$%\u0026'*+.^_`\". The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Cookie, Set-Cookie. It must be no more than 255 characters in length. Header name must be unique.",
+ "tunedProfile": {
+ "description": "TuneD profile to apply",
"type": "string",
"default": ""
+ },
+ "verbosity": {
+ "description": "klog logging verbosity",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "route.openshift.io",
+ "Group": "tuned.openshift.io",
"Version": "v1",
- "Kind": "RouteHTTPHeader",
+ "Kind": "ProfileConfig",
"Scope": "Namespaced"
}
},
- "io.openshift.route.v1.RouteHTTPHeaderActionUnion": {
- "description": "RouteHTTPHeaderActionUnion specifies an action to take on an HTTP header.",
+ "io.openshift.tuned.v1.ProfileList": {
+ "description": "ProfileList is a list of Profile resources.",
"type": "object",
"required": [
- "type"
+ "items"
],
"properties": {
- "set": {
- "description": "set defines the HTTP header that should be set: added if it doesn't exist or replaced if it does. This field is required when type is Set and forbidden otherwise.",
- "$ref": "#/definitions/io.openshift.route.v1.RouteSetHTTPHeader"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "type": {
- "description": "type defines the type of the action to be applied on the header. Possible values are Set or Delete. Set allows you to set HTTP request and response headers. Delete allows you to delete HTTP request and response headers.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "route.openshift.io",
- "Version": "v1",
- "Kind": "RouteHTTPHeaderActionUnion",
- "Scope": "Namespaced"
- },
- "x-kubernetes-unions": [
- {
- "discriminator": "type",
- "fields-to-discriminateBy": {
- "set": "Set"
- }
- }
- ]
- },
- "io.openshift.route.v1.RouteHTTPHeaderActions": {
- "description": "RouteHTTPHeaderActions defines configuration for actions on HTTP request and response headers.",
- "type": "object",
- "properties": {
- "request": {
- "description": "request is a list of HTTP request headers to modify. Currently, actions may define to either `Set` or `Delete` headers values. Actions defined here will modify the request headers of all requests made through a route. These actions are applied to a specific Route defined within a cluster i.e. connections made through a route. Currently, actions may define to either `Set` or `Delete` headers values. Route actions will be executed after IngressController actions for request headers. Actions are applied in sequence as defined in this list. A maximum of 20 request header actions may be configured. You can use this field to specify HTTP request headers that should be set or deleted when forwarding connections from the client to your application. Sample fetchers allowed are \"req.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[req.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\". Any request header configuration applied directly via a Route resource using this API will override header configuration for a header of the same name applied via spec.httpHeaders.actions on the IngressController or route annotation. Note: This field cannot be used if your route uses TLS passthrough.",
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.route.v1.RouteHTTPHeader"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "$ref": "#/definitions/io.openshift.tuned.v1.Profile"
+ }
},
- "response": {
- "description": "response is a list of HTTP response headers to modify. Currently, actions may define to either `Set` or `Delete` headers values. Actions defined here will modify the response headers of all requests made through a route. These actions are applied to a specific Route defined within a cluster i.e. connections made through a route. Route actions will be executed before IngressController actions for response headers. Actions are applied in sequence as defined in this list. A maximum of 20 response header actions may be configured. You can use this field to specify HTTP response headers that should be set or deleted when forwarding responses from your application to the client. Sample fetchers allowed are \"res.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[res.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\". Note: This field cannot be used if your route uses TLS passthrough.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.route.v1.RouteHTTPHeader"
- },
- "x-kubernetes-list-map-keys": [
- "name"
- ],
- "x-kubernetes-list-type": "map"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "route.openshift.io",
+ "Type": "list",
+ "Group": "tuned.openshift.io",
"Version": "v1",
- "Kind": "RouteHTTPHeaderActions",
+ "Kind": "ProfileList",
"Scope": "Namespaced"
}
},
- "io.openshift.route.v1.RouteHTTPHeaders": {
- "description": "RouteHTTPHeaders defines policy for HTTP headers.",
+ "io.openshift.tuned.v1.ProfileSpec": {
"type": "object",
+ "required": [
+ "config"
+ ],
"properties": {
- "actions": {
- "description": "actions specifies options for modifying headers and their values. Note that this option only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). Headers cannot be modified for TLS passthrough connections. Setting the HSTS (`Strict-Transport-Security`) header is not supported via actions. `Strict-Transport-Security` may only be configured using the \"haproxy.router.openshift.io/hsts_header\" route annotation, and only in accordance with the policy specified in Ingress.Spec.RequiredHSTSPolicies. In case of HTTP request headers, the actions specified in spec.httpHeaders.actions on the Route will be executed after the actions specified in the IngressController's spec.httpHeaders.actions field. In case of HTTP response headers, the actions specified in spec.httpHeaders.actions on the IngressController will be executed after the actions specified in the Route's spec.httpHeaders.actions field. The headers set via this API will not appear in access logs. Any actions defined here are applied after any actions related to the following other fields: cache-control, spec.clientTLS, spec.httpHeaders.forwardedHeaderPolicy, spec.httpHeaders.uniqueId, and spec.httpHeaders.headerNameCaseAdjustments. The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Cookie, Set-Cookie. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController. Please refer to the documentation for that API field for more details.",
+ "config": {
"default": {},
- "$ref": "#/definitions/io.openshift.route.v1.RouteHTTPHeaderActions"
+ "$ref": "#/definitions/io.openshift.tuned.v1.ProfileConfig"
+ },
+ "profile": {
+ "description": "Tuned profiles.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.tuned.v1.TunedProfile"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "route.openshift.io",
+ "Group": "tuned.openshift.io",
"Version": "v1",
- "Kind": "RouteHTTPHeaders",
+ "Kind": "ProfileSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.route.v1.RouteIngress": {
- "description": "RouteIngress holds information about the places where a route is exposed.",
+ "io.openshift.tuned.v1.ProfileStatus": {
+ "description": "ProfileStatus is the status for a Profile resource; the status is for internal use only and its fields may be changed/removed in the future.",
"type": "object",
+ "required": [
+ "tunedProfile"
+ ],
"properties": {
"conditions": {
- "description": "Conditions is the state of the route, may be empty.",
+ "description": "conditions represents the state of the per-node Profile application",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.route.v1.RouteIngressCondition"
+ "$ref": "#/definitions/io.openshift.tuned.v1.ProfileStatusCondition"
},
- "x-kubernetes-list-map-keys": [
- "type"
- ],
- "x-kubernetes-list-type": "map"
- },
- "host": {
- "description": "Host is the host string under which the route is exposed; this value is required",
- "type": "string"
- },
- "routerCanonicalHostname": {
- "description": "CanonicalHostname is the external host name for the router that can be used as a CNAME for the host requested for this route. This value is optional and may not be set in all cases.",
- "type": "string"
- },
- "routerName": {
- "description": "Name is a name chosen by the router to identify itself; this value is required",
- "type": "string"
+ "x-kubernetes-patch-merge-key": "type",
+ "x-kubernetes-patch-strategy": "merge"
},
- "wildcardPolicy": {
- "description": "Wildcard policy is the wildcard policy that was allowed where this route is exposed.",
- "type": "string"
+ "tunedProfile": {
+ "description": "the current profile in use by the Tuned daemon",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "route.openshift.io",
+ "Group": "tuned.openshift.io",
"Version": "v1",
- "Kind": "RouteIngress",
+ "Kind": "ProfileStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.route.v1.RouteIngressCondition": {
- "description": "RouteIngressCondition contains details for the current condition of this route on a particular router.",
+ "io.openshift.tuned.v1.ProfileStatusCondition": {
+ "description": "ProfileStatusCondition represents a partial state of the per-node Profile application.",
"type": "object",
"required": [
"type",
- "status"
+ "status",
+ "lastTransitionTime"
],
"properties": {
"lastTransitionTime": {
- "description": "RFC 3339 date and time when this condition last transitioned",
+ "description": "lastTransitionTime is the time of the last update to the current status property.",
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
"message": {
- "description": "Human readable message indicating details about last transition.",
+ "description": "message provides additional information about the current condition. This is only to be consumed by humans.",
"type": "string"
},
"reason": {
- "description": "(brief) reason for the condition's last transition, and is usually a machine and human readable constant",
+ "description": "reason is the CamelCase reason for the condition's current status.",
"type": "string"
},
"status": {
- "description": "Status is the status of the condition. Can be True, False, Unknown.",
+ "description": "status of the condition, one of True, False, Unknown.",
"type": "string",
"default": ""
},
"type": {
- "description": "Type is the type of the condition. Currently only Admitted or UnservableInFutureVersions.",
+ "description": "type specifies the aspect reported by this condition.",
"type": "string",
"default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "route.openshift.io",
+ "Group": "tuned.openshift.io",
"Version": "v1",
- "Kind": "RouteIngressCondition",
+ "Kind": "ProfileStatusCondition",
"Scope": "Namespaced"
}
},
- "io.openshift.route.v1.RouteList": {
- "description": "RouteList is a collection of Routes.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.openshift.tuned.v1.TuneDConfig": {
+ "description": "Global configuration for the TuneD daemon as defined in tuned-main.conf",
+ "type": "object",
+ "properties": {
+ "reapply_sysctl": {
+ "description": "turn reapply_sysctl functionality on/off for the TuneD daemon: true/false",
+ "type": "boolean"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "tuned.openshift.io",
+ "Version": "v1",
+ "Kind": "TuneDConfig",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.tuned.v1.Tuned": {
+ "description": "Tuned is a collection of rules that allows cluster-wide deployment of node-level sysctls and more flexibility to add custom tuning specified by user needs. These rules are translated and passed to all containerized Tuned daemons running in the cluster in the format that the daemons understand. The responsibility for applying the node-level tuning then lies with the containerized Tuned daemons. More info: https://github.com/openshift/cluster-node-tuning-operator",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "description": "spec is the specification of the desired behavior of Tuned. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.tuned.v1.TunedSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.tuned.v1.TunedStatus"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "object",
+ "Group": "tuned.openshift.io",
+ "Version": "v1",
+ "Kind": "Tuned",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.tuned.v1.TunedList": {
+ "description": "TunedList is a list of Tuned resources.",
"type": "object",
"required": [
"items"
@@ -110690,11 +115364,10 @@
"type": "string"
},
"items": {
- "description": "items is a list of routes",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.route.v1.Route"
+ "$ref": "#/definitions/io.openshift.tuned.v1.Tuned"
}
},
"kind": {
@@ -110702,903 +115375,1020 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "route.openshift.io",
+ "Group": "tuned.openshift.io",
"Version": "v1",
- "Kind": "RouteList",
+ "Kind": "TunedList",
"Scope": "Namespaced"
}
},
- "io.openshift.route.v1.RoutePort": {
- "description": "RoutePort defines a port mapping from a router to an endpoint in the service endpoints.",
+ "io.openshift.tuned.v1.TunedMatch": {
+ "description": "Rules governing application of a Tuned profile.",
"type": "object",
"required": [
- "targetPort"
+ "label"
],
"properties": {
- "targetPort": {
- "description": "The target port on pods selected by the service this route points to. If this is a string, it will be looked up as a named port in the target endpoints port list. Required",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"
+ "label": {
+ "description": "Node or Pod label name.",
+ "type": "string"
+ },
+ "match": {
+ "description": "Additional rules governing application of the tuned profile connected by logical AND operator.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.tuned.v1.TunedMatch"
+ }
+ },
+ "type": {
+ "description": "Match type: [node/pod]. If omitted, \"node\" is assumed.",
+ "type": "string"
+ },
+ "value": {
+ "description": "Node or Pod label value. If omitted, the presence of label name is enough to match.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "route.openshift.io",
+ "Group": "tuned.openshift.io",
"Version": "v1",
- "Kind": "RoutePort",
+ "Kind": "TunedMatch",
"Scope": "Namespaced"
}
},
- "io.openshift.route.v1.RouteSetHTTPHeader": {
- "description": "RouteSetHTTPHeader specifies what value needs to be set on an HTTP header.",
+ "io.openshift.tuned.v1.TunedProfile": {
+ "description": "A Tuned profile.",
"type": "object",
"required": [
- "value"
+ "name",
+ "data"
],
"properties": {
- "value": {
- "description": "value specifies a header value. Dynamic values can be added. The value will be interpreted as an HAProxy format string as defined in http://cbonte.github.io/haproxy-dconv/2.6/configuration.html#8.2.6 and may use HAProxy's %[] syntax and otherwise must be a valid HTTP header value as defined in https://datatracker.ietf.org/doc/html/rfc7230#section-3.2. The value of this field must be no more than 16384 characters in length. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController.",
- "type": "string",
- "default": ""
+ "data": {
+ "description": "Specification of the Tuned profile to be consumed by the Tuned daemon.",
+ "type": "string"
+ },
+ "name": {
+ "description": "Name of the Tuned profile to be used in the recommend section.",
+ "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "route.openshift.io",
+ "Group": "tuned.openshift.io",
"Version": "v1",
- "Kind": "RouteSetHTTPHeader",
+ "Kind": "TunedProfile",
"Scope": "Namespaced"
}
},
- "io.openshift.route.v1.RouteSpec": {
- "description": "RouteSpec describes the hostname or path the route exposes, any security information, and one to four backends (services) the route points to. Requests are distributed among the backends depending on the weights assigned to each backend. When using roundrobin scheduling the portion of requests that go to each backend is the backend weight divided by the sum of all of the backend weights. When the backend has more than one endpoint the requests that end up on the backend are roundrobin distributed among the endpoints. Weights are between 0 and 256 with default 100. Weight 0 causes no requests to the backend. If all weights are zero the route will be considered to have no backends and return a standard 503 response.\n\nThe `tls` field is optional and allows specific certificates or behavior for the route. Routers typically configure a default certificate on a wildcard domain to terminate routes without explicit certificates, but custom hostnames usually must choose passthrough (send traffic directly to the backend via the TLS Server-Name- Indication field) or provide a certificate.",
+ "io.openshift.tuned.v1.TunedRecommend": {
+ "description": "Selection logic for a single Tuned profile.",
"type": "object",
"required": [
- "to"
+ "profile",
+ "priority"
],
"properties": {
- "alternateBackends": {
- "description": "alternateBackends allows up to 3 additional backends to be assigned to the route. Only the Service kind is allowed, and it will be defaulted to Service. Use the weight field in RouteTargetReference object to specify relative preference.",
+ "machineConfigLabels": {
+ "description": "MachineConfigLabels specifies the labels for a MachineConfig. The MachineConfig is created automatically to apply additional host settings (e.g. kernel boot parameters) profile 'Profile' needs and can only be applied by creating a MachineConfig. This involves finding all MachineConfigPools with machineConfigSelector matching the MachineConfigLabels and setting the profile 'Profile' on all nodes that match the MachineConfigPools' nodeSelectors.",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "match": {
+ "description": "Rules governing application of a Tuned profile connected by logical OR operator.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.route.v1.RouteTargetReference"
- },
- "x-kubernetes-list-map-keys": [
- "name",
- "kind"
- ],
- "x-kubernetes-list-type": "map"
+ "$ref": "#/definitions/io.openshift.tuned.v1.TunedMatch"
+ }
},
- "host": {
- "description": "host is an alias/DNS that points to the service. Optional. If not specified a route name will typically be automatically chosen. Must follow DNS952 subdomain conventions.",
- "type": "string"
+ "operand": {
+ "description": "Optional operand configuration.",
+ "default": {},
+ "$ref": "#/definitions/io.openshift.tuned.v1.OperandConfig"
},
- "httpHeaders": {
- "description": "httpHeaders defines policy for HTTP headers.",
- "$ref": "#/definitions/io.openshift.route.v1.RouteHTTPHeaders"
+ "priority": {
+ "description": "Tuned profile priority. Highest priority is 0.",
+ "type": "integer",
+ "format": "int64"
},
- "path": {
- "description": "path that the router watches for, to route traffic for to the service. Optional",
+ "profile": {
+ "description": "Name of the Tuned profile to recommend.",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "tuned.openshift.io",
+ "Version": "v1",
+ "Kind": "TunedRecommend",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.tuned.v1.TunedSpec": {
+ "type": "object",
+ "properties": {
+ "managementState": {
+ "description": "managementState indicates whether the registry instance represented by this config instance is under operator management or not. Valid values are Force, Managed, Unmanaged, and Removed.",
"type": "string"
},
- "port": {
- "description": "If specified, the port to be used by the router. Most routers will use all endpoints exposed by the service by default - set this value to instruct routers which port to use.",
- "$ref": "#/definitions/io.openshift.route.v1.RoutePort"
+ "profile": {
+ "description": "Tuned profiles.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.tuned.v1.TunedProfile"
+ }
},
- "subdomain": {
- "description": "subdomain is a DNS subdomain that is requested within the ingress controller's domain (as a subdomain). If host is set this field is ignored. An ingress controller may choose to ignore this suggested name, in which case the controller will report the assigned name in the status.ingress array or refuse to admit the route. If this value is set and the server does not support this field host will be populated automatically. Otherwise host is left empty. The field may have multiple parts separated by a dot, but not all ingress controllers may honor the request. This field may not be changed after creation except by a user with the update routes/custom-host permission.\n\nExample: subdomain `frontend` automatically receives the router subdomain `apps.mycluster.com` to have a full hostname `frontend.apps.mycluster.com`.",
+ "recommend": {
+ "description": "Selection logic for all Tuned profiles.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.tuned.v1.TunedRecommend"
+ }
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "tuned.openshift.io",
+ "Version": "v1",
+ "Kind": "TunedSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.tuned.v1.TunedStatus": {
+ "description": "TunedStatus is the status for a Tuned resource.",
+ "type": "object",
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "tuned.openshift.io",
+ "Version": "v1",
+ "Kind": "TunedStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.openshift.user.v1.Group": {
+ "description": "Group represents a referenceable set of Users\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "type": "object",
+ "required": [
+ "users"
+ ],
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "tls": {
- "description": "The tls field provides the ability to configure certificates and termination for the route.",
- "$ref": "#/definitions/io.openshift.route.v1.TLSConfig"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "to": {
- "description": "to is an object the route should use as the primary backend. Only the Service kind is allowed, and it will be defaulted to Service. If the weight field (0-256 default 100) is set to zero, no traffic will be sent to this backend.",
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
- "$ref": "#/definitions/io.openshift.route.v1.RouteTargetReference"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "wildcardPolicy": {
- "description": "Wildcard policy if any for the route. Currently only 'Subdomain' or 'None' is allowed.",
- "type": "string"
+ "users": {
+ "description": "Users is the list of users in this group.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "route.openshift.io",
+ "Type": "object",
+ "Group": "user.openshift.io",
"Version": "v1",
- "Kind": "RouteSpec",
- "Scope": "Namespaced"
+ "Kind": "Group",
+ "Scope": "Clustered"
}
},
- "io.openshift.route.v1.RouteStatus": {
- "description": "RouteStatus provides relevant info about the status of a route, including which routers acknowledge it.",
+ "io.openshift.user.v1.GroupList": {
+ "description": "GroupList is a collection of Groups\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "ingress": {
- "description": "ingress describes the places where the route may be exposed. The list of ingress points may contain duplicate Host or RouterName values. Routes are considered live once they are `Ready`",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items is the list of groups",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.route.v1.RouteIngress"
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/io.openshift.user.v1.Group"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "route.openshift.io",
+ "Type": "list",
+ "Group": "user.openshift.io",
"Version": "v1",
- "Kind": "RouteStatus",
+ "Kind": "GroupList",
"Scope": "Namespaced"
}
},
- "io.openshift.route.v1.RouteTargetReference": {
- "description": "RouteTargetReference specifies the target that resolve into endpoints. Only the 'Service' kind is allowed. Use 'weight' field to emphasize one over others.",
+ "io.openshift.user.v1.Identity": {
+ "description": "Identity records a successful authentication of a user with an identity provider. The information about the source of authentication is stored on the identity, and the identity is then associated with a single user object. Multiple identities can reference a single user. Information retrieved from the authentication provider is stored in the extra field using a schema determined by the provider.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "kind",
- "name"
+ "providerName",
+ "providerUserName",
+ "user"
],
"properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "extra": {
+ "description": "Extra holds extra information about this identity",
+ "type": "object",
+ "additionalProperties": {
+ "type": "string",
+ "default": ""
+ }
+ },
"kind": {
- "description": "The kind of target that the route is referring to. Currently, only 'Service' is allowed",
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "providerName": {
+ "description": "ProviderName is the source of identity information",
"type": "string",
"default": ""
},
- "name": {
- "description": "name of the service/target that is being referred to. e.g. name of the service",
+ "providerUserName": {
+ "description": "ProviderUserName uniquely represents this identity in the scope of the provider",
"type": "string",
"default": ""
},
- "weight": {
- "description": "weight as an integer between 0 and 256, default 100, that specifies the target's relative weight against other target reference objects. 0 suppresses requests to this backend.",
- "type": "integer",
- "format": "int32"
+ "user": {
+ "description": "User is a reference to the user this identity is associated with Both Name and UID must be set",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "route.openshift.io",
+ "Type": "object",
+ "Group": "user.openshift.io",
"Version": "v1",
- "Kind": "RouteTargetReference",
- "Scope": "Namespaced"
+ "Kind": "Identity",
+ "Scope": "Clustered"
}
},
- "io.openshift.route.v1.RouterShard": {
- "description": "RouterShard has information of a routing shard and is used to generate host names and routing table entries when a routing shard is allocated for a specific route. Caveat: This is WIP and will likely undergo modifications when sharding support is added.",
+ "io.openshift.user.v1.IdentityList": {
+ "description": "IdentityList is a collection of Identities\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "shardName",
- "dnsSuffix"
+ "items"
],
"properties": {
- "dnsSuffix": {
- "description": "dnsSuffix for the shard ala: shard-1.v3.openshift.com",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "shardName": {
- "description": "shardName uniquely identifies a router shard in the \"set\" of routers used for routing traffic to the services.",
- "type": "string",
- "default": ""
+ "items": {
+ "description": "Items is the list of identities",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.openshift.user.v1.Identity"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "route.openshift.io",
+ "Type": "list",
+ "Group": "user.openshift.io",
"Version": "v1",
- "Kind": "RouterShard",
+ "Kind": "IdentityList",
"Scope": "Namespaced"
}
},
- "io.openshift.route.v1.TLSConfig": {
- "description": "TLSConfig defines config used to secure a route and provide termination",
+ "io.openshift.user.v1.User": {
+ "description": "Upon log in, every user of the system receives a User and Identity resource. Administrators may directly manipulate the attributes of the users for their own tracking, or set groups via the API. The user name is unique and is chosen based on the value provided by the identity provider - if a user already exists with the incoming name, the user name may have a number appended to it depending on the configuration of the system.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
"required": [
- "termination"
+ "groups"
],
"properties": {
- "caCertificate": {
- "description": "caCertificate provides the cert authority certificate contents",
- "type": "string"
- },
- "certificate": {
- "description": "certificate provides certificate contents. This should be a single serving certificate, not a certificate chain. Do not include a CA certificate.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "destinationCACertificate": {
- "description": "destinationCACertificate provides the contents of the ca certificate of the final destination. When using reencrypt termination this file should be provided in order to have routers use it for health checks on the secure connection. If this field is not specified, the router may provide its own destination CA and perform hostname validation using the short service name (service.namespace.svc), which allows infrastructure generated certificates to automatically verify.",
+ "fullName": {
+ "description": "FullName is the full name of user",
"type": "string"
},
- "externalCertificate": {
- "description": "externalCertificate provides certificate contents as a secret reference. This should be a single serving certificate, not a certificate chain. Do not include a CA certificate. The secret referenced should be present in the same namespace as that of the Route. Forbidden when `certificate` is set.",
- "$ref": "#/definitions/io.openshift.route.v1.LocalObjectReference"
+ "groups": {
+ "description": "Groups specifies group names this user is a member of. This field is deprecated and will be removed in a future release. Instead, create a Group object containing the name of this User.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "insecureEdgeTerminationPolicy": {
- "description": "insecureEdgeTerminationPolicy indicates the desired behavior for insecure connections to a route. While each router may make its own decisions on which ports to expose, this is normally port 80.\n\nIf a route does not specify insecureEdgeTerminationPolicy, then the default behavior is \"None\".\n\n* Allow - traffic is sent to the server on the insecure port (edge/reencrypt terminations only).\n\n* None - no traffic is allowed on the insecure port (default).\n\n* Redirect - clients are redirected to the secure port.",
- "type": "string"
+ "identities": {
+ "description": "Identities are the identities associated with this user",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "key": {
- "description": "key provides key file contents",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "termination": {
- "description": "termination indicates termination type.\n\n* edge - TLS termination is done by the router and http is used to communicate with the backend (default) * passthrough - Traffic is sent straight to the destination without the router providing TLS termination * reencrypt - TLS termination is done by the router and https is used to communicate with the backend\n\nNote: passthrough termination is incompatible with httpHeader actions",
- "type": "string",
- "default": ""
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "route.openshift.io",
+ "Type": "object",
+ "Group": "user.openshift.io",
"Version": "v1",
- "Kind": "TLSConfig",
- "Scope": "Namespaced"
+ "Kind": "User",
+ "Scope": "Clustered"
}
},
- "io.openshift.security.v1.AllowedFlexVolume": {
- "description": "AllowedFlexVolume represents a single Flexvolume that is allowed to be used.",
+ "io.openshift.user.v1.UserIdentityMapping": {
+ "description": "UserIdentityMapping maps a user to an identity\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
- "required": [
- "driver"
- ],
"properties": {
- "driver": {
- "description": "Driver is the name of the Flexvolume driver.",
- "type": "string",
- "default": ""
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "identity": {
+ "description": "Identity is a reference to an identity",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "user": {
+ "description": "User is a reference to a user",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "security.openshift.io",
+ "Type": "object",
+ "Group": "user.openshift.io",
"Version": "v1",
- "Kind": "AllowedFlexVolume",
- "Scope": "Namespaced"
+ "Kind": "UserIdentityMapping",
+ "Scope": "Clustered"
}
},
- "io.openshift.security.v1.FSGroupStrategyOptions": {
- "description": "FSGroupStrategyOptions defines the strategy type and options used to create the strategy.",
+ "io.openshift.user.v1.UserList": {
+ "description": "UserList is a collection of Users\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "ranges": {
- "description": "Ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
+ "description": "Items is the list of users",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.security.v1.IDRange"
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/io.openshift.user.v1.User"
+ }
},
- "type": {
- "description": "Type is the strategy that will dictate what FSGroup is used in the SecurityContext.",
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
+ },
+ "metadata": {
+ "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "security.openshift.io",
+ "Type": "list",
+ "Group": "user.openshift.io",
"Version": "v1",
- "Kind": "FSGroupStrategyOptions",
+ "Kind": "UserList",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.IDRange": {
- "description": "IDRange provides a min/max of an allowed range of IDs.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.APIEndpoint": {
+ "description": "APIEndpoint represents a reachable Kubernetes API endpoint.",
"type": "object",
+ "required": [
+ "host",
+ "port"
+ ],
"properties": {
- "max": {
- "description": "Max is the end of the range, inclusive.",
- "type": "integer",
- "format": "int64"
+ "host": {
+ "description": "Host is the hostname on which the API server is serving.",
+ "type": "string",
+ "default": ""
},
- "min": {
- "description": "Min is the start of the range, inclusive.",
+ "port": {
+ "description": "Port is the port on which the API server is serving.",
"type": "integer",
- "format": "int64"
+ "format": "int32",
+ "default": 0
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "IDRange",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "APIEndpoint",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.PodSecurityPolicyReview": {
- "description": "PodSecurityPolicyReview checks which service accounts (not users, since that would be cluster-wide) can create the `PodTemplateSpec` in question.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.CustomDeploy": {
+ "description": "Custom deploy is a description of a customized deploy process.",
"type": "object",
"required": [
- "spec"
+ "method"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "method": {
+ "description": "Custom deploy method name. This name is specific to the deploy ramdisk used. If you don't have a custom deploy ramdisk, you shouldn't use CustomDeploy.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "CustomDeploy",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.x-k8s.cluster.infrastructure.v1beta1.FromPool": {
+ "type": "object",
+ "required": [
+ "key",
+ "name",
+ "apiGroup",
+ "kind"
+ ],
+ "properties": {
+ "apiGroup": {
+ "description": "APIGroup is the api group of the IP pool.",
+ "type": "string",
+ "default": ""
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "key": {
+ "description": "Key will be used as the key to set in the metadata map for cloud-init",
+ "type": "string",
+ "default": ""
},
- "spec": {
- "description": "spec is the PodSecurityPolicy to check.",
- "default": {},
- "$ref": "#/definitions/io.openshift.security.v1.PodSecurityPolicyReviewSpec"
+ "kind": {
+ "description": "Kind is the kind of the IP pool",
+ "type": "string",
+ "default": ""
},
- "status": {
- "description": "status represents the current information/status for the PodSecurityPolicyReview.",
- "default": {},
- "$ref": "#/definitions/io.openshift.security.v1.PodSecurityPolicyReviewStatus"
+ "name": {
+ "description": "Name is the name of the IP pool used to fetch the value to set in the metadata map for cloud-init",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "PodSecurityPolicyReview",
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "FromPool",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.PodSecurityPolicyReviewSpec": {
- "description": "PodSecurityPolicyReviewSpec defines specification for PodSecurityPolicyReview",
+ "io.x-k8s.cluster.infrastructure.v1beta1.HostSelector": {
+ "description": "HostSelector specifies matching criteria for labels on BareMetalHosts. This is used to limit the set of BareMetalHost objects considered for claiming for a Machine.",
"type": "object",
- "required": [
- "template"
- ],
"properties": {
- "serviceAccountNames": {
- "description": "serviceAccountNames is an optional set of ServiceAccounts to run the check with. If serviceAccountNames is empty, the template.spec.serviceAccountName is used, unless it's empty, in which case \"default\" is used instead. If serviceAccountNames is specified, template.spec.serviceAccountName is ignored.",
+ "matchExpressions": {
+ "description": "Label match expressions that must be true on a chosen BareMetalHost",
"type": "array",
"items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.HostSelectorRequirement"
+ }
+ },
+ "matchLabels": {
+ "description": "Key/value pairs of labels that must exist on a chosen BareMetalHost",
+ "type": "object",
+ "additionalProperties": {
"type": "string",
"default": ""
}
- },
- "template": {
- "description": "template is the PodTemplateSpec to check. The template.spec.serviceAccountName field is used if serviceAccountNames is empty, unless the template.spec.serviceAccountName is empty, in which case \"default\" is used. If serviceAccountNames is specified, template.spec.serviceAccountName is ignored.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "PodSecurityPolicyReviewSpec",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "HostSelector",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.PodSecurityPolicyReviewStatus": {
- "description": "PodSecurityPolicyReviewStatus represents the status of PodSecurityPolicyReview.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.HostSelectorRequirement": {
"type": "object",
"required": [
- "allowedServiceAccounts"
+ "key",
+ "operator",
+ "values"
],
"properties": {
- "allowedServiceAccounts": {
- "description": "allowedServiceAccounts returns the list of service accounts in *this* namespace that have the power to create the PodTemplateSpec.",
+ "key": {
+ "type": "string",
+ "default": ""
+ },
+ "operator": {
+ "type": "string",
+ "default": ""
+ },
+ "values": {
"type": "array",
"items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.security.v1.ServiceAccountPodSecurityPolicyReviewStatus"
+ "type": "string",
+ "default": ""
}
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "PodSecurityPolicyReviewStatus",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "HostSelectorRequirement",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.PodSecurityPolicySelfSubjectReview": {
- "description": "PodSecurityPolicySelfSubjectReview checks whether this user/SA tuple can create the PodTemplateSpec\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Image": {
+ "description": "Image holds the details of an image to use during provisioning.",
"type": "object",
"required": [
- "spec"
+ "url",
+ "checksum"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "checksum": {
+ "description": "Checksum is a md5sum, sha256sum or sha512sum value or a URL to retrieve one.",
+ "type": "string",
+ "default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "checksumType": {
+ "description": "ChecksumType is the checksum algorithm for the image. e.g md5, sha256, sha512",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "spec": {
- "description": "spec defines specification the PodSecurityPolicySelfSubjectReview.",
- "default": {},
- "$ref": "#/definitions/io.openshift.security.v1.PodSecurityPolicySelfSubjectReviewSpec"
+ "format": {
+ "description": "DiskFormat contains the image disk format.",
+ "type": "string"
},
- "status": {
- "description": "status represents the current information/status for the PodSecurityPolicySelfSubjectReview.",
- "default": {},
- "$ref": "#/definitions/io.openshift.security.v1.PodSecurityPolicySubjectReviewStatus"
+ "url": {
+ "description": "URL is a location of an image to deploy.",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "PodSecurityPolicySelfSubjectReview",
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Image",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.PodSecurityPolicySelfSubjectReviewSpec": {
- "description": "PodSecurityPolicySelfSubjectReviewSpec contains specification for PodSecurityPolicySelfSubjectReview.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.MetaData": {
+ "description": "MetaData represents a keyand value of the metadata.",
"type": "object",
- "required": [
- "template"
- ],
"properties": {
- "template": {
- "description": "template is the PodTemplateSpec to check.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec"
+ "dnsServersFromIPPool": {
+ "description": "DNSServersFromPool is the list of metadata items to be rendered as dns servers.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.FromPool"
+ }
+ },
+ "fromAnnotations": {
+ "description": "FromAnnotations is the list of metadata items to be fetched from object Annotations",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.MetaDataFromAnnotation"
+ }
+ },
+ "fromHostInterfaces": {
+ "description": "FromHostInterfaces is the list of metadata items to be rendered as MAC addresses of the host interfaces.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.MetaDataHostInterface"
+ }
+ },
+ "fromLabels": {
+ "description": "FromLabels is the list of metadata items to be fetched from object labels",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.MetaDataFromLabel"
+ }
+ },
+ "gatewaysFromIPPool": {
+ "description": "GatewaysFromPool is the list of metadata items to be rendered as gateway addresses.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.FromPool"
+ }
+ },
+ "indexes": {
+ "description": "Indexes is the list of metadata items to be rendered from the index of the Metal3Data",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.MetaDataIndex"
+ }
+ },
+ "ipAddressesFromIPPool": {
+ "description": "IPAddressesFromPool is the list of metadata items to be rendered as ip addresses.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.FromPool"
+ }
+ },
+ "namespaces": {
+ "description": "Namespaces is the list of metadata items to be rendered from the namespace",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.MetaDataNamespace"
+ }
+ },
+ "objectNames": {
+ "description": "ObjectNames is the list of metadata items to be rendered from the name of objects.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.MetaDataObjectName"
+ }
+ },
+ "prefixesFromIPPool": {
+ "description": "PrefixesFromPool is the list of metadata items to be rendered as network prefixes.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.FromPool"
+ }
+ },
+ "strings": {
+ "description": "Strings is the list of metadata items to be rendered from strings",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.MetaDataString"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "PodSecurityPolicySelfSubjectReviewSpec",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "MetaData",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.PodSecurityPolicySubjectReview": {
- "description": "PodSecurityPolicySubjectReview checks whether a particular user/SA tuple can create the PodTemplateSpec.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.MetaDataFromAnnotation": {
+ "description": "MetaDataFromAnnotation contains the information to fetch an annotation content, if the label does not exist, it is rendered as empty string.",
"type": "object",
"required": [
- "spec"
+ "key",
+ "object",
+ "annotation"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "annotation": {
+ "description": "Annotation is the key of the Annotation to fetch",
+ "type": "string",
+ "default": ""
},
- "spec": {
- "description": "spec defines specification for the PodSecurityPolicySubjectReview.",
- "default": {},
- "$ref": "#/definitions/io.openshift.security.v1.PodSecurityPolicySubjectReviewSpec"
+ "key": {
+ "description": "Key will be used as the key to set in the metadata map for cloud-init",
+ "type": "string",
+ "default": ""
},
- "status": {
- "description": "status represents the current information/status for the PodSecurityPolicySubjectReview.",
- "default": {},
- "$ref": "#/definitions/io.openshift.security.v1.PodSecurityPolicySubjectReviewStatus"
+ "object": {
+ "description": "Object is the type of the object from which we retrieve the name",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "PodSecurityPolicySubjectReview",
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "MetaDataFromAnnotation",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.PodSecurityPolicySubjectReviewSpec": {
- "description": "PodSecurityPolicySubjectReviewSpec defines specification for PodSecurityPolicySubjectReview",
+ "io.x-k8s.cluster.infrastructure.v1beta1.MetaDataFromLabel": {
+ "description": "MetaDataFromLabel contains the information to fetch a label content, if the label does not exist, it is rendered as empty string.",
"type": "object",
"required": [
- "template"
+ "key",
+ "object",
+ "label"
],
"properties": {
- "groups": {
- "description": "groups is the groups you're testing for.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "key": {
+ "description": "Key will be used as the key to set in the metadata map for cloud-init",
+ "type": "string",
+ "default": ""
},
- "template": {
- "description": "template is the PodTemplateSpec to check. If template.spec.serviceAccountName is empty it will not be defaulted. If its non-empty, it will be checked.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec"
+ "label": {
+ "description": "Label is the key of the label to fetch",
+ "type": "string",
+ "default": ""
},
- "user": {
- "description": "user is the user you're testing for. If you specify \"user\" but not \"group\", then is it interpreted as \"What if user were not a member of any groups. If user and groups are empty, then the check is performed using *only* the serviceAccountName in the template.",
- "type": "string"
+ "object": {
+ "description": "Object is the type of the object from which we retrieve the name",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "PodSecurityPolicySubjectReviewSpec",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "MetaDataFromLabel",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.PodSecurityPolicySubjectReviewStatus": {
- "description": "PodSecurityPolicySubjectReviewStatus contains information/status for PodSecurityPolicySubjectReview.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.MetaDataHostInterface": {
+ "description": "MetaDataHostInterface contains the information to render the object name.",
"type": "object",
+ "required": [
+ "key",
+ "interface"
+ ],
"properties": {
- "allowedBy": {
- "description": "allowedBy is a reference to the rule that allows the PodTemplateSpec. A rule can be a SecurityContextConstraint or a PodSecurityPolicy A `nil`, indicates that it was denied.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "reason": {
- "description": "A machine-readable description of why this operation is in the \"Failure\" status. If this value is empty there is no information available.",
- "type": "string"
+ "interface": {
+ "description": "Interface is the name of the interface in the BareMetalHost Status Hardware Details list of interfaces from which to fetch the MAC address.",
+ "type": "string",
+ "default": ""
},
- "template": {
- "description": "template is the PodTemplateSpec after the defaulting is applied.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec"
+ "key": {
+ "description": "Key will be used as the key to set in the metadata map for cloud-init",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "PodSecurityPolicySubjectReviewStatus",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "MetaDataHostInterface",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.RangeAllocation": {
- "description": "RangeAllocation is used so we can easily expose a RangeAllocation typed for security group\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.MetaDataIPAddress": {
+ "description": "MetaDataIPAddress contains the info to render th ip address. It is IP-version agnostic.",
"type": "object",
"required": [
- "range",
- "data"
+ "key"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "end": {
+ "description": "End is the last IP address that can be rendered. It is used as a validation that the rendered IP is in bound.",
"type": "string"
},
- "data": {
- "description": "data is a byte array representing the serialized state of a range allocation. It is a bitmap with each bit set to one to represent a range is taken.",
+ "key": {
+ "description": "Key will be used as the key to set in the metadata map for cloud-init",
"type": "string",
- "format": "byte"
+ "default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "start": {
+ "description": "Start is the first ip address that can be rendered",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "step": {
+ "description": "Step is the step between the IP addresses rendered.",
+ "type": "integer",
+ "format": "int32"
},
- "range": {
- "description": "range is a string representing a unique label for a range of uids, \"1000000000-2000000000/10000\".",
- "type": "string",
- "default": ""
+ "subnet": {
+ "description": "Subnet is used to validate that the rendered IP is in bounds. In case the Start value is not given, it is derived from the subnet ip incremented by 1 (`192.168.0.1` for `192.168.0.0/24`)",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "RangeAllocation",
- "Scope": "Clustered"
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "MetaDataIPAddress",
+ "Scope": "Namespaced"
}
},
- "io.openshift.security.v1.RangeAllocationList": {
- "description": "RangeAllocationList is a list of RangeAllocations objects\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.MetaDataIndex": {
+ "description": "MetaDataIndex contains the information to render the index.",
"type": "object",
"required": [
- "items"
+ "key"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "key": {
+ "description": "Key will be used as the key to set in the metadata map for cloud-init",
+ "type": "string",
+ "default": ""
},
- "items": {
- "description": "List of RangeAllocations.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.security.v1.RangeAllocation"
- }
+ "offset": {
+ "description": "Offset is the offset to apply to the index when rendering it",
+ "type": "integer",
+ "format": "int32"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "prefix": {
+ "description": "Prefix is the prefix string",
"type": "string"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "step": {
+ "description": "Step is the multiplier of the index",
+ "type": "integer",
+ "format": "int32"
+ },
+ "suffix": {
+ "description": "Suffix is the suffix string",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "RangeAllocationList",
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "MetaDataIndex",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.RunAsUserStrategyOptions": {
- "description": "RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.MetaDataNamespace": {
+ "description": "MetaDataNamespace contains the information to render the namespace.",
"type": "object",
+ "required": [
+ "key"
+ ],
"properties": {
- "type": {
- "description": "Type is the strategy that will dictate what RunAsUser is used in the SecurityContext.",
- "type": "string"
- },
- "uid": {
- "description": "UID is the user id that containers must run as. Required for the MustRunAs strategy if not using namespace/service account allocated uids.",
- "type": "integer",
- "format": "int64"
- },
- "uidRangeMax": {
- "description": "UIDRangeMax defines the max value for a strategy that allocates by range.",
- "type": "integer",
- "format": "int64"
- },
- "uidRangeMin": {
- "description": "UIDRangeMin defines the min value for a strategy that allocates by range.",
- "type": "integer",
- "format": "int64"
+ "key": {
+ "description": "Key will be used as the key to set in the metadata map for cloud-init",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "RunAsUserStrategyOptions",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "MetaDataNamespace",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.SELinuxContextStrategyOptions": {
- "description": "SELinuxContextStrategyOptions defines the strategy type and any options used to create the strategy.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.MetaDataObjectName": {
+ "description": "MetaDataObjectName contains the information to render the object name.",
"type": "object",
+ "required": [
+ "key",
+ "object"
+ ],
"properties": {
- "seLinuxOptions": {
- "description": "seLinuxOptions required to run as; required for MustRunAs",
- "$ref": "#/definitions/io.k8s.api.core.v1.SELinuxOptions"
+ "key": {
+ "description": "Key will be used as the key to set in the metadata map for cloud-init",
+ "type": "string",
+ "default": ""
},
- "type": {
- "description": "Type is the strategy that will dictate what SELinux context is used in the SecurityContext.",
- "type": "string"
+ "object": {
+ "description": "Object is the type of the object from which we retrieve the name",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "SELinuxContextStrategyOptions",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "MetaDataObjectName",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.SecurityContextConstraints": {
- "description": "SecurityContextConstraints governs the ability to make requests that affect the SecurityContext that will be applied to a container. For historical reasons SCC was exposed under the core Kubernetes API group. That exposure is deprecated and will be removed in a future release - users should instead use the security.openshift.io group to manage SecurityContextConstraints.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.MetaDataString": {
+ "description": "MetaDataString contains the information to render the string.",
"type": "object",
"required": [
- "priority",
- "allowPrivilegedContainer",
- "defaultAddCapabilities",
- "requiredDropCapabilities",
- "allowedCapabilities",
- "allowHostDirVolumePlugin",
- "volumes",
- "allowHostNetwork",
- "allowHostPorts",
- "allowHostPID",
- "allowHostIPC",
- "readOnlyRootFilesystem"
+ "key",
+ "value"
],
"properties": {
- "allowHostDirVolumePlugin": {
- "description": "AllowHostDirVolumePlugin determines if the policy allow containers to use the HostDir volume plugin",
- "type": "boolean",
- "default": false
- },
- "allowHostIPC": {
- "description": "AllowHostIPC determines if the policy allows host ipc in the containers.",
- "type": "boolean",
- "default": false
- },
- "allowHostNetwork": {
- "description": "AllowHostNetwork determines if the policy allows the use of HostNetwork in the pod spec.",
- "type": "boolean",
- "default": false
- },
- "allowHostPID": {
- "description": "AllowHostPID determines if the policy allows host pid in the containers.",
- "type": "boolean",
- "default": false
- },
- "allowHostPorts": {
- "description": "AllowHostPorts determines if the policy allows host ports in the containers.",
- "type": "boolean",
- "default": false
- },
- "allowPrivilegeEscalation": {
- "description": "AllowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.",
- "type": "boolean"
- },
- "allowPrivilegedContainer": {
- "description": "AllowPrivilegedContainer determines if a container can request to be run as privileged.",
- "type": "boolean",
- "default": false
- },
- "allowedCapabilities": {
- "description": "AllowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field maybe added at the pod author's discretion. You must not list a capability in both AllowedCapabilities and RequiredDropCapabilities. To allow all capabilities you may use '*'.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "allowedFlexVolumes": {
- "description": "AllowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the \"Volumes\" field.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.security.v1.AllowedFlexVolume"
- },
- "x-kubernetes-list-type": "atomic"
- },
- "allowedUnsafeSysctls": {
- "description": "AllowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.\n\nExamples: e.g. \"foo/*\" allows \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" allows \"foo.bar\", \"foo.baz\", etc.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "defaultAddCapabilities": {
- "description": "DefaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capabiility in both DefaultAddCapabilities and RequiredDropCapabilities.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "defaultAllowPrivilegeEscalation": {
- "description": "DefaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.",
- "type": "boolean"
- },
- "forbiddenSysctls": {
- "description": "ForbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.\n\nExamples: e.g. \"foo/*\" forbids \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" forbids \"foo.bar\", \"foo.baz\", etc.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "fsGroup": {
- "description": "FSGroup is the strategy that will dictate what fs group is used by the SecurityContext.",
- "default": {},
- "$ref": "#/definitions/io.openshift.security.v1.FSGroupStrategyOptions"
+ "key": {
+ "description": "Key will be used as the key to set in the metadata map for cloud-init",
+ "type": "string",
+ "default": ""
},
- "groups": {
- "description": "The groups that have permission to use this security context constraints",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "value": {
+ "description": "Value is the string to render.",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "MetaDataString",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3Cluster": {
+ "description": "Metal3Cluster is the Schema for the metal3clusters API.",
+ "type": "object",
+ "properties": {
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "priority": {
- "description": "Priority influences the sort order of SCCs when evaluating which SCCs to try first for a given pod request based on access in the Users and Groups fields. The higher the int, the higher priority. An unset value is considered a 0 priority. If scores for multiple SCCs are equal they will be sorted from most restrictive to least restrictive. If both priorities and restrictions are equal the SCCs will be sorted by name.",
- "type": "integer",
- "format": "int32"
- },
- "readOnlyRootFilesystem": {
- "description": "ReadOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the SCC should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.",
- "type": "boolean",
- "default": false
- },
- "requiredDropCapabilities": {
- "description": "RequiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "runAsUser": {
- "description": "RunAsUser is the strategy that will dictate what RunAsUser is used in the SecurityContext.",
- "default": {},
- "$ref": "#/definitions/io.openshift.security.v1.RunAsUserStrategyOptions"
- },
- "seLinuxContext": {
- "description": "SELinuxContext is the strategy that will dictate what labels will be set in the SecurityContext.",
+ "spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.security.v1.SELinuxContextStrategyOptions"
- },
- "seccompProfiles": {
- "description": "SeccompProfiles lists the allowed profiles that may be set for the pod or container's seccomp annotations. An unset (nil) or empty value means that no profiles may be specifid by the pod or container.\tThe wildcard '*' may be used to allow all profiles. When used to generate a value for a pod the first non-wildcard profile will be used as the default.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3ClusterSpec"
},
- "supplementalGroups": {
- "description": "SupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.",
+ "status": {
"default": {},
- "$ref": "#/definitions/io.openshift.security.v1.SupplementalGroupsStrategyOptions"
- },
- "userNamespaceLevel": {
- "description": "userNamespaceLevel determines if the policy allows host users in containers. Valid values are \"AllowHostLevel\", \"RequirePodLevel\", and omitted. When \"AllowHostLevel\" is set, a pod author may set `hostUsers` to either `true` or `false`. When \"RequirePodLevel\" is set, a pod author must set `hostUsers` to `false`. When omitted, the default value is \"AllowHostLevel\".",
- "type": "string",
- "default": "AllowHostLevel"
- },
- "users": {
- "description": "The users who have permissions to use this security context constraints",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
- },
- "volumes": {
- "description": "Volumes is a white list of allowed volume plugins. FSType corresponds directly with the field names of a VolumeSource (azureFile, configMap, emptyDir). To allow all volumes you may use \"*\". To allow no volumes, set to [\"none\"].",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3ClusterStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "SecurityContextConstraints",
- "Scope": "Clustered"
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3Cluster",
+ "Scope": "Namespaced"
}
},
- "io.openshift.security.v1.SecurityContextConstraintsList": {
- "description": "SecurityContextConstraintsList is a list of SecurityContextConstraints objects\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3ClusterList": {
+ "description": "Metal3ClusterList contains a list of Metal3Cluster.",
"type": "object",
"required": [
"items"
@@ -111609,11 +116399,10 @@
"type": "string"
},
"items": {
- "description": "List of security context constraints.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.security.v1.SecurityContextConstraints"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3Cluster"
}
},
"kind": {
@@ -111621,81 +116410,80 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "SecurityContextConstraintsList",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3ClusterList",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.ServiceAccountPodSecurityPolicyReviewStatus": {
- "description": "ServiceAccountPodSecurityPolicyReviewStatus represents ServiceAccount name and related review status",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3ClusterSpec": {
+ "description": "Metal3ClusterSpec defines the desired state of Metal3Cluster.",
"type": "object",
- "required": [
- "name"
- ],
"properties": {
- "allowedBy": {
- "description": "allowedBy is a reference to the rule that allows the PodTemplateSpec. A rule can be a SecurityContextConstraint or a PodSecurityPolicy A `nil`, indicates that it was denied.",
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "name": {
- "description": "name contains the allowed and the denied ServiceAccount name",
- "type": "string",
- "default": ""
- },
- "reason": {
- "description": "A machine-readable description of why this operation is in the \"Failure\" status. If this value is empty there is no information available.",
- "type": "string"
- },
- "template": {
- "description": "template is the PodTemplateSpec after the defaulting is applied.",
+ "controlPlaneEndpoint": {
+ "description": "ControlPlaneEndpoint represents the endpoint used to communicate with the control plane.",
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.APIEndpoint"
+ },
+ "noCloudProvider": {
+ "description": "Determines if the cluster is not to be deployed with an external cloud provider. If set to true, CAPM3 will use node labels to set providerID on the kubernetes nodes. If set to false, providerID is set on nodes by other entities and CAPM3 uses the value of the providerID on the m3m resource.",
+ "type": "boolean"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "ServiceAccountPodSecurityPolicyReviewStatus",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3ClusterSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.security.v1.SupplementalGroupsStrategyOptions": {
- "description": "SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3ClusterStatus": {
+ "description": "Metal3ClusterStatus defines the observed state of Metal3Cluster.",
"type": "object",
"properties": {
- "ranges": {
- "description": "Ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end.",
+ "conditions": {
+ "description": "Conditions defines current service state of the Metal3Cluster.",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.security.v1.IDRange"
- },
- "x-kubernetes-list-type": "atomic"
+ "$ref": "#/definitions/io.k8s.sigs.cluster-api.api.v1beta1.Condition"
+ }
},
- "type": {
- "description": "Type is the strategy that will dictate what supplemental groups is used in the SecurityContext.",
+ "failureMessage": {
+ "description": "FailureMessage indicates that there is a fatal problem reconciling the state, and will be set to a descriptive error message.",
+ "type": "string"
+ },
+ "failureReason": {
+ "description": "FailureReason indicates that there is a fatal problem reconciling the state, and will be set to a token value suitable for programmatic interpretation.",
"type": "string"
+ },
+ "lastUpdated": {
+ "description": "LastUpdated identifies when this status was last observed.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "ready": {
+ "description": "Ready denotes that the Metal3 cluster (infrastructure) is ready. In Baremetal case, it does not mean anything for now as no infrastructure steps need to be performed. Required by Cluster API. Set to True by the metal3Cluster controller after creation.",
+ "type": "boolean",
+ "default": false
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "security.openshift.io",
- "Version": "v1",
- "Kind": "SupplementalGroupsStrategyOptions",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3ClusterStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.sharedresource.v1alpha1.SharedConfigMap": {
- "description": "SharedConfigMap allows a ConfigMap to be shared across namespaces. Pods can mount the shared ConfigMap by adding a CSI volume to the pod specification using the \"csi.sharedresource.openshift.io\" CSI driver and a reference to the SharedConfigMap in the volume attributes:\n\nspec:\n volumes:\n - name: shared-configmap\n csi:\n driver: csi.sharedresource.openshift.io\n volumeAttributes:\n sharedConfigMap: my-share\n\nFor the mount to be successful, the pod's service account must be granted permission to 'use' the named SharedConfigMap object within its namespace with an appropriate Role and RoleBinding. For compactness, here are example `oc` invocations for creating such Role and RoleBinding objects.\n\n `oc create role shared-resource-my-share --verb=use --resource=sharedconfigmaps.sharedresource.openshift.io --resource-name=my-share`\n `oc create rolebinding shared-resource-my-share --role=shared-resource-my-share --serviceaccount=my-namespace:default`\n\nShared resource objects, in this case ConfigMaps, have default permissions of list, get, and watch for system authenticated users.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3ClusterTemplate": {
+ "description": "Metal3ClusterTemplate is the Schema for the metal3clustertemplates API.",
"type": "object",
"properties": {
"apiVersion": {
@@ -111707,31 +116495,24 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec is the specification of the desired shared configmap",
- "default": {},
- "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedConfigMapSpec"
- },
- "status": {
- "description": "status is the observed status of the shared configmap",
"default": {},
- "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedConfigMapStatus"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3ClusterTemplateSpec"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "sharedresource.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SharedConfigMap",
- "Scope": "Clustered"
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3ClusterTemplate",
+ "Scope": "Namespaced"
}
},
- "io.openshift.sharedresource.v1alpha1.SharedConfigMapList": {
- "description": "SharedConfigMapList contains a list of SharedConfigMap objects.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3ClusterTemplateList": {
+ "description": "Metal3ClusterTemplateList contains a list of Metal3ClusterTemplate.",
"type": "object",
"required": [
"items"
@@ -111745,7 +116526,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedConfigMap"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3ClusterTemplate"
}
},
"kind": {
@@ -111753,96 +116534,93 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "sharedresource.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SharedConfigMapList",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3ClusterTemplateList",
"Scope": "Namespaced"
}
},
- "io.openshift.sharedresource.v1alpha1.SharedConfigMapReference": {
- "description": "SharedConfigMapReference contains information about which ConfigMap to share",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3ClusterTemplateResource": {
+ "description": "Metal3ClusterTemplateResource describes the data for creating a Metal3Cluster from a template.",
"type": "object",
"required": [
- "name",
- "namespace"
+ "spec"
],
"properties": {
- "name": {
- "description": "name represents the name of the ConfigMap that is being referenced.",
- "type": "string",
- "default": ""
- },
- "namespace": {
- "description": "namespace represents the namespace where the referenced ConfigMap is located.",
- "type": "string",
- "default": ""
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3ClusterSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "sharedresource.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SharedConfigMapReference",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3ClusterTemplateResource",
"Scope": "Namespaced"
}
},
- "io.openshift.sharedresource.v1alpha1.SharedConfigMapSpec": {
- "description": "SharedConfigMapSpec defines the desired state of a SharedConfigMap",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3ClusterTemplateSpec": {
+ "description": "Metal3ClusterTemplateSpec defines the desired state of Metal3ClusterTemplate.",
"type": "object",
"required": [
- "configMapRef"
+ "template"
],
"properties": {
- "configMapRef": {
- "description": "configMapRef is a reference to the ConfigMap to share",
+ "template": {
"default": {},
- "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedConfigMapReference"
- },
- "description": {
- "description": "description is a user readable explanation of what the backing resource provides.",
- "type": "string"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3ClusterTemplateResource"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "sharedresource.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SharedConfigMapSpec",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3ClusterTemplateSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.sharedresource.v1alpha1.SharedConfigMapStatus": {
- "description": "SharedSecretStatus contains the observed status of the shared resource",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3Data": {
+ "description": "Metal3Data is the Schema for the metal3datas API.",
"type": "object",
"properties": {
- "conditions": {
- "description": "conditions represents any observations made on this particular shared resource by the underlying CSI driver or Share controller.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataStatus"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "sharedresource.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SharedConfigMapStatus",
+ "Type": "object",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3Data",
"Scope": "Namespaced"
}
},
- "io.openshift.sharedresource.v1alpha1.SharedSecret": {
- "description": "SharedSecret allows a Secret to be shared across namespaces. Pods can mount the shared Secret by adding a CSI volume to the pod specification using the \"csi.sharedresource.openshift.io\" CSI driver and a reference to the SharedSecret in the volume attributes:\n\nspec:\n volumes:\n - name: shared-secret\n csi:\n driver: csi.sharedresource.openshift.io\n volumeAttributes:\n sharedSecret: my-share\n\nFor the mount to be successful, the pod's service account must be granted permission to 'use' the named SharedSecret object within its namespace with an appropriate Role and RoleBinding. For compactness, here are example `oc` invocations for creating such Role and RoleBinding objects.\n\n `oc create role shared-resource-my-share --verb=use --resource=sharedsecrets.sharedresource.openshift.io --resource-name=my-share`\n `oc create rolebinding shared-resource-my-share --role=shared-resource-my-share --serviceaccount=my-namespace:default`\n\nShared resource objects, in this case Secrets, have default permissions of list, get, and watch for system authenticated users.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataClaim": {
+ "description": "Metal3DataClaim is the Schema for the metal3datas API.",
"type": "object",
"properties": {
"apiVersion": {
@@ -111854,31 +116632,28 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec is the specification of the desired shared secret",
"default": {},
- "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedSecretSpec"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataClaimSpec"
},
"status": {
- "description": "status is the observed status of the shared secret",
"default": {},
- "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedSecretStatus"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataClaimStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "sharedresource.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SharedSecret",
- "Scope": "Clustered"
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3DataClaim",
+ "Scope": "Namespaced"
}
},
- "io.openshift.sharedresource.v1alpha1.SharedSecretList": {
- "description": "SharedSecretList contains a list of SharedSecret objects.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataClaimList": {
+ "description": "Metal3DataClaimList contains a list of Metal3DataClaim.",
"type": "object",
"required": [
"items"
@@ -111892,7 +116667,7 @@
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedSecret"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataClaim"
}
},
"kind": {
@@ -111900,100 +116675,164 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "sharedresource.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SharedSecretList",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3DataClaimList",
"Scope": "Namespaced"
}
},
- "io.openshift.sharedresource.v1alpha1.SharedSecretReference": {
- "description": "SharedSecretReference contains information about which Secret to share",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataClaimSpec": {
+ "description": "Metal3DataClaimSpec defines the desired state of Metal3DataClaim.",
"type": "object",
"required": [
- "name",
- "namespace"
+ "template"
],
"properties": {
- "name": {
- "description": "name represents the name of the Secret that is being referenced.",
- "type": "string",
- "default": ""
- },
- "namespace": {
- "description": "namespace represents the namespace where the referenced Secret is located.",
- "type": "string",
- "default": ""
+ "template": {
+ "description": "Template is the Metal3DataTemplate this was generated for.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "sharedresource.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SharedSecretReference",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3DataClaimSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.sharedresource.v1alpha1.SharedSecretSpec": {
- "description": "SharedSecretSpec defines the desired state of a SharedSecret",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataClaimStatus": {
+ "description": "Metal3DataClaimStatus defines the observed state of Metal3DataClaim.",
"type": "object",
- "required": [
- "secretRef"
- ],
"properties": {
- "description": {
- "description": "description is a user readable explanation of what the backing resource provides.",
+ "errorMessage": {
+ "description": "ErrorMessage contains the error message",
"type": "string"
},
- "secretRef": {
- "description": "secretRef is a reference to the Secret to share",
- "default": {},
- "$ref": "#/definitions/io.openshift.sharedresource.v1alpha1.SharedSecretReference"
+ "renderedData": {
+ "description": "RenderedData references the Metal3Data when ready",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "sharedresource.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SharedSecretSpec",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3DataClaimStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.sharedresource.v1alpha1.SharedSecretStatus": {
- "description": "SharedSecretStatus contains the observed status of the shared resource",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataList": {
+ "description": "Metal3DataList contains a list of Metal3Data.",
"type": "object",
+ "required": [
+ "items"
+ ],
"properties": {
- "conditions": {
- "description": "conditions represents any observations made on this particular shared resource by the underlying CSI driver or Share controller.",
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
+ },
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition"
- },
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3Data"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "sharedresource.openshift.io",
- "Version": "v1alpha1",
- "Kind": "SharedSecretStatus",
+ "Type": "list",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3DataList",
"Scope": "Namespaced"
}
},
- "io.openshift.template.v1.BrokerTemplateInstance": {
- "description": "BrokerTemplateInstance holds the service broker-related state associated with a TemplateInstance. BrokerTemplateInstance is part of an experimental API.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataSpec": {
+ "description": "Metal3DataSpec defines the desired state of Metal3Data.",
"type": "object",
"required": [
- "spec"
+ "claim",
+ "template"
],
+ "properties": {
+ "claim": {
+ "description": "DataClaim points to the Metal3DataClaim the Metal3Data was created for.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "index": {
+ "description": "Index stores the index value of this instance in the Metal3DataTemplate.",
+ "type": "integer",
+ "format": "int32"
+ },
+ "metaData": {
+ "description": "MetaData points to the rendered MetaData secret.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
+ },
+ "networkData": {
+ "description": "NetworkData points to the rendered NetworkData secret.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
+ },
+ "template": {
+ "description": "DataTemplate is the Metal3DataTemplate this was generated from.",
+ "default": {},
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "templateReference": {
+ "description": "TemplateReference refers to the Template the Metal3MachineTemplate refers to. It can be matched against the key or it may also point to the name of the template Metal3Data refers to",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3DataSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataStatus": {
+ "description": "Metal3DataStatus defines the observed state of Metal3Data.",
+ "type": "object",
+ "properties": {
+ "errorMessage": {
+ "description": "ErrorMessage contains the error message",
+ "type": "string"
+ },
+ "ready": {
+ "description": "Ready is a flag set to True if the secrets were rendered properly",
+ "type": "boolean",
+ "default": false
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3DataStatus",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataTemplate": {
+ "description": "Metal3DataTemplate is the Schema for the metal3datatemplates API.",
+ "type": "object",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -112004,26 +116843,28 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec describes the state of this BrokerTemplateInstance.",
"default": {},
- "$ref": "#/definitions/io.openshift.template.v1.BrokerTemplateInstanceSpec"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataTemplateSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataTemplateStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "template.openshift.io",
- "Version": "v1",
- "Kind": "BrokerTemplateInstance",
- "Scope": "Clustered"
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3DataTemplate",
+ "Scope": "Namespaced"
}
},
- "io.openshift.template.v1.BrokerTemplateInstanceList": {
- "description": "BrokerTemplateInstanceList is a list of BrokerTemplateInstance objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataTemplateList": {
+ "description": "Metal3DataTemplateList contains a list of Metal3DataTemplate.",
"type": "object",
"required": [
"items"
@@ -112034,11 +116875,10 @@
"type": "string"
},
"items": {
- "description": "items is a list of BrokerTemplateInstances",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.template.v1.BrokerTemplateInstance"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataTemplate"
}
},
"kind": {
@@ -112046,161 +116886,80 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "template.openshift.io",
- "Version": "v1",
- "Kind": "BrokerTemplateInstanceList",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.template.v1.BrokerTemplateInstanceSpec": {
- "description": "BrokerTemplateInstanceSpec describes the state of a BrokerTemplateInstance.",
- "type": "object",
- "required": [
- "templateInstance",
- "secret"
- ],
- "properties": {
- "bindingIDs": {
- "description": "bindingids is a list of 'binding_id's provided during successive bind calls to the template service broker.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
- },
- "secret": {
- "description": "secret is a reference to a Secret object residing in a namespace, containing the necessary template parameters.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- },
- "templateInstance": {
- "description": "templateinstance is a reference to a TemplateInstance object residing in a namespace.",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "template.openshift.io",
- "Version": "v1",
- "Kind": "BrokerTemplateInstanceSpec",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3DataTemplateList",
"Scope": "Namespaced"
}
},
- "io.openshift.template.v1.Parameter": {
- "description": "Parameter defines a name/value variable that is to be processed during the Template to Config transformation.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataTemplateSpec": {
+ "description": "Metal3DataTemplateSpec defines the desired state of Metal3DataTemplate.",
"type": "object",
"required": [
- "name"
+ "clusterName"
],
"properties": {
- "description": {
- "description": "Description of a parameter. Optional.",
- "type": "string"
- },
- "displayName": {
- "description": "Optional: The name that will show in UI instead of parameter 'Name'",
- "type": "string"
- },
- "from": {
- "description": "From is an input value for the generator. Optional.",
- "type": "string"
- },
- "generate": {
- "description": "generate specifies the generator to be used to generate random string from an input value specified by From field. The result string is stored into Value field. If empty, no generator is being used, leaving the result Value untouched. Optional.\n\nThe only supported generator is \"expression\", which accepts a \"from\" value in the form of a simple regular expression containing the range expression \"[a-zA-Z0-9]\", and the length expression \"a{length}\".\n\nExamples:\n\nfrom | value ----------------------------- \"test[0-9]{1}x\" | \"test7x\" \"[0-1]{8}\" | \"01001100\" \"0x[A-F0-9]{4}\" | \"0xB3AF\" \"[a-zA-Z0-9]{8}\" | \"hW4yQU5i\"",
- "type": "string"
- },
- "name": {
- "description": "Name must be set and it can be referenced in Template Items using ${PARAMETER_NAME}. Required.",
+ "clusterName": {
+ "description": "ClusterName is the name of the Cluster this object belongs to.",
"type": "string",
"default": ""
},
- "required": {
- "description": "Optional: Indicates the parameter must have a value. Defaults to false.",
- "type": "boolean"
+ "metaData": {
+ "description": "MetaData contains the information needed to generate the metadata secret",
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.MetaData"
},
- "value": {
- "description": "Value holds the Parameter data. If specified, the generator will be ignored. The value replaces all occurrences of the Parameter ${Name} expression during the Template to Config transformation. Optional.",
+ "networkData": {
+ "description": "NetworkData contains the information needed to generate the networkdata secret",
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkData"
+ },
+ "templateReference": {
+ "description": "TemplateReference refers to the Template the Metal3MachineTemplate refers to. It can be matched against the key or it may also point to the name of the template Metal3Data refers to",
"type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "template.openshift.io",
- "Version": "v1",
- "Kind": "Parameter",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3DataTemplateSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.template.v1.Template": {
- "description": "Template contains the inputs needed to produce a Config.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3DataTemplateStatus": {
+ "description": "Metal3DataTemplateStatus defines the observed state of Metal3DataTemplate.",
"type": "object",
- "required": [
- "objects"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "labels": {
- "description": "labels is a optional set of labels that are applied to every object during the Template to Config transformation.",
+ "indexes": {
+ "description": "Indexes contains the map of Metal3Machine and index used",
"type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "message": {
- "description": "message is an optional instructional message that will be displayed when this template is instantiated. This field should inform the user how to utilize the newly created resources. Parameter substitution will be performed on the message before being displayed so that generated credentials and other parameters can be included in the output.",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
- },
- "objects": {
- "description": "objects is an array of resources to include in this template. If a namespace value is hardcoded in the object, it will be removed during template instantiation, however if the namespace value is, or contains, a ${PARAMETER_REFERENCE}, the resolved value after parameter substitution will be respected and the object will be created in that namespace.",
- "type": "array",
- "items": {
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"
+ "additionalProperties": {
+ "type": "integer",
+ "format": "int32",
+ "default": 0
}
},
- "parameters": {
- "description": "parameters is an optional array of Parameters used during the Template to Config transformation.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.template.v1.Parameter"
- }
+ "lastUpdated": {
+ "description": "LastUpdated identifies when this status was last observed.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "template.openshift.io",
- "Version": "v1",
- "Kind": "Template",
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3DataTemplateStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.template.v1.TemplateInstance": {
- "description": "TemplateInstance requests and records the instantiation of a Template. TemplateInstance is part of an experimental API.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3Machine": {
+ "description": "Metal3Machine is the Schema for the metal3machines API.",
"type": "object",
- "required": [
- "spec"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -112211,75 +116970,28 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
"spec": {
- "description": "spec describes the desired state of this TemplateInstance.",
"default": {},
- "$ref": "#/definitions/io.openshift.template.v1.TemplateInstanceSpec"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3MachineSpec"
},
"status": {
- "description": "status describes the current state of this TemplateInstance.",
"default": {},
- "$ref": "#/definitions/io.openshift.template.v1.TemplateInstanceStatus"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3MachineStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "template.openshift.io",
- "Version": "v1",
- "Kind": "TemplateInstance",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.template.v1.TemplateInstanceCondition": {
- "description": "TemplateInstanceCondition contains condition information for a TemplateInstance.",
- "type": "object",
- "required": [
- "type",
- "status",
- "lastTransitionTime",
- "reason",
- "message"
- ],
- "properties": {
- "lastTransitionTime": {
- "description": "LastTransitionTime is the last time a condition status transitioned from one state to another.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "Message is a human readable description of the details of the last transition, complementing reason.",
- "type": "string",
- "default": ""
- },
- "reason": {
- "description": "Reason is a brief machine readable explanation for the condition's last transition.",
- "type": "string",
- "default": ""
- },
- "status": {
- "description": "Status of the condition, one of True, False or Unknown.",
- "type": "string",
- "default": ""
- },
- "type": {
- "description": "Type of the condition, currently Ready or InstantiateFailure.",
- "type": "string",
- "default": ""
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "template.openshift.io",
- "Version": "v1",
- "Kind": "TemplateInstanceCondition",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3Machine",
"Scope": "Namespaced"
}
},
- "io.openshift.template.v1.TemplateInstanceList": {
- "description": "TemplateInstanceList is a list of TemplateInstance objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3MachineList": {
+ "description": "Metal3MachineList contains a list of Metal3Machine.",
"type": "object",
"required": [
"items"
@@ -112290,11 +117002,10 @@
"type": "string"
},
"items": {
- "description": "items is a list of Templateinstances",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.template.v1.TemplateInstance"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3Machine"
}
},
"kind": {
@@ -112302,137 +117013,166 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "template.openshift.io",
- "Version": "v1",
- "Kind": "TemplateInstanceList",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3MachineList",
"Scope": "Namespaced"
}
},
- "io.openshift.template.v1.TemplateInstanceObject": {
- "description": "TemplateInstanceObject references an object created by a TemplateInstance.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3MachineSpec": {
+ "description": "Metal3MachineSpec defines the desired state of Metal3Machine.",
"type": "object",
"properties": {
- "ref": {
- "description": "ref is a reference to the created object. When used under .spec, only name and namespace are used; these can contain references to parameters which will be substituted following the usual rules.",
- "default": {},
+ "automatedCleaningMode": {
+ "description": "When set to disabled, automated cleaning of host disks will be skipped during provisioning and deprovisioning.",
+ "type": "string"
+ },
+ "customDeploy": {
+ "description": "A custom deploy procedure.",
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.CustomDeploy"
+ },
+ "dataTemplate": {
+ "description": "MetadataTemplate is a reference to a Metal3DataTemplate object containing a template of metadata to be rendered. Metadata keys defined in the metadataTemplate take precedence over keys defined in metadata field.",
"$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "hostSelector": {
+ "description": "HostSelector specifies matching criteria for labels on BareMetalHosts. This is used to limit the set of BareMetalHost objects considered for claiming for a metal3machine.",
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.HostSelector"
+ },
+ "image": {
+ "description": "Image is the image to be provisioned.",
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Image"
+ },
+ "metaData": {
+ "description": "MetaData is an object storing the reference to the secret containing the Metadata given by the user.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
+ },
+ "networkData": {
+ "description": "NetworkData is an object storing the reference to the secret containing the network data given by the user.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
+ },
+ "providerID": {
+ "description": "ProviderID will be the Metal3 machine in ProviderID format (metal3://\u003cbmh-uuid\u003e)",
+ "type": "string"
+ },
+ "userData": {
+ "description": "UserData references the Secret that holds user data needed by the bare metal operator. The Namespace is optional; it will default to the metal3machine's namespace if not specified.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "template.openshift.io",
- "Version": "v1",
- "Kind": "TemplateInstanceObject",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3MachineSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.template.v1.TemplateInstanceRequester": {
- "description": "TemplateInstanceRequester holds the identity of an agent requesting a template instantiation.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3MachineStatus": {
+ "description": "Metal3MachineStatus defines the observed state of Metal3Machine.",
"type": "object",
"properties": {
- "extra": {
- "description": "extra holds additional information provided by the authenticator.",
- "type": "object",
- "additionalProperties": {
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "addresses": {
+ "description": "Addresses is a list of addresses assigned to the machine. This field is copied from the infrastructure provider reference.",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.sigs.cluster-api.api.v1beta1.MachineAddress"
}
},
- "groups": {
- "description": "groups represent the groups this user is a part of.",
+ "conditions": {
+ "description": "Conditions defines current service state of the Metal3Machine.",
"type": "array",
"items": {
- "type": "string",
- "default": ""
+ "default": {},
+ "$ref": "#/definitions/io.k8s.sigs.cluster-api.api.v1beta1.Condition"
}
},
- "uid": {
- "description": "uid is a unique value that identifies this user across time; if this user is deleted and another user by the same name is added, they will have different UIDs.",
+ "failureMessage": {
+ "description": "FailureMessage will be set in the event that there is a terminal problem reconciling the metal3machine and will contain a more verbose string suitable for logging and human consumption.\n\nThis field should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the metal3machine's spec or the configuration of the controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the controller, or the responsible controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of metal3machines can be added as events to the metal3machine object and/or logged in the controller's output.",
"type": "string"
},
- "username": {
- "description": "username uniquely identifies this user among all active users.",
+ "failureReason": {
+ "description": "FailureReason will be set in the event that there is a terminal problem reconciling the metal3machine and will contain a succinct value suitable for machine interpretation.\n\nThis field should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the metal3machine's spec or the configuration of the controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the controller, or the responsible controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of metal3machines can be added as events to the metal3machine object and/or logged in the controller's output.",
+ "type": "string"
+ },
+ "lastUpdated": {
+ "description": "LastUpdated identifies when this status was last observed.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
+ },
+ "metaData": {
+ "description": "MetaData is an object storing the reference to the secret containing the Metadata used to deploy the BareMetalHost.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
+ },
+ "networkData": {
+ "description": "NetworkData is an object storing the reference to the secret containing the network data used to deploy the BareMetalHost.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
+ },
+ "phase": {
+ "description": "Phase represents the current phase of machine actuation. E.g. Pending, Running, Terminating, Failed etc.",
"type": "string"
+ },
+ "ready": {
+ "description": "Ready is the state of the metal3. mhrivnak: \" it would be good to document what this means, how to interpret it, under what circumstances the value changes, etc.\"",
+ "type": "boolean",
+ "default": false
+ },
+ "renderedData": {
+ "description": "RenderedData is a reference to a rendered Metal3Data object containing the references to metaData and networkData secrets.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ },
+ "userData": {
+ "description": "UserData references the Secret that holds user data needed by the bare metal operator. The Namespace is optional; it will default to the metal3machine's namespace if not specified.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "template.openshift.io",
- "Version": "v1",
- "Kind": "TemplateInstanceRequester",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3MachineStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.template.v1.TemplateInstanceSpec": {
- "description": "TemplateInstanceSpec describes the desired state of a TemplateInstance.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3MachineTemplate": {
+ "description": "Metal3MachineTemplate is the Schema for the metal3machinetemplates API.",
"type": "object",
- "required": [
- "template"
- ],
"properties": {
- "requester": {
- "description": "requester holds the identity of the agent requesting the template instantiation.",
- "$ref": "#/definitions/io.openshift.template.v1.TemplateInstanceRequester"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "secret": {
- "description": "secret is a reference to a Secret object containing the necessary template parameters.",
- "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference"
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
},
- "template": {
- "description": "template is a full copy of the template for instantiation.",
+ "metadata": {
"default": {},
- "$ref": "#/definitions/io.openshift.template.v1.Template"
- }
- },
- "x-fabric8-info": {
- "Type": "nested",
- "Group": "template.openshift.io",
- "Version": "v1",
- "Kind": "TemplateInstanceSpec",
- "Scope": "Namespaced"
- }
- },
- "io.openshift.template.v1.TemplateInstanceStatus": {
- "description": "TemplateInstanceStatus describes the current state of a TemplateInstance.",
- "type": "object",
- "properties": {
- "conditions": {
- "description": "conditions represent the latest available observations of a TemplateInstance's current state.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.template.v1.TemplateInstanceCondition"
- }
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
},
- "objects": {
- "description": "Objects references the objects created by the TemplateInstance.",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.template.v1.TemplateInstanceObject"
- }
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3MachineTemplateSpec"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "template.openshift.io",
- "Version": "v1",
- "Kind": "TemplateInstanceStatus",
+ "Type": "object",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3MachineTemplate",
"Scope": "Namespaced"
}
},
- "io.openshift.template.v1.TemplateList": {
- "description": "TemplateList is a list of Template objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3MachineTemplateList": {
+ "description": "Metal3MachineTemplateList contains a list of Metal3MachineTemplate.",
"type": "object",
"required": [
"items"
@@ -112443,11 +117183,10 @@
"type": "string"
},
"items": {
- "description": "Items is a list of templates",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.template.v1.Template"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3MachineTemplate"
}
},
"kind": {
@@ -112455,46 +117194,66 @@
"type": "string"
},
"metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
"default": {},
"$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
"Type": "list",
- "Group": "template.openshift.io",
- "Version": "v1",
- "Kind": "TemplateList",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3MachineTemplateList",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.OperandConfig": {
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3MachineTemplateResource": {
+ "description": "Metal3MachineTemplateResource describes the data needed to create a Metal3Machine from a template.",
"type": "object",
+ "required": [
+ "spec"
+ ],
"properties": {
- "debug": {
- "description": "turn debugging on/off for the TuneD daemon: true/false (default is false)",
- "type": "boolean"
- },
- "tunedConfig": {
+ "spec": {
+ "description": "Spec is the specification of the desired behavior of the machine.",
"default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.TuneDConfig"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3MachineSpec"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3MachineTemplateResource",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3MachineTemplateSpec": {
+ "description": "Metal3MachineTemplateSpec defines the desired state of Metal3MachineTemplate.",
+ "type": "object",
+ "required": [
+ "template"
+ ],
+ "properties": {
+ "nodeReuse": {
+ "description": "When set to True, CAPM3 Machine controller will pick the same pool of BMHs' that were released during the upgrade operation.",
+ "type": "boolean",
+ "default": false
},
- "verbosity": {
- "description": "klog logging verbosity",
- "type": "integer",
- "format": "int32"
+ "template": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3MachineTemplateResource"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "OperandConfig",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3MachineTemplateSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.Profile": {
- "description": "Profile is a specification for a Profile resource.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3Remediation": {
+ "description": "Metal3Remediation is the Schema for the metal3remediations API.",
"type": "object",
"properties": {
"apiVersion": {
@@ -112511,714 +117270,902 @@
},
"spec": {
"default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.ProfileSpec"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationSpec"
},
"status": {
"default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.ProfileStatus"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationStatus"
}
},
"x-fabric8-info": {
"Type": "object",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "Profile",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3Remediation",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.ProfileConfig": {
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationList": {
+ "description": "Metal3RemediationList contains a list of Metal3Remediation.",
"type": "object",
"required": [
- "tunedProfile"
+ "items"
],
"properties": {
- "debug": {
- "description": "option to debug TuneD daemon execution",
- "type": "boolean",
- "default": false
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "providerName": {
- "description": "Name of the cloud provider as taken from the Node providerID: \u003cProviderName\u003e://\u003cProviderSpecificNodeID\u003e",
+ "items": {
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3Remediation"
+ }
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
- "tunedConfig": {
+ "metadata": {
"default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.TuneDConfig"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "list",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3RemediationList",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationSpec": {
+ "description": "Metal3RemediationSpec defines the desired state of Metal3Remediation.",
+ "type": "object",
+ "properties": {
+ "strategy": {
+ "description": "Strategy field defines remediation strategy.",
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.RemediationStrategy"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3RemediationSpec",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationStatus": {
+ "description": "Metal3RemediationStatus defines the observed state of Metal3Remediation.",
+ "type": "object",
+ "properties": {
+ "lastRemediated": {
+ "description": "LastRemediated identifies when the host was last remediated",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
},
- "tunedProfile": {
- "description": "TuneD profile to apply",
- "type": "string",
- "default": ""
+ "phase": {
+ "description": "Phase represents the current phase of machine remediation. E.g. Pending, Running, Done etc.",
+ "type": "string"
},
- "verbosity": {
- "description": "klog logging verbosity",
+ "retryCount": {
+ "description": "RetryCount can be used as a counter during the remediation. Field can hold number of reboots etc.",
"type": "integer",
- "format": "int32",
- "default": 0
+ "format": "int32"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "ProfileConfig",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3RemediationStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.ProfileList": {
- "description": "ProfileList is a list of Profile resources.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationTemplate": {
+ "description": "Metal3RemediationTemplate is the Schema for the metal3remediationtemplates API.",
"type": "object",
- "required": [
- "items"
- ],
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
"type": "string"
},
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.Profile"
- }
- },
"kind": {
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
"type": "string"
},
"metadata": {
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ },
+ "spec": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationTemplateSpec"
+ },
+ "status": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationTemplateStatus"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "ProfileList",
+ "Type": "object",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3RemediationTemplate",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.ProfileSpec": {
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationTemplateList": {
+ "description": "Metal3RemediationTemplateList contains a list of Metal3RemediationTemplate.",
"type": "object",
"required": [
- "config"
+ "items"
],
"properties": {
- "config": {
- "default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.ProfileConfig"
+ "apiVersion": {
+ "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "type": "string"
},
- "profile": {
- "description": "Tuned profiles.",
+ "items": {
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.TunedProfile"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationTemplate"
}
+ },
+ "kind": {
+ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "type": "string"
+ },
+ "metadata": {
+ "default": {},
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
}
},
"x-fabric8-info": {
- "Type": "nested",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "ProfileSpec",
+ "Type": "list",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3RemediationTemplateList",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.ProfileStatus": {
- "description": "ProfileStatus is the status for a Profile resource; the status is for internal use only and its fields may be changed/removed in the future.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationTemplateResource": {
+ "description": "Metal3RemediationTemplateResource describes the data needed to create a Metal3Remediation from a template.",
"type": "object",
"required": [
- "tunedProfile"
+ "spec"
],
"properties": {
- "conditions": {
- "description": "conditions represents the state of the per-node Profile application",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.ProfileStatusCondition"
- },
- "x-kubernetes-patch-merge-key": "type",
- "x-kubernetes-patch-strategy": "merge"
- },
- "tunedProfile": {
- "description": "the current profile in use by the Tuned daemon",
- "type": "string",
- "default": ""
+ "spec": {
+ "description": "Spec is the specification of the desired behavior of the Metal3Remediation.",
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationSpec"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "ProfileStatus",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3RemediationTemplateResource",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.ProfileStatusCondition": {
- "description": "ProfileStatusCondition represents a partial state of the per-node Profile application.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationTemplateSpec": {
+ "description": "Metal3RemediationTemplateSpec defines the desired state of Metal3RemediationTemplate.",
"type": "object",
"required": [
- "type",
- "status",
- "lastTransitionTime"
+ "template"
],
"properties": {
- "lastTransitionTime": {
- "description": "lastTransitionTime is the time of the last update to the current status property.",
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"
- },
- "message": {
- "description": "message provides additional information about the current condition. This is only to be consumed by humans.",
- "type": "string"
- },
- "reason": {
- "description": "reason is the CamelCase reason for the condition's current status.",
- "type": "string"
- },
- "status": {
- "description": "status of the condition, one of True, False, Unknown.",
- "type": "string",
- "default": ""
- },
- "type": {
- "description": "type specifies the aspect reported by this condition.",
- "type": "string",
- "default": ""
+ "template": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationTemplateResource"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "ProfileStatusCondition",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3RemediationTemplateSpec",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.TuneDConfig": {
- "description": "Global configuration for the TuneD daemon as defined in tuned-main.conf",
+ "io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationTemplateStatus": {
+ "description": "Metal3RemediationTemplateStatus defines the observed state of Metal3RemediationTemplate.",
"type": "object",
+ "required": [
+ "status"
+ ],
"properties": {
- "reapply_sysctl": {
- "description": "turn reapply_sysctl functionality on/off for the TuneD daemon: true/false",
- "type": "boolean"
+ "status": {
+ "description": "Metal3RemediationStatus defines the observed state of Metal3Remediation",
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.Metal3RemediationStatus"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "TuneDConfig",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "Metal3RemediationTemplateStatus",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.Tuned": {
- "description": "Tuned is a collection of rules that allows cluster-wide deployment of node-level sysctls and more flexibility to add custom tuning specified by user needs. These rules are translated and passed to all containerized Tuned daemons running in the cluster in the format that the daemons understand. The responsibility for applying the node-level tuning then lies with the containerized Tuned daemons. More info: https://github.com/openshift/cluster-node-tuning-operator",
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkData": {
+ "description": "NetworkData represents a networkData object.",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
+ "links": {
+ "description": "Links is a structure containing lists of different types objects",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataLink"
},
- "spec": {
- "description": "spec is the specification of the desired behavior of Tuned. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status",
+ "networks": {
+ "description": "Networks is a structure containing lists of different types objects",
"default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.TunedSpec"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataNetwork"
},
- "status": {
+ "services": {
+ "description": "Services is a structure containing lists of different types objects",
"default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.TunedStatus"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataService"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "Tuned",
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkData",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.TunedList": {
- "description": "TunedList is a list of Tuned resources.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataIPv4": {
+ "description": "NetworkDataIPv4 represents an ipv4 static network object.",
"type": "object",
"required": [
- "items"
+ "id",
+ "link"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "fromPoolRef": {
+ "description": "FromPoolRef is a reference to a IP pool to allocate an address from.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference"
},
- "items": {
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.Tuned"
- }
+ "id": {
+ "description": "ID is the network ID (name)",
+ "type": "string",
+ "default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "ipAddressFromIPPool": {
+ "description": "IPAddressFromIPPool contains the name of the IP pool to use to get an ip address",
"type": "string"
},
- "metadata": {
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "link": {
+ "description": "Link is the link on which the network applies",
+ "type": "string",
+ "default": ""
+ },
+ "routes": {
+ "description": "Routes contains a list of IPv4 routes",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataRoutev4"
+ }
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "TunedList",
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataIPv4",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.TunedMatch": {
- "description": "Rules governing application of a Tuned profile.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataIPv4DHCP": {
+ "description": "NetworkDataIPv4DHCP represents an ipv4 DHCP network object.",
"type": "object",
"required": [
- "label"
+ "id",
+ "link"
],
"properties": {
- "label": {
- "description": "Node or Pod label name.",
- "type": "string"
+ "id": {
+ "description": "ID is the network ID (name)",
+ "type": "string",
+ "default": ""
},
- "match": {
- "description": "Additional rules governing application of the tuned profile connected by logical AND operator.",
+ "link": {
+ "description": "Link is the link on which the network applies",
+ "type": "string",
+ "default": ""
+ },
+ "routes": {
+ "description": "Routes contains a list of IPv4 routes",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.TunedMatch"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataRoutev4"
}
- },
- "type": {
- "description": "Match type: [node/pod]. If omitted, \"node\" is assumed.",
- "type": "string"
- },
- "value": {
- "description": "Node or Pod label value. If omitted, the presence of label name is enough to match.",
- "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "TunedMatch",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataIPv4DHCP",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.TunedProfile": {
- "description": "A Tuned profile.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataIPv6": {
+ "description": "NetworkDataIPv6 represents an ipv6 static network object.",
"type": "object",
"required": [
- "name",
- "data"
+ "id",
+ "link",
+ "ipAddressFromIPPool"
],
"properties": {
- "data": {
- "description": "Specification of the Tuned profile to be consumed by the Tuned daemon.",
- "type": "string"
+ "fromPoolRef": {
+ "description": "FromPoolRef is a reference to a IP pool to allocate an address from.",
+ "$ref": "#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference"
},
- "name": {
- "description": "Name of the Tuned profile to be used in the recommend section.",
- "type": "string"
+ "id": {
+ "description": "ID is the network ID (name)",
+ "type": "string",
+ "default": ""
+ },
+ "ipAddressFromIPPool": {
+ "description": "IPAddressFromIPPool contains the name of the IPPool to use to get an ip address",
+ "type": "string",
+ "default": ""
+ },
+ "link": {
+ "description": "Link is the link on which the network applies",
+ "type": "string",
+ "default": ""
+ },
+ "routes": {
+ "description": "Routes contains a list of IPv6 routes",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataRoutev6"
+ }
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "TunedProfile",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataIPv6",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.TunedRecommend": {
- "description": "Selection logic for a single Tuned profile.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataIPv6DHCP": {
+ "description": "NetworkDataIPv6DHCP represents an ipv6 DHCP network object.",
"type": "object",
"required": [
- "profile",
- "priority"
+ "id",
+ "link"
],
"properties": {
- "machineConfigLabels": {
- "description": "MachineConfigLabels specifies the labels for a MachineConfig. The MachineConfig is created automatically to apply additional host settings (e.g. kernel boot parameters) profile 'Profile' needs and can only be applied by creating a MachineConfig. This involves finding all MachineConfigPools with machineConfigSelector matching the MachineConfigLabels and setting the profile 'Profile' on all nodes that match the MachineConfigPools' nodeSelectors.",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
+ "id": {
+ "description": "ID is the network ID (name)",
+ "type": "string",
+ "default": ""
},
- "match": {
- "description": "Rules governing application of a Tuned profile connected by logical OR operator.",
+ "link": {
+ "description": "Link is the link on which the network applies",
+ "type": "string",
+ "default": ""
+ },
+ "routes": {
+ "description": "Routes contains a list of IPv6 routes",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.TunedMatch"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataRoutev6"
}
- },
- "operand": {
- "description": "Optional operand configuration.",
- "default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.OperandConfig"
- },
- "priority": {
- "description": "Tuned profile priority. Highest priority is 0.",
- "type": "integer",
- "format": "int64"
- },
- "profile": {
- "description": "Name of the Tuned profile to recommend.",
- "type": "string"
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "TunedRecommend",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataIPv6DHCP",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.TunedSpec": {
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataLink": {
+ "description": "NetworkDataLink contains list of different link objects.",
"type": "object",
"properties": {
- "managementState": {
- "description": "managementState indicates whether the registry instance represented by this config instance is under operator management or not. Valid values are Force, Managed, Unmanaged, and Removed.",
- "type": "string"
+ "bonds": {
+ "description": "Bonds contains a list of Bond links",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataLinkBond"
+ }
},
- "profile": {
- "description": "Tuned profiles.",
+ "ethernets": {
+ "description": "Ethernets contains a list of Ethernet links",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.TunedProfile"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataLinkEthernet"
}
},
- "recommend": {
- "description": "Selection logic for all Tuned profiles.",
+ "vlans": {
+ "description": "Vlans contains a list of Vlan links",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.tuned.v1.TunedRecommend"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataLinkVlan"
}
}
},
"x-fabric8-info": {
"Type": "nested",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "TunedSpec",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataLink",
"Scope": "Namespaced"
}
},
- "io.openshift.tuned.v1.TunedStatus": {
- "description": "TunedStatus is the status for a Tuned resource.",
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataLinkBond": {
+ "description": "NetworkDataLinkBond represents a bond link object.",
"type": "object",
+ "required": [
+ "bondMode",
+ "id",
+ "macAddress"
+ ],
+ "properties": {
+ "bondLinks": {
+ "description": "BondLinks is the list of links that are part of the bond.",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
+ },
+ "bondMode": {
+ "description": "BondMode is the mode of bond used. It can be one of balance-rr, active-backup, balance-xor, broadcast, balance-tlb, balance-alb, 802.3ad",
+ "type": "string",
+ "default": ""
+ },
+ "bondXmitHashPolicy": {
+ "description": "Selects the transmit hash policy used for port selection in balance-xor and 802.3ad modes",
+ "type": "string",
+ "default": ""
+ },
+ "id": {
+ "description": "Id is the ID of the interface (used for naming)",
+ "type": "string",
+ "default": ""
+ },
+ "macAddress": {
+ "description": "MACAddress is the MAC address of the interface, containing the object used to render it.",
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkLinkEthernetMac"
+ },
+ "mtu": {
+ "description": "MTU is the MTU of the interface",
+ "type": "integer",
+ "format": "int32"
+ }
+ },
"x-fabric8-info": {
"Type": "nested",
- "Group": "tuned.openshift.io",
- "Version": "v1",
- "Kind": "TunedStatus",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataLinkBond",
"Scope": "Namespaced"
}
},
- "io.openshift.user.v1.Group": {
- "description": "Group represents a referenceable set of Users\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataLinkEthernet": {
+ "description": "NetworkDataLinkEthernet represents an ethernet link object.",
"type": "object",
"required": [
- "users"
+ "type",
+ "id",
+ "macAddress"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "id": {
+ "description": "Id is the ID of the interface (used for naming)",
+ "type": "string",
+ "default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "macAddress": {
+ "description": "MACAddress is the MAC address of the interface, containing the object used to render it.",
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkLinkEthernetMac"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "mtu": {
+ "description": "MTU is the MTU of the interface",
+ "type": "integer",
+ "format": "int32"
},
- "users": {
- "description": "Users is the list of users in this group.",
- "type": "array",
- "items": {
- "type": "string",
- "default": ""
- }
+ "type": {
+ "description": "Type is the type of the ethernet link. It can be one of: bridge, dvs, hw_veb, hyperv, ovs, tap, vhostuser, vif, phy",
+ "type": "string",
+ "default": ""
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "user.openshift.io",
- "Version": "v1",
- "Kind": "Group",
- "Scope": "Clustered"
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataLinkEthernet",
+ "Scope": "Namespaced"
}
},
- "io.openshift.user.v1.GroupList": {
- "description": "GroupList is a collection of Groups\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataLinkVlan": {
+ "description": "NetworkDataLinkVlan represents a vlan link object.",
"type": "object",
"required": [
- "items"
+ "vlanID",
+ "id",
+ "macAddress",
+ "vlanLink"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "id": {
+ "description": "Id is the ID of the interface (used for naming)",
+ "type": "string",
+ "default": ""
},
- "items": {
- "description": "Items is the list of groups",
+ "macAddress": {
+ "description": "MACAddress is the MAC address of the interface, containing the object used to render it.",
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkLinkEthernetMac"
+ },
+ "mtu": {
+ "description": "MTU is the MTU of the interface",
+ "type": "integer",
+ "format": "int32"
+ },
+ "vlanID": {
+ "description": "VlanID is the Vlan ID",
+ "type": "integer",
+ "format": "int32",
+ "default": 0
+ },
+ "vlanLink": {
+ "description": "VlanLink is the name of the link on which the vlan should be added",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataLinkVlan",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataNetwork": {
+ "description": "NetworkDataNetwork represents a network object.",
+ "type": "object",
+ "properties": {
+ "ipv4": {
+ "description": "IPv4 contains a list of IPv4 static allocations",
"type": "array",
"items": {
"default": {},
- "$ref": "#/definitions/io.openshift.user.v1.Group"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataIPv4"
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "ipv4DHCP": {
+ "description": "IPv4 contains a list of IPv4 DHCP allocations",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataIPv4DHCP"
+ }
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "ipv6": {
+ "description": "IPv4 contains a list of IPv6 static allocations",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataIPv6"
+ }
+ },
+ "ipv6DHCP": {
+ "description": "IPv4 contains a list of IPv6 DHCP allocations",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataIPv6DHCP"
+ }
+ },
+ "ipv6SLAAC": {
+ "description": "IPv4 contains a list of IPv6 SLAAC allocations",
+ "type": "array",
+ "items": {
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataIPv6DHCP"
+ }
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "user.openshift.io",
- "Version": "v1",
- "Kind": "GroupList",
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataNetwork",
"Scope": "Namespaced"
}
},
- "io.openshift.user.v1.Identity": {
- "description": "Identity records a successful authentication of a user with an identity provider. The information about the source of authentication is stored on the identity, and the identity is then associated with a single user object. Multiple identities can reference a single user. Information retrieved from the authentication provider is stored in the extra field using a schema determined by the provider.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataRoutev4": {
+ "description": "NetworkDataRoutev4 represents an ipv4 route object.",
"type": "object",
"required": [
- "providerName",
- "providerUserName",
- "user"
+ "network",
+ "gateway"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
- },
- "extra": {
- "description": "Extra holds extra information about this identity",
- "type": "object",
- "additionalProperties": {
- "type": "string",
- "default": ""
- }
- },
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "gateway": {
+ "description": "Gateway is the IPv4 address of the gateway",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkGatewayv4"
},
- "providerName": {
- "description": "ProviderName is the source of identity information",
+ "network": {
+ "description": "Network is the IPv4 network address",
"type": "string",
"default": ""
},
- "providerUserName": {
- "description": "ProviderUserName uniquely represents this identity in the scope of the provider",
- "type": "string",
- "default": ""
+ "prefix": {
+ "description": "Prefix is the mask of the network as integer (max 32)",
+ "type": "integer",
+ "format": "int32"
},
- "user": {
- "description": "User is a reference to the user this identity is associated with Both Name and UID must be set",
+ "services": {
+ "description": "Services is a list of IPv4 services",
"default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataServicev4"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "user.openshift.io",
- "Version": "v1",
- "Kind": "Identity",
- "Scope": "Clustered"
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataRoutev4",
+ "Scope": "Namespaced"
}
},
- "io.openshift.user.v1.IdentityList": {
- "description": "IdentityList is a collection of Identities\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataRoutev6": {
+ "description": "NetworkDataRoutev6 represents an ipv6 route object.",
"type": "object",
"required": [
- "items"
+ "network",
+ "gateway"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "gateway": {
+ "description": "Gateway is the IPv6 address of the gateway",
+ "default": {},
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkGatewayv6"
},
- "items": {
- "description": "Items is the list of identities",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.user.v1.Identity"
- }
+ "network": {
+ "description": "Network is the IPv6 network address",
+ "type": "string",
+ "default": ""
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "prefix": {
+ "description": "Prefix is the mask of the network as integer (max 128)",
+ "type": "integer",
+ "format": "int32"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "services": {
+ "description": "Services is a list of IPv6 services",
"default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataServicev6"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "user.openshift.io",
- "Version": "v1",
- "Kind": "IdentityList",
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataRoutev6",
"Scope": "Namespaced"
}
},
- "io.openshift.user.v1.User": {
- "description": "Upon log in, every user of the system receives a User and Identity resource. Administrators may directly manipulate the attributes of the users for their own tracking, or set groups via the API. The user name is unique and is chosen based on the value provided by the identity provider - if a user already exists with the incoming name, the user name may have a number appended to it depending on the configuration of the system.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataService": {
+ "description": "NetworkDataService represents a service object.",
"type": "object",
- "required": [
- "groups"
- ],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "dns": {
+ "description": "DNS is a list of DNS services",
+ "type": "array",
+ "items": {
+ "type": "string",
+ "default": ""
+ }
},
- "fullName": {
- "description": "FullName is the full name of user",
+ "dnsFromIPPool": {
+ "description": "DNSFromIPPool is the name of the IPPool from which to get the DNS servers",
"type": "string"
- },
- "groups": {
- "description": "Groups specifies group names this user is a member of. This field is deprecated and will be removed in a future release. Instead, create a Group object containing the name of this User.",
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataService",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataServicev4": {
+ "description": "NetworkDataServicev4 represents a service object.",
+ "type": "object",
+ "properties": {
+ "dns": {
+ "description": "DNS is a list of IPv4 DNS services",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "identities": {
- "description": "Identities are the identities associated with this user",
+ "dnsFromIPPool": {
+ "description": "DNSFromIPPool is the name of the IPPool from which to get the DNS servers",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataServicev4",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkDataServicev6": {
+ "description": "NetworkDataServicev6 represents a service object.",
+ "type": "object",
+ "properties": {
+ "dns": {
+ "description": "DNS is a list of IPv6 DNS services",
"type": "array",
"items": {
"type": "string",
"default": ""
}
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "dnsFromIPPool": {
+ "description": "DNSFromIPPool is the name of the IPPool from which to get the DNS servers",
"type": "string"
- },
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "user.openshift.io",
- "Version": "v1",
- "Kind": "User",
- "Scope": "Clustered"
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkDataServicev6",
+ "Scope": "Namespaced"
}
},
- "io.openshift.user.v1.UserIdentityMapping": {
- "description": "UserIdentityMapping maps a user to an identity\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkGatewayv4": {
+ "description": "NetworkGatewayv4 represents a gateway, given as a string or as a reference to a Metal3IPPool.",
"type": "object",
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+ "fromIPPool": {
+ "description": "FromIPPool is the name of the IPPool to fetch the gateway from",
"type": "string"
},
- "identity": {
- "description": "Identity is a reference to an identity",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "string": {
+ "description": "String is the gateway given as a string",
+ "type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkGatewayv4",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkGatewayv6": {
+ "description": "NetworkGatewayv6 represents a gateway, given as a string or as a reference to a Metal3IPPool.",
+ "type": "object",
+ "properties": {
+ "fromIPPool": {
+ "description": "FromIPPool is the name of the IPPool to fetch the gateway from",
+ "type": "string"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+ "string": {
+ "description": "String is the gateway given as a string",
"type": "string"
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkGatewayv6",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkLinkEthernetMac": {
+ "description": "NetworkLinkEthernetMac represents the Mac address content.",
+ "type": "object",
+ "properties": {
+ "fromAnnotation": {
+ "description": "FromAnnotation references an object Annotation to retrieve the MAC address from",
+ "$ref": "#/definitions/io.x-k8s.cluster.infrastructure.v1beta1.NetworkLinkEthernetMacFromAnnotation"
},
- "metadata": {
- "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
+ "fromHostInterface": {
+ "description": "FromHostInterface contains the name of the interface in the BareMetalHost Introspection details from which to fetch the MAC address",
+ "type": "string"
},
- "user": {
- "description": "User is a reference to a user",
- "default": {},
- "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference"
+ "string": {
+ "description": "String contains the MAC address given as a string",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "object",
- "Group": "user.openshift.io",
- "Version": "v1",
- "Kind": "UserIdentityMapping",
- "Scope": "Clustered"
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkLinkEthernetMac",
+ "Scope": "Namespaced"
}
},
- "io.openshift.user.v1.UserList": {
- "description": "UserList is a collection of Users\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "io.x-k8s.cluster.infrastructure.v1beta1.NetworkLinkEthernetMacFromAnnotation": {
+ "description": "NetworkLinkEthernetMacFromAnnotation contains the information to fetch an annotation content, if the label does not exist, it is rendered as empty string.",
"type": "object",
"required": [
- "items"
+ "object",
+ "annotation"
],
"properties": {
- "apiVersion": {
- "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
- "type": "string"
+ "annotation": {
+ "description": "Annotation is the key of the Annotation to fetch",
+ "type": "string",
+ "default": ""
},
- "items": {
- "description": "Items is the list of users",
- "type": "array",
- "items": {
- "default": {},
- "$ref": "#/definitions/io.openshift.user.v1.User"
- }
+ "object": {
+ "description": "Object is the type of the object from which we retrieve the name",
+ "type": "string",
+ "default": ""
+ }
+ },
+ "x-fabric8-info": {
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "NetworkLinkEthernetMacFromAnnotation",
+ "Scope": "Namespaced"
+ }
+ },
+ "io.x-k8s.cluster.infrastructure.v1beta1.RemediationStrategy": {
+ "description": "RemediationStrategy describes how to remediate machines.",
+ "type": "object",
+ "properties": {
+ "retryLimit": {
+ "description": "Sets maximum number of remediation retries.",
+ "type": "integer",
+ "format": "int32"
},
- "kind": {
- "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
- "type": "string"
+ "timeout": {
+ "description": "Sets the timeout between remediation retries.",
+ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration"
},
- "metadata": {
- "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
- "default": {},
- "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"
+ "type": {
+ "description": "Type of remediation.",
+ "type": "string"
}
},
"x-fabric8-info": {
- "Type": "list",
- "Group": "user.openshift.io",
- "Version": "v1",
- "Kind": "UserList",
+ "Type": "nested",
+ "Group": "infrastructure.cluster.x-k8s.io",
+ "Version": "v1beta1",
+ "Kind": "RemediationStrategy",
"Scope": "Namespaced"
}
}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/pom.xml b/kubernetes-model-generator/openshift-model-miscellaneous/pom.xml
index b4e606836bb..9b4b07be99d 100644
--- a/kubernetes-model-generator/openshift-model-miscellaneous/pom.xml
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/pom.xml
@@ -43,6 +43,10 @@
io.fabric8
kubernetes-model-core
+
+ io.fabric8
+ openshift-model-config
+
org.assertj
assertj-core
@@ -61,11 +65,9 @@
- ${openapi.schema.openshift-latest}
+ ${openapi.schema.openshift-generated}
- io.fabric8.kubernetes.api.model
- io.fabric8.openshift.api.model.miscellaneous
io.fabric8.openshift.api.model.miscellaneous.cncf.cni
io.fabric8.openshift.api.model.miscellaneous.metal3
io.fabric8.openshift.api.model.miscellaneous.metal3.v1beta1
@@ -79,6 +81,9 @@
^io\.openshift\.helm\..*$
^io\.openshift\.network\..*$
+
+ ^io\.openshift\.cloudcredential\.v1\.ProviderCodec$
+
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatus.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatus.java
index 66014e425df..49e7b34f2cf 100644
--- a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatus.java
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatus.java
@@ -14,6 +14,7 @@
import com.fasterxml.jackson.annotation.JsonPropertyOrder;
import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Condition;
import io.fabric8.kubernetes.api.model.Container;
import io.fabric8.kubernetes.api.model.IntOrString;
import io.fabric8.kubernetes.api.model.KubernetesResource;
@@ -62,12 +63,12 @@ public class APIRequestCountStatus implements Editable conditions = new ArrayList<>();
+ private List conditions = new ArrayList<>();
@JsonProperty("currentHour")
- private APIRequestCountStatusCurrentHour currentHour;
+ private PerResourceAPIRequestLog currentHour;
@JsonProperty("last24h")
@JsonInclude(JsonInclude.Include.NON_EMPTY)
- private List last24h = new ArrayList<>();
+ private List last24h = new ArrayList<>();
@JsonProperty("removedInRelease")
private String removedInRelease;
@JsonProperty("requestCount")
@@ -82,7 +83,7 @@ public class APIRequestCountStatus implements Editable conditions, APIRequestCountStatusCurrentHour currentHour, List last24h, String removedInRelease, Long requestCount) {
+ public APIRequestCountStatus(List conditions, PerResourceAPIRequestLog currentHour, List last24h, String removedInRelease, Long requestCount) {
super();
this.conditions = conditions;
this.currentHour = currentHour;
@@ -93,33 +94,33 @@ public APIRequestCountStatus(List conditions, A
@JsonProperty("conditions")
@JsonInclude(JsonInclude.Include.NON_EMPTY)
- public List getConditions() {
+ public List getConditions() {
return conditions;
}
@JsonProperty("conditions")
- public void setConditions(List conditions) {
+ public void setConditions(List conditions) {
this.conditions = conditions;
}
@JsonProperty("currentHour")
- public APIRequestCountStatusCurrentHour getCurrentHour() {
+ public PerResourceAPIRequestLog getCurrentHour() {
return currentHour;
}
@JsonProperty("currentHour")
- public void setCurrentHour(APIRequestCountStatusCurrentHour currentHour) {
+ public void setCurrentHour(PerResourceAPIRequestLog currentHour) {
this.currentHour = currentHour;
}
@JsonProperty("last24h")
@JsonInclude(JsonInclude.Include.NON_EMPTY)
- public List getLast24h() {
+ public List getLast24h() {
return last24h;
}
@JsonProperty("last24h")
- public void setLast24h(List last24h) {
+ public void setLast24h(List last24h) {
this.last24h = last24h;
}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusCHBNBUByVerb.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusCHBNBUByVerb.java
deleted file mode 100644
index c1a6809b19f..00000000000
--- a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusCHBNBUByVerb.java
+++ /dev/null
@@ -1,122 +0,0 @@
-
-package io.fabric8.openshift.api.model.miscellaneous.apiserver.v1;
-
-import java.util.LinkedHashMap;
-import java.util.Map;
-import javax.annotation.Generated;
-import com.fasterxml.jackson.annotation.JsonAnyGetter;
-import com.fasterxml.jackson.annotation.JsonAnySetter;
-import com.fasterxml.jackson.annotation.JsonIgnore;
-import com.fasterxml.jackson.annotation.JsonInclude;
-import com.fasterxml.jackson.annotation.JsonProperty;
-import com.fasterxml.jackson.annotation.JsonPropertyOrder;
-import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
-import io.fabric8.kubernetes.api.builder.Editable;
-import io.fabric8.kubernetes.api.model.Container;
-import io.fabric8.kubernetes.api.model.IntOrString;
-import io.fabric8.kubernetes.api.model.KubernetesResource;
-import io.fabric8.kubernetes.api.model.LabelSelector;
-import io.fabric8.kubernetes.api.model.LocalObjectReference;
-import io.fabric8.kubernetes.api.model.ObjectMeta;
-import io.fabric8.kubernetes.api.model.ObjectReference;
-import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
-import io.fabric8.kubernetes.api.model.PodTemplateSpec;
-import io.fabric8.kubernetes.api.model.ResourceRequirements;
-import io.sundr.builder.annotations.Buildable;
-import io.sundr.builder.annotations.BuildableReference;
-import lombok.EqualsAndHashCode;
-import lombok.ToString;
-import lombok.experimental.Accessors;
-
-@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
-@JsonInclude(JsonInclude.Include.NON_NULL)
-@JsonPropertyOrder({
- "requestCount",
- "verb"
-})
-@ToString
-@EqualsAndHashCode
-@Accessors(prefix = {
- "_",
- ""
-})
-@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
- @BuildableReference(ObjectMeta.class),
- @BuildableReference(LabelSelector.class),
- @BuildableReference(Container.class),
- @BuildableReference(PodTemplateSpec.class),
- @BuildableReference(ResourceRequirements.class),
- @BuildableReference(IntOrString.class),
- @BuildableReference(ObjectReference.class),
- @BuildableReference(LocalObjectReference.class),
- @BuildableReference(PersistentVolumeClaim.class)
-})
-@Generated("jsonschema2pojo")
-public class APIRequestCountStatusCHBNBUByVerb implements Editable , KubernetesResource
-{
-
- @JsonProperty("requestCount")
- private Long requestCount;
- @JsonProperty("verb")
- private String verb;
- @JsonIgnore
- private Map additionalProperties = new LinkedHashMap();
-
- /**
- * No args constructor for use in serialization
- *
- */
- public APIRequestCountStatusCHBNBUByVerb() {
- }
-
- public APIRequestCountStatusCHBNBUByVerb(Long requestCount, String verb) {
- super();
- this.requestCount = requestCount;
- this.verb = verb;
- }
-
- @JsonProperty("requestCount")
- public Long getRequestCount() {
- return requestCount;
- }
-
- @JsonProperty("requestCount")
- public void setRequestCount(Long requestCount) {
- this.requestCount = requestCount;
- }
-
- @JsonProperty("verb")
- public String getVerb() {
- return verb;
- }
-
- @JsonProperty("verb")
- public void setVerb(String verb) {
- this.verb = verb;
- }
-
- @JsonIgnore
- public APIRequestCountStatusCHBNBUByVerbBuilder edit() {
- return new APIRequestCountStatusCHBNBUByVerbBuilder(this);
- }
-
- @JsonIgnore
- public APIRequestCountStatusCHBNBUByVerbBuilder toBuilder() {
- return edit();
- }
-
- @JsonAnyGetter
- public Map getAdditionalProperties() {
- return this.additionalProperties;
- }
-
- @JsonAnySetter
- public void setAdditionalProperty(String name, Object value) {
- this.additionalProperties.put(name, value);
- }
-
- public void setAdditionalProperties(Map additionalProperties) {
- this.additionalProperties = additionalProperties;
- }
-
-}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusLByNode.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/PerNodeAPIRequestLog.java
similarity index 85%
rename from kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusLByNode.java
rename to kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/PerNodeAPIRequestLog.java
index 8dc01ce4126..843d307ac7e 100644
--- a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusLByNode.java
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/PerNodeAPIRequestLog.java
@@ -55,12 +55,12 @@
@BuildableReference(PersistentVolumeClaim.class)
})
@Generated("jsonschema2pojo")
-public class APIRequestCountStatusLByNode implements Editable , KubernetesResource
+public class PerNodeAPIRequestLog implements Editable , KubernetesResource
{
@JsonProperty("byUser")
@JsonInclude(JsonInclude.Include.NON_EMPTY)
- private List byUser = new ArrayList<>();
+ private List byUser = new ArrayList<>();
@JsonProperty("nodeName")
private String nodeName;
@JsonProperty("requestCount")
@@ -72,10 +72,10 @@ public class APIRequestCountStatusLByNode implements Editable byUser, String nodeName, Long requestCount) {
+ public PerNodeAPIRequestLog(List byUser, String nodeName, Long requestCount) {
super();
this.byUser = byUser;
this.nodeName = nodeName;
@@ -84,12 +84,12 @@ public APIRequestCountStatusLByNode(List byUser,
@JsonProperty("byUser")
@JsonInclude(JsonInclude.Include.NON_EMPTY)
- public List getByUser() {
+ public List getByUser() {
return byUser;
}
@JsonProperty("byUser")
- public void setByUser(List byUser) {
+ public void setByUser(List byUser) {
this.byUser = byUser;
}
@@ -114,12 +114,12 @@ public void setRequestCount(Long requestCount) {
}
@JsonIgnore
- public APIRequestCountStatusLByNodeBuilder edit() {
- return new APIRequestCountStatusLByNodeBuilder(this);
+ public PerNodeAPIRequestLogBuilder edit() {
+ return new PerNodeAPIRequestLogBuilder(this);
}
@JsonIgnore
- public APIRequestCountStatusLByNodeBuilder toBuilder() {
+ public PerNodeAPIRequestLogBuilder toBuilder() {
return edit();
}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusLast24h.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/PerResourceAPIRequestLog.java
similarity index 84%
rename from kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusLast24h.java
rename to kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/PerResourceAPIRequestLog.java
index a002b9c6bb6..b84eb900dad 100644
--- a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusLast24h.java
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/PerResourceAPIRequestLog.java
@@ -54,12 +54,12 @@
@BuildableReference(PersistentVolumeClaim.class)
})
@Generated("jsonschema2pojo")
-public class APIRequestCountStatusLast24h implements Editable , KubernetesResource
+public class PerResourceAPIRequestLog implements Editable , KubernetesResource
{
@JsonProperty("byNode")
@JsonInclude(JsonInclude.Include.NON_EMPTY)
- private List byNode = new ArrayList<>();
+ private List byNode = new ArrayList<>();
@JsonProperty("requestCount")
private Long requestCount;
@JsonIgnore
@@ -69,10 +69,10 @@ public class APIRequestCountStatusLast24h implements Editable byNode, Long requestCount) {
+ public PerResourceAPIRequestLog(List byNode, Long requestCount) {
super();
this.byNode = byNode;
this.requestCount = requestCount;
@@ -80,12 +80,12 @@ public APIRequestCountStatusLast24h(List byNode, L
@JsonProperty("byNode")
@JsonInclude(JsonInclude.Include.NON_EMPTY)
- public List getByNode() {
+ public List getByNode() {
return byNode;
}
@JsonProperty("byNode")
- public void setByNode(List byNode) {
+ public void setByNode(List byNode) {
this.byNode = byNode;
}
@@ -100,12 +100,12 @@ public void setRequestCount(Long requestCount) {
}
@JsonIgnore
- public APIRequestCountStatusLast24hBuilder edit() {
- return new APIRequestCountStatusLast24hBuilder(this);
+ public PerResourceAPIRequestLogBuilder edit() {
+ return new PerResourceAPIRequestLogBuilder(this);
}
@JsonIgnore
- public APIRequestCountStatusLast24hBuilder toBuilder() {
+ public PerResourceAPIRequestLogBuilder toBuilder() {
return edit();
}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusLBNByUser.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/PerUserAPIRequestCount.java
similarity index 85%
rename from kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusLBNByUser.java
rename to kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/PerUserAPIRequestCount.java
index 2e384fac41f..056921a278a 100644
--- a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusLBNByUser.java
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/PerUserAPIRequestCount.java
@@ -56,12 +56,12 @@
@BuildableReference(PersistentVolumeClaim.class)
})
@Generated("jsonschema2pojo")
-public class APIRequestCountStatusLBNByUser implements Editable , KubernetesResource
+public class PerUserAPIRequestCount implements Editable , KubernetesResource
{
@JsonProperty("byVerb")
@JsonInclude(JsonInclude.Include.NON_EMPTY)
- private List byVerb = new ArrayList<>();
+ private List byVerb = new ArrayList<>();
@JsonProperty("requestCount")
private Long requestCount;
@JsonProperty("userAgent")
@@ -75,10 +75,10 @@ public class APIRequestCountStatusLBNByUser implements Editable byVerb, Long requestCount, String userAgent, String username) {
+ public PerUserAPIRequestCount(List byVerb, Long requestCount, String userAgent, String username) {
super();
this.byVerb = byVerb;
this.requestCount = requestCount;
@@ -88,12 +88,12 @@ public APIRequestCountStatusLBNByUser(List byV
@JsonProperty("byVerb")
@JsonInclude(JsonInclude.Include.NON_EMPTY)
- public List getByVerb() {
+ public List getByVerb() {
return byVerb;
}
@JsonProperty("byVerb")
- public void setByVerb(List byVerb) {
+ public void setByVerb(List byVerb) {
this.byVerb = byVerb;
}
@@ -128,12 +128,12 @@ public void setUsername(String username) {
}
@JsonIgnore
- public APIRequestCountStatusLBNByUserBuilder edit() {
- return new APIRequestCountStatusLBNByUserBuilder(this);
+ public PerUserAPIRequestCountBuilder edit() {
+ return new PerUserAPIRequestCountBuilder(this);
}
@JsonIgnore
- public APIRequestCountStatusLBNByUserBuilder toBuilder() {
+ public PerUserAPIRequestCountBuilder toBuilder() {
return edit();
}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusLBNBUByVerb.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/PerVerbAPIRequestCount.java
similarity index 88%
rename from kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusLBNBUByVerb.java
rename to kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/PerVerbAPIRequestCount.java
index 7742ab1c7eb..6f29233a762 100644
--- a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/APIRequestCountStatusLBNBUByVerb.java
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/apiserver/v1/PerVerbAPIRequestCount.java
@@ -52,7 +52,7 @@
@BuildableReference(PersistentVolumeClaim.class)
})
@Generated("jsonschema2pojo")
-public class APIRequestCountStatusLBNBUByVerb implements Editable , KubernetesResource
+public class PerVerbAPIRequestCount implements Editable , KubernetesResource
{
@JsonProperty("requestCount")
@@ -66,10 +66,10 @@ public class APIRequestCountStatusLBNBUByVerb implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "AWSProviderSpec";
+ @JsonProperty("statementEntries")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ private List statementEntries = new ArrayList<>();
+ @JsonProperty("stsIAMRoleARN")
+ private String stsIAMRoleARN;
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public AWSProviderSpec() {
+ }
+
+ public AWSProviderSpec(String apiVersion, String kind, List statementEntries, String stsIAMRoleARN) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ this.statementEntries = statementEntries;
+ this.stsIAMRoleARN = stsIAMRoleARN;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonProperty("statementEntries")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ public List getStatementEntries() {
+ return statementEntries;
+ }
+
+ @JsonProperty("statementEntries")
+ public void setStatementEntries(List statementEntries) {
+ this.statementEntries = statementEntries;
+ }
+
+ @JsonProperty("stsIAMRoleARN")
+ public String getStsIAMRoleARN() {
+ return stsIAMRoleARN;
+ }
+
+ @JsonProperty("stsIAMRoleARN")
+ public void setStsIAMRoleARN(String stsIAMRoleARN) {
+ this.stsIAMRoleARN = stsIAMRoleARN;
+ }
+
+ @JsonIgnore
+ public AWSProviderSpecBuilder edit() {
+ return new AWSProviderSpecBuilder(this);
+ }
+
+ @JsonIgnore
+ public AWSProviderSpecBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/metal3/v1alpha1/BareMetalHostSpecConsumerRef.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/AWSProviderStatus.java
similarity index 61%
rename from kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/metal3/v1alpha1/BareMetalHostSpecConsumerRef.java
rename to kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/AWSProviderStatus.java
index 407faf7bc0e..0f4b80bdaba 100644
--- a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/metal3/v1alpha1/BareMetalHostSpecConsumerRef.java
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/AWSProviderStatus.java
@@ -1,5 +1,5 @@
-package io.fabric8.openshift.api.model.miscellaneous.metal3.v1alpha1;
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
import java.util.LinkedHashMap;
import java.util.Map;
@@ -17,13 +17,18 @@
import io.fabric8.kubernetes.api.model.KubernetesResource;
import io.fabric8.kubernetes.api.model.LabelSelector;
import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
import io.fabric8.kubernetes.api.model.ObjectMeta;
import io.fabric8.kubernetes.api.model.ObjectReference;
import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
import io.fabric8.kubernetes.api.model.PodTemplateSpec;
import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
import io.sundr.builder.annotations.Buildable;
import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
import lombok.EqualsAndHashCode;
import lombok.ToString;
import lombok.experimental.Accessors;
@@ -33,11 +38,8 @@
@JsonPropertyOrder({
"apiVersion",
"kind",
- "fieldPath",
- "name",
- "namespace",
- "resourceVersion",
- "uid"
+ "policy",
+ "user"
})
@ToString
@EqualsAndHashCode
@@ -56,24 +58,33 @@
@BuildableReference(LocalObjectReference.class),
@BuildableReference(PersistentVolumeClaim.class)
})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
@Generated("jsonschema2pojo")
-public class BareMetalHostSpecConsumerRef implements Editable , KubernetesResource
+public class AWSProviderStatus implements Editable , KubernetesResource, Namespaced
{
+ /**
+ *
+ * (Required)
+ *
+ */
@JsonProperty("apiVersion")
- private String apiVersion;
- @JsonProperty("fieldPath")
- private String fieldPath;
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
@JsonProperty("kind")
- private String kind;
- @JsonProperty("name")
- private String name;
- @JsonProperty("namespace")
- private String namespace;
- @JsonProperty("resourceVersion")
- private String resourceVersion;
- @JsonProperty("uid")
- private String uid;
+ private String kind = "AWSProviderStatus";
+ @JsonProperty("policy")
+ private String policy;
+ @JsonProperty("user")
+ private String user;
@JsonIgnore
private Map additionalProperties = new LinkedHashMap();
@@ -81,97 +92,84 @@ public class BareMetalHostSpecConsumerRef implements Editable , KubernetesResource
+public class AccessPolicy implements Editable , KubernetesResource
{
- @JsonProperty("byNode")
+ @JsonProperty("attributes")
@JsonInclude(JsonInclude.Include.NON_EMPTY)
- private List byNode = new ArrayList<>();
- @JsonProperty("requestCount")
- private Long requestCount;
+ private List attributes = new ArrayList<>();
+ @JsonProperty("roles")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ private List roles = new ArrayList<>();
@JsonIgnore
private Map additionalProperties = new LinkedHashMap();
@@ -69,43 +70,44 @@ public class APIRequestCountStatusCurrentHour implements Editable byNode, Long requestCount) {
+ public AccessPolicy(List attributes, List roles) {
super();
- this.byNode = byNode;
- this.requestCount = requestCount;
+ this.attributes = attributes;
+ this.roles = roles;
}
- @JsonProperty("byNode")
+ @JsonProperty("attributes")
@JsonInclude(JsonInclude.Include.NON_EMPTY)
- public List getByNode() {
- return byNode;
+ public List getAttributes() {
+ return attributes;
}
- @JsonProperty("byNode")
- public void setByNode(List byNode) {
- this.byNode = byNode;
+ @JsonProperty("attributes")
+ public void setAttributes(List attributes) {
+ this.attributes = attributes;
}
- @JsonProperty("requestCount")
- public Long getRequestCount() {
- return requestCount;
+ @JsonProperty("roles")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ public List getRoles() {
+ return roles;
}
- @JsonProperty("requestCount")
- public void setRequestCount(Long requestCount) {
- this.requestCount = requestCount;
+ @JsonProperty("roles")
+ public void setRoles(List roles) {
+ this.roles = roles;
}
@JsonIgnore
- public APIRequestCountStatusCurrentHourBuilder edit() {
- return new APIRequestCountStatusCurrentHourBuilder(this);
+ public AccessPolicyBuilder edit() {
+ return new AccessPolicyBuilder(this);
}
@JsonIgnore
- public APIRequestCountStatusCurrentHourBuilder toBuilder() {
+ public AccessPolicyBuilder toBuilder() {
return edit();
}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/AzureProviderSpec.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/AzureProviderSpec.java
new file mode 100644
index 00000000000..cd3b9984be0
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/AzureProviderSpec.java
@@ -0,0 +1,268 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind",
+ "azureClientID",
+ "azureRegion",
+ "azureSubscriptionID",
+ "azureTenantID",
+ "dataPermissions",
+ "permissions",
+ "roleBindings"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class AzureProviderSpec implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ @JsonProperty("azureClientID")
+ private String azureClientID;
+ @JsonProperty("azureRegion")
+ private String azureRegion;
+ @JsonProperty("azureSubscriptionID")
+ private String azureSubscriptionID;
+ @JsonProperty("azureTenantID")
+ private String azureTenantID;
+ @JsonProperty("dataPermissions")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ private List dataPermissions = new ArrayList<>();
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "AzureProviderSpec";
+ @JsonProperty("permissions")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ private List permissions = new ArrayList<>();
+ @JsonProperty("roleBindings")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ private List roleBindings = new ArrayList<>();
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public AzureProviderSpec() {
+ }
+
+ public AzureProviderSpec(String apiVersion, String azureClientID, String azureRegion, String azureSubscriptionID, String azureTenantID, List dataPermissions, String kind, List permissions, List roleBindings) {
+ super();
+ this.apiVersion = apiVersion;
+ this.azureClientID = azureClientID;
+ this.azureRegion = azureRegion;
+ this.azureSubscriptionID = azureSubscriptionID;
+ this.azureTenantID = azureTenantID;
+ this.dataPermissions = dataPermissions;
+ this.kind = kind;
+ this.permissions = permissions;
+ this.roleBindings = roleBindings;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ @JsonProperty("azureClientID")
+ public String getAzureClientID() {
+ return azureClientID;
+ }
+
+ @JsonProperty("azureClientID")
+ public void setAzureClientID(String azureClientID) {
+ this.azureClientID = azureClientID;
+ }
+
+ @JsonProperty("azureRegion")
+ public String getAzureRegion() {
+ return azureRegion;
+ }
+
+ @JsonProperty("azureRegion")
+ public void setAzureRegion(String azureRegion) {
+ this.azureRegion = azureRegion;
+ }
+
+ @JsonProperty("azureSubscriptionID")
+ public String getAzureSubscriptionID() {
+ return azureSubscriptionID;
+ }
+
+ @JsonProperty("azureSubscriptionID")
+ public void setAzureSubscriptionID(String azureSubscriptionID) {
+ this.azureSubscriptionID = azureSubscriptionID;
+ }
+
+ @JsonProperty("azureTenantID")
+ public String getAzureTenantID() {
+ return azureTenantID;
+ }
+
+ @JsonProperty("azureTenantID")
+ public void setAzureTenantID(String azureTenantID) {
+ this.azureTenantID = azureTenantID;
+ }
+
+ @JsonProperty("dataPermissions")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ public List getDataPermissions() {
+ return dataPermissions;
+ }
+
+ @JsonProperty("dataPermissions")
+ public void setDataPermissions(List dataPermissions) {
+ this.dataPermissions = dataPermissions;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonProperty("permissions")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ public List getPermissions() {
+ return permissions;
+ }
+
+ @JsonProperty("permissions")
+ public void setPermissions(List permissions) {
+ this.permissions = permissions;
+ }
+
+ @JsonProperty("roleBindings")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ public List getRoleBindings() {
+ return roleBindings;
+ }
+
+ @JsonProperty("roleBindings")
+ public void setRoleBindings(List roleBindings) {
+ this.roleBindings = roleBindings;
+ }
+
+ @JsonIgnore
+ public AzureProviderSpecBuilder edit() {
+ return new AzureProviderSpecBuilder(this);
+ }
+
+ @JsonIgnore
+ public AzureProviderSpecBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/CredentialsRequestSpecSecretRef.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/AzureProviderStatus.java
similarity index 63%
rename from kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/CredentialsRequestSpecSecretRef.java
rename to kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/AzureProviderStatus.java
index efc295ecba0..80db194b013 100644
--- a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/CredentialsRequestSpecSecretRef.java
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/AzureProviderStatus.java
@@ -17,13 +17,18 @@
import io.fabric8.kubernetes.api.model.KubernetesResource;
import io.fabric8.kubernetes.api.model.LabelSelector;
import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
import io.fabric8.kubernetes.api.model.ObjectMeta;
import io.fabric8.kubernetes.api.model.ObjectReference;
import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
import io.fabric8.kubernetes.api.model.PodTemplateSpec;
import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
import io.sundr.builder.annotations.Buildable;
import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
import lombok.EqualsAndHashCode;
import lombok.ToString;
import lombok.experimental.Accessors;
@@ -33,11 +38,9 @@
@JsonPropertyOrder({
"apiVersion",
"kind",
- "fieldPath",
+ "appID",
"name",
- "namespace",
- "resourceVersion",
- "uid"
+ "secretLastResourceVersion"
})
@ToString
@EqualsAndHashCode
@@ -56,24 +59,35 @@
@BuildableReference(LocalObjectReference.class),
@BuildableReference(PersistentVolumeClaim.class)
})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
@Generated("jsonschema2pojo")
-public class CredentialsRequestSpecSecretRef implements Editable , KubernetesResource
+public class AzureProviderStatus implements Editable , KubernetesResource, Namespaced
{
+ /**
+ *
+ * (Required)
+ *
+ */
@JsonProperty("apiVersion")
- private String apiVersion;
- @JsonProperty("fieldPath")
- private String fieldPath;
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ @JsonProperty("appID")
+ private String appID;
+ /**
+ *
+ * (Required)
+ *
+ */
@JsonProperty("kind")
- private String kind;
+ private String kind = "AzureProviderStatus";
@JsonProperty("name")
private String name;
- @JsonProperty("namespace")
- private String namespace;
- @JsonProperty("resourceVersion")
- private String resourceVersion;
- @JsonProperty("uid")
- private String uid;
+ @JsonProperty("secretLastResourceVersion")
+ private String secretLastResourceVersion;
@JsonIgnore
private Map additionalProperties = new LinkedHashMap();
@@ -81,45 +95,63 @@ public class CredentialsRequestSpecSecretRef implements Editable , KubernetesResource
+public class CredentialsRequestCondition implements Editable , KubernetesResource
{
@JsonProperty("lastProbeTime")
@@ -78,10 +78,10 @@ public class CredentialsRequestStatusConditions implements Editable serviceAccountNames = new ArrayList<>();
@@ -79,7 +79,7 @@ public class CredentialsRequestSpec implements Editable serviceAccountNames) {
+ public CredentialsRequestSpec(String cloudTokenPath, Object providerSpec, ObjectReference secretRef, List serviceAccountNames) {
super();
this.cloudTokenPath = cloudTokenPath;
this.providerSpec = providerSpec;
@@ -109,12 +109,12 @@ public void setProviderSpec(Object providerSpec) {
}
@JsonProperty("secretRef")
- public CredentialsRequestSpecSecretRef getSecretRef() {
+ public ObjectReference getSecretRef() {
return secretRef;
}
@JsonProperty("secretRef")
- public void setSecretRef(CredentialsRequestSpecSecretRef secretRef) {
+ public void setSecretRef(ObjectReference secretRef) {
this.secretRef = secretRef;
}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/CredentialsRequestStatus.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/CredentialsRequestStatus.java
index fba4963d651..30e0209590b 100644
--- a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/CredentialsRequestStatus.java
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/CredentialsRequestStatus.java
@@ -63,7 +63,7 @@ public class CredentialsRequestStatus implements Editable conditions = new ArrayList<>();
+ private List conditions = new ArrayList<>();
@JsonProperty("lastSyncCloudCredsSecretResourceVersion")
private String lastSyncCloudCredsSecretResourceVersion;
@JsonProperty("lastSyncGeneration")
@@ -85,7 +85,7 @@ public class CredentialsRequestStatus implements Editable conditions, String lastSyncCloudCredsSecretResourceVersion, Long lastSyncGeneration, String lastSyncTimestamp, Object providerStatus, Boolean provisioned) {
+ public CredentialsRequestStatus(List conditions, String lastSyncCloudCredsSecretResourceVersion, Long lastSyncGeneration, String lastSyncTimestamp, Object providerStatus, Boolean provisioned) {
super();
this.conditions = conditions;
this.lastSyncCloudCredsSecretResourceVersion = lastSyncCloudCredsSecretResourceVersion;
@@ -97,12 +97,12 @@ public CredentialsRequestStatus(List conditi
@JsonProperty("conditions")
@JsonInclude(JsonInclude.Include.NON_EMPTY)
- public List getConditions() {
+ public List getConditions() {
return conditions;
}
@JsonProperty("conditions")
- public void setConditions(List conditions) {
+ public void setConditions(List conditions) {
this.conditions = conditions;
}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/GCPProviderSpec.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/GCPProviderSpec.java
new file mode 100644
index 00000000000..574f2d337ec
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/GCPProviderSpec.java
@@ -0,0 +1,238 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind",
+ "audience",
+ "permissions",
+ "predefinedRoles",
+ "serviceAccountEmail",
+ "skipServiceCheck"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class GCPProviderSpec implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ @JsonProperty("audience")
+ private String audience;
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "GCPProviderSpec";
+ @JsonProperty("permissions")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ private List permissions = new ArrayList<>();
+ @JsonProperty("predefinedRoles")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ private List predefinedRoles = new ArrayList<>();
+ @JsonProperty("serviceAccountEmail")
+ private String serviceAccountEmail;
+ @JsonProperty("skipServiceCheck")
+ private Boolean skipServiceCheck;
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public GCPProviderSpec() {
+ }
+
+ public GCPProviderSpec(String apiVersion, String audience, String kind, List permissions, List predefinedRoles, String serviceAccountEmail, Boolean skipServiceCheck) {
+ super();
+ this.apiVersion = apiVersion;
+ this.audience = audience;
+ this.kind = kind;
+ this.permissions = permissions;
+ this.predefinedRoles = predefinedRoles;
+ this.serviceAccountEmail = serviceAccountEmail;
+ this.skipServiceCheck = skipServiceCheck;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ @JsonProperty("audience")
+ public String getAudience() {
+ return audience;
+ }
+
+ @JsonProperty("audience")
+ public void setAudience(String audience) {
+ this.audience = audience;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonProperty("permissions")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ public List getPermissions() {
+ return permissions;
+ }
+
+ @JsonProperty("permissions")
+ public void setPermissions(List permissions) {
+ this.permissions = permissions;
+ }
+
+ @JsonProperty("predefinedRoles")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ public List getPredefinedRoles() {
+ return predefinedRoles;
+ }
+
+ @JsonProperty("predefinedRoles")
+ public void setPredefinedRoles(List predefinedRoles) {
+ this.predefinedRoles = predefinedRoles;
+ }
+
+ @JsonProperty("serviceAccountEmail")
+ public String getServiceAccountEmail() {
+ return serviceAccountEmail;
+ }
+
+ @JsonProperty("serviceAccountEmail")
+ public void setServiceAccountEmail(String serviceAccountEmail) {
+ this.serviceAccountEmail = serviceAccountEmail;
+ }
+
+ @JsonProperty("skipServiceCheck")
+ public Boolean getSkipServiceCheck() {
+ return skipServiceCheck;
+ }
+
+ @JsonProperty("skipServiceCheck")
+ public void setSkipServiceCheck(Boolean skipServiceCheck) {
+ this.skipServiceCheck = skipServiceCheck;
+ }
+
+ @JsonIgnore
+ public GCPProviderSpecBuilder edit() {
+ return new GCPProviderSpecBuilder(this);
+ }
+
+ @JsonIgnore
+ public GCPProviderSpecBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/GCPProviderStatus.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/GCPProviderStatus.java
new file mode 100644
index 00000000000..3b3b6e002a9
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/GCPProviderStatus.java
@@ -0,0 +1,190 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind",
+ "roleID",
+ "serviceAccountID"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class GCPProviderStatus implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "GCPProviderStatus";
+ @JsonProperty("roleID")
+ private String roleID;
+ @JsonProperty("serviceAccountID")
+ private String serviceAccountID;
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public GCPProviderStatus() {
+ }
+
+ public GCPProviderStatus(String apiVersion, String kind, String roleID, String serviceAccountID) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ this.roleID = roleID;
+ this.serviceAccountID = serviceAccountID;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonProperty("roleID")
+ public String getRoleID() {
+ return roleID;
+ }
+
+ @JsonProperty("roleID")
+ public void setRoleID(String roleID) {
+ this.roleID = roleID;
+ }
+
+ @JsonProperty("serviceAccountID")
+ public String getServiceAccountID() {
+ return serviceAccountID;
+ }
+
+ @JsonProperty("serviceAccountID")
+ public void setServiceAccountID(String serviceAccountID) {
+ this.serviceAccountID = serviceAccountID;
+ }
+
+ @JsonIgnore
+ public GCPProviderStatusBuilder edit() {
+ return new GCPProviderStatusBuilder(this);
+ }
+
+ @JsonIgnore
+ public GCPProviderStatusBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/IBMCloudPowerVSProviderSpec.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/IBMCloudPowerVSProviderSpec.java
new file mode 100644
index 00000000000..c012891dd69
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/IBMCloudPowerVSProviderSpec.java
@@ -0,0 +1,180 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind",
+ "policies"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class IBMCloudPowerVSProviderSpec implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "IBMCloudPowerVSProviderSpec";
+ @JsonProperty("policies")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ private List policies = new ArrayList<>();
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public IBMCloudPowerVSProviderSpec() {
+ }
+
+ public IBMCloudPowerVSProviderSpec(String apiVersion, String kind, List policies) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ this.policies = policies;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonProperty("policies")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ public List getPolicies() {
+ return policies;
+ }
+
+ @JsonProperty("policies")
+ public void setPolicies(List policies) {
+ this.policies = policies;
+ }
+
+ @JsonIgnore
+ public IBMCloudPowerVSProviderSpecBuilder edit() {
+ return new IBMCloudPowerVSProviderSpecBuilder(this);
+ }
+
+ @JsonIgnore
+ public IBMCloudPowerVSProviderSpecBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/IBMCloudPowerVSProviderStatus.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/IBMCloudPowerVSProviderStatus.java
new file mode 100644
index 00000000000..524090a827f
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/IBMCloudPowerVSProviderStatus.java
@@ -0,0 +1,162 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class IBMCloudPowerVSProviderStatus implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "IBMCloudPowerVSProviderStatus";
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public IBMCloudPowerVSProviderStatus() {
+ }
+
+ public IBMCloudPowerVSProviderStatus(String apiVersion, String kind) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonIgnore
+ public IBMCloudPowerVSProviderStatusBuilder edit() {
+ return new IBMCloudPowerVSProviderStatusBuilder(this);
+ }
+
+ @JsonIgnore
+ public IBMCloudPowerVSProviderStatusBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/IBMCloudProviderSpec.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/IBMCloudProviderSpec.java
new file mode 100644
index 00000000000..458055eec02
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/IBMCloudProviderSpec.java
@@ -0,0 +1,180 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind",
+ "policies"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class IBMCloudProviderSpec implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "IBMCloudProviderSpec";
+ @JsonProperty("policies")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ private List policies = new ArrayList<>();
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public IBMCloudProviderSpec() {
+ }
+
+ public IBMCloudProviderSpec(String apiVersion, String kind, List policies) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ this.policies = policies;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonProperty("policies")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ public List getPolicies() {
+ return policies;
+ }
+
+ @JsonProperty("policies")
+ public void setPolicies(List policies) {
+ this.policies = policies;
+ }
+
+ @JsonIgnore
+ public IBMCloudProviderSpecBuilder edit() {
+ return new IBMCloudProviderSpecBuilder(this);
+ }
+
+ @JsonIgnore
+ public IBMCloudProviderSpecBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/IBMCloudProviderStatus.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/IBMCloudProviderStatus.java
new file mode 100644
index 00000000000..911cfa43b94
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/IBMCloudProviderStatus.java
@@ -0,0 +1,162 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class IBMCloudProviderStatus implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "IBMCloudProviderStatus";
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public IBMCloudProviderStatus() {
+ }
+
+ public IBMCloudProviderStatus(String apiVersion, String kind) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonIgnore
+ public IBMCloudProviderStatusBuilder edit() {
+ return new IBMCloudProviderStatusBuilder(this);
+ }
+
+ @JsonIgnore
+ public IBMCloudProviderStatusBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/KubevirtProviderSpec.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/KubevirtProviderSpec.java
new file mode 100644
index 00000000000..65aa2d493ea
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/KubevirtProviderSpec.java
@@ -0,0 +1,162 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class KubevirtProviderSpec implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "KubevirtProviderSpec";
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public KubevirtProviderSpec() {
+ }
+
+ public KubevirtProviderSpec(String apiVersion, String kind) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonIgnore
+ public KubevirtProviderSpecBuilder edit() {
+ return new KubevirtProviderSpecBuilder(this);
+ }
+
+ @JsonIgnore
+ public KubevirtProviderSpecBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/KubevirtProviderStatus.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/KubevirtProviderStatus.java
new file mode 100644
index 00000000000..42bae061f8c
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/KubevirtProviderStatus.java
@@ -0,0 +1,162 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class KubevirtProviderStatus implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "KubevirtProviderStatus";
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public KubevirtProviderStatus() {
+ }
+
+ public KubevirtProviderStatus(String apiVersion, String kind) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonIgnore
+ public KubevirtProviderStatusBuilder edit() {
+ return new KubevirtProviderStatusBuilder(this);
+ }
+
+ @JsonIgnore
+ public KubevirtProviderStatusBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/NutanixProviderSpec.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/NutanixProviderSpec.java
new file mode 100644
index 00000000000..94aea3d9aa6
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/NutanixProviderSpec.java
@@ -0,0 +1,162 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class NutanixProviderSpec implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "NutanixProviderSpec";
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public NutanixProviderSpec() {
+ }
+
+ public NutanixProviderSpec(String apiVersion, String kind) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonIgnore
+ public NutanixProviderSpecBuilder edit() {
+ return new NutanixProviderSpecBuilder(this);
+ }
+
+ @JsonIgnore
+ public NutanixProviderSpecBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/NutanixProviderStatus.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/NutanixProviderStatus.java
new file mode 100644
index 00000000000..70e9552232d
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/NutanixProviderStatus.java
@@ -0,0 +1,162 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class NutanixProviderStatus implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "NutanixProviderStatus";
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public NutanixProviderStatus() {
+ }
+
+ public NutanixProviderStatus(String apiVersion, String kind) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonIgnore
+ public NutanixProviderStatusBuilder edit() {
+ return new NutanixProviderStatusBuilder(this);
+ }
+
+ @JsonIgnore
+ public NutanixProviderStatusBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/OpenStackProviderSpec.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/OpenStackProviderSpec.java
new file mode 100644
index 00000000000..5d32b40cc46
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/OpenStackProviderSpec.java
@@ -0,0 +1,162 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class OpenStackProviderSpec implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "OpenStackProviderSpec";
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public OpenStackProviderSpec() {
+ }
+
+ public OpenStackProviderSpec(String apiVersion, String kind) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonIgnore
+ public OpenStackProviderSpecBuilder edit() {
+ return new OpenStackProviderSpecBuilder(this);
+ }
+
+ @JsonIgnore
+ public OpenStackProviderSpecBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/OpenStackProviderStatus.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/OpenStackProviderStatus.java
new file mode 100644
index 00000000000..0978684c674
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/OpenStackProviderStatus.java
@@ -0,0 +1,162 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class OpenStackProviderStatus implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "OpenStackProviderStatus";
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public OpenStackProviderStatus() {
+ }
+
+ public OpenStackProviderStatus(String apiVersion, String kind) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonIgnore
+ public OpenStackProviderStatusBuilder edit() {
+ return new OpenStackProviderStatusBuilder(this);
+ }
+
+ @JsonIgnore
+ public OpenStackProviderStatusBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/OvirtProviderSpec.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/OvirtProviderSpec.java
new file mode 100644
index 00000000000..d7415de797c
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/OvirtProviderSpec.java
@@ -0,0 +1,162 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class OvirtProviderSpec implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "OvirtProviderSpec";
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public OvirtProviderSpec() {
+ }
+
+ public OvirtProviderSpec(String apiVersion, String kind) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonIgnore
+ public OvirtProviderSpecBuilder edit() {
+ return new OvirtProviderSpecBuilder(this);
+ }
+
+ @JsonIgnore
+ public OvirtProviderSpecBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/OvirtProviderStatus.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/OvirtProviderStatus.java
new file mode 100644
index 00000000000..9370d5f9402
--- /dev/null
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/OvirtProviderStatus.java
@@ -0,0 +1,162 @@
+
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.annotation.Generated;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonPropertyOrder;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import io.fabric8.kubernetes.api.builder.Editable;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.KubernetesResource;
+import io.fabric8.kubernetes.api.model.LabelSelector;
+import io.fabric8.kubernetes.api.model.LocalObjectReference;
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.api.model.ObjectMeta;
+import io.fabric8.kubernetes.api.model.ObjectReference;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PodTemplateSpec;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Version;
+import io.sundr.builder.annotations.Buildable;
+import io.sundr.builder.annotations.BuildableReference;
+import io.sundr.transform.annotations.TemplateTransformation;
+import io.sundr.transform.annotations.TemplateTransformations;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+import lombok.experimental.Accessors;
+
+@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class)
+@JsonInclude(JsonInclude.Include.NON_NULL)
+@JsonPropertyOrder({
+ "apiVersion",
+ "kind"
+})
+@ToString
+@EqualsAndHashCode
+@Accessors(prefix = {
+ "_",
+ ""
+})
+@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = {
+ @BuildableReference(ObjectMeta.class),
+ @BuildableReference(LabelSelector.class),
+ @BuildableReference(Container.class),
+ @BuildableReference(PodTemplateSpec.class),
+ @BuildableReference(ResourceRequirements.class),
+ @BuildableReference(IntOrString.class),
+ @BuildableReference(ObjectReference.class),
+ @BuildableReference(LocalObjectReference.class),
+ @BuildableReference(PersistentVolumeClaim.class)
+})
+@TemplateTransformations({
+ @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true)
+})
+@Version("v1")
+@Group("cloudcredential.openshift.io")
+@Generated("jsonschema2pojo")
+public class OvirtProviderStatus implements Editable , KubernetesResource, Namespaced
+{
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ private String apiVersion = "cloudcredential.openshift.io/v1";
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ private String kind = "OvirtProviderStatus";
+ @JsonIgnore
+ private Map additionalProperties = new LinkedHashMap();
+
+ /**
+ * No args constructor for use in serialization
+ *
+ */
+ public OvirtProviderStatus() {
+ }
+
+ public OvirtProviderStatus(String apiVersion, String kind) {
+ super();
+ this.apiVersion = apiVersion;
+ this.kind = kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public String getApiVersion() {
+ return apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("apiVersion")
+ public void setApiVersion(String apiVersion) {
+ this.apiVersion = apiVersion;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public String getKind() {
+ return kind;
+ }
+
+ /**
+ *
+ * (Required)
+ *
+ */
+ @JsonProperty("kind")
+ public void setKind(String kind) {
+ this.kind = kind;
+ }
+
+ @JsonIgnore
+ public OvirtProviderStatusBuilder edit() {
+ return new OvirtProviderStatusBuilder(this);
+ }
+
+ @JsonIgnore
+ public OvirtProviderStatusBuilder toBuilder() {
+ return edit();
+ }
+
+ @JsonAnyGetter
+ public Map getAdditionalProperties() {
+ return this.additionalProperties;
+ }
+
+ @JsonAnySetter
+ public void setAdditionalProperty(String name, Object value) {
+ this.additionalProperties.put(name, value);
+ }
+
+ public void setAdditionalProperties(Map additionalProperties) {
+ this.additionalProperties = additionalProperties;
+ }
+
+}
diff --git a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/metal3/v1alpha1/HostFirmwareSettingsStatusSchema.java b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/ResourceAttribute.java
similarity index 75%
rename from kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/metal3/v1alpha1/HostFirmwareSettingsStatusSchema.java
rename to kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/ResourceAttribute.java
index 2004b15bdd6..8594d350530 100644
--- a/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/metal3/v1alpha1/HostFirmwareSettingsStatusSchema.java
+++ b/kubernetes-model-generator/openshift-model-miscellaneous/src/generated/java/io/fabric8/openshift/api/model/miscellaneous/cloudcredential/v1/ResourceAttribute.java
@@ -1,5 +1,5 @@
-package io.fabric8.openshift.api.model.miscellaneous.metal3.v1alpha1;
+package io.fabric8.openshift.api.model.miscellaneous.cloudcredential.v1;
import java.util.LinkedHashMap;
import java.util.Map;
@@ -32,7 +32,8 @@
@JsonInclude(JsonInclude.Include.NON_NULL)
@JsonPropertyOrder({
"name",
- "namespace"
+ "operator",
+ "value"
})
@ToString
@EqualsAndHashCode
@@ -52,13 +53,15 @@
@BuildableReference(PersistentVolumeClaim.class)
})
@Generated("jsonschema2pojo")
-public class HostFirmwareSettingsStatusSchema implements Editable , KubernetesResource
+public class ResourceAttribute implements Editable , KubernetesResource
{
@JsonProperty("name")
private String name;
- @JsonProperty("namespace")
- private String namespace;
+ @JsonProperty("operator")
+ private String operator;
+ @JsonProperty("value")
+ private String value;
@JsonIgnore
private Map additionalProperties = new LinkedHashMap();
@@ -66,13 +69,14 @@ public class HostFirmwareSettingsStatusSchema implements Editable , KubernetesResource
+public class RoleBinding implements Editable , KubernetesResource
{
- @JsonProperty("name")
- private String name;
+ @JsonProperty("role")
+ private String role;
@JsonIgnore
private Map additionalProperties = new LinkedHashMap();
@@ -63,31 +63,31 @@ public class ProjectHelmChartRepositorySpecCCCa implements Editable , KubernetesResource
+public class StatementEntry implements Editable , KubernetesResource
{
- @JsonProperty("group")
- private String group;
- @JsonProperty("hash")
- private String hash;
- @JsonProperty("lastGeneration")
- private Long lastGeneration;
- @JsonProperty("name")
- private String name;
- @JsonProperty("namespace")
- private String namespace;
+ @JsonProperty("action")
+ @JsonInclude(JsonInclude.Include.NON_EMPTY)
+ private List