Update dependency fluxcd/flux2 to v2.6.1
This commit is contained in:
parent
de229e6473
commit
8b71a08859
@ -1,6 +1,6 @@
|
||||
---
|
||||
# This manifest was generated by flux. DO NOT EDIT.
|
||||
# Flux Version: v2.5.1
|
||||
# Flux Version: v2.6.1
|
||||
# Components: source-controller,kustomize-controller,helm-controller,notification-controller
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
@ -8,7 +8,7 @@ metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
pod-security.kubernetes.io/warn: restricted
|
||||
pod-security.kubernetes.io/warn-version: latest
|
||||
name: flux-system
|
||||
@ -19,7 +19,7 @@ metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: allow-egress
|
||||
namespace: flux-system
|
||||
spec:
|
||||
@ -39,7 +39,7 @@ metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: allow-scraping
|
||||
namespace: flux-system
|
||||
spec:
|
||||
@ -59,7 +59,7 @@ metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: allow-webhooks
|
||||
namespace: flux-system
|
||||
spec:
|
||||
@ -78,7 +78,7 @@ metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: critical-pods-flux-system
|
||||
namespace: flux-system
|
||||
spec:
|
||||
@ -98,7 +98,7 @@ metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: crd-controller-flux-system
|
||||
rules:
|
||||
- apiGroups:
|
||||
@ -181,6 +181,12 @@ rules:
|
||||
- update
|
||||
- patch
|
||||
- delete
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- serviceaccounts/token
|
||||
verbs:
|
||||
- create
|
||||
- nonResourceURLs:
|
||||
- /livez/ping
|
||||
verbs:
|
||||
@ -192,7 +198,7 @@ metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
||||
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
||||
name: flux-edit-flux-system
|
||||
@ -218,7 +224,7 @@ metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
||||
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
||||
rbac.authorization.k8s.io/aggregate-to-view: "true"
|
||||
@ -243,7 +249,7 @@ metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: cluster-reconciler-flux-system
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
@ -263,7 +269,7 @@ metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: crd-controller-flux-system
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
@ -298,7 +304,7 @@ metadata:
|
||||
app.kubernetes.io/component: source-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: buckets.source.toolkit.fluxcd.io
|
||||
spec:
|
||||
group: source.toolkit.fluxcd.io
|
||||
@ -1287,7 +1293,7 @@ metadata:
|
||||
app.kubernetes.io/component: source-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: gitrepositories.source.toolkit.fluxcd.io
|
||||
spec:
|
||||
group: source.toolkit.fluxcd.io
|
||||
@ -1458,6 +1464,14 @@ spec:
|
||||
required:
|
||||
- name
|
||||
type: object
|
||||
sparseCheckout:
|
||||
description: |-
|
||||
SparseCheckout specifies a list of directories to checkout when cloning
|
||||
the repository. If specified, only these directories are included in the
|
||||
Artifact produced for this GitRepository.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
suspend:
|
||||
description: |-
|
||||
Suspend tells the controller to suspend the reconciliation of this
|
||||
@ -1727,6 +1741,13 @@ spec:
|
||||
ObservedRecurseSubmodules is the observed resource submodules
|
||||
configuration used to produce the current Artifact.
|
||||
type: boolean
|
||||
observedSparseCheckout:
|
||||
description: |-
|
||||
ObservedSparseCheckout is the observed list of directories used to
|
||||
produce the current Artifact.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
sourceVerificationMode:
|
||||
description: |-
|
||||
SourceVerificationMode is the last used verification mode indicating
|
||||
@ -2550,7 +2571,7 @@ metadata:
|
||||
app.kubernetes.io/component: source-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: helmcharts.source.toolkit.fluxcd.io
|
||||
spec:
|
||||
group: source.toolkit.fluxcd.io
|
||||
@ -3531,7 +3552,7 @@ metadata:
|
||||
app.kubernetes.io/component: source-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: helmrepositories.source.toolkit.fluxcd.io
|
||||
spec:
|
||||
group: source.toolkit.fluxcd.io
|
||||
@ -4380,7 +4401,7 @@ metadata:
|
||||
app.kubernetes.io/component: source-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: ocirepositories.source.toolkit.fluxcd.io
|
||||
spec:
|
||||
group: source.toolkit.fluxcd.io
|
||||
@ -4406,6 +4427,400 @@ spec:
|
||||
- jsonPath: .metadata.creationTimestamp
|
||||
name: Age
|
||||
type: date
|
||||
name: v1
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: OCIRepository is the Schema for the ocirepositories API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: |-
|
||||
APIVersion defines the versioned schema of this representation of an object.
|
||||
Servers should convert recognized schemas to the latest internal value, and
|
||||
may reject unrecognized values.
|
||||
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Kind is a string value representing the REST resource this object represents.
|
||||
Servers may infer this from the endpoint the client submits requests to.
|
||||
Cannot be updated.
|
||||
In CamelCase.
|
||||
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: OCIRepositorySpec defines the desired state of OCIRepository
|
||||
properties:
|
||||
certSecretRef:
|
||||
description: |-
|
||||
CertSecretRef can be given the name of a Secret containing
|
||||
either or both of
|
||||
|
||||
- a PEM-encoded client certificate (`tls.crt`) and private
|
||||
key (`tls.key`);
|
||||
- a PEM-encoded CA certificate (`ca.crt`)
|
||||
|
||||
and whichever are supplied, will be used for connecting to the
|
||||
registry. The client cert and key are useful if you are
|
||||
authenticating with a certificate; the CA cert is useful if
|
||||
you are using a self-signed server certificate. The Secret must
|
||||
be of type `Opaque` or `kubernetes.io/tls`.
|
||||
properties:
|
||||
name:
|
||||
description: Name of the referent.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
type: object
|
||||
ignore:
|
||||
description: |-
|
||||
Ignore overrides the set of excluded patterns in the .sourceignore format
|
||||
(which is the same as .gitignore). If not provided, a default will be used,
|
||||
consult the documentation for your version to find out what those are.
|
||||
type: string
|
||||
insecure:
|
||||
description: Insecure allows connecting to a non-TLS HTTP container
|
||||
registry.
|
||||
type: boolean
|
||||
interval:
|
||||
description: |-
|
||||
Interval at which the OCIRepository URL is checked for updates.
|
||||
This interval is approximate and may be subject to jitter to ensure
|
||||
efficient use of resources.
|
||||
pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
|
||||
type: string
|
||||
layerSelector:
|
||||
description: |-
|
||||
LayerSelector specifies which layer should be extracted from the OCI artifact.
|
||||
When not specified, the first layer found in the artifact is selected.
|
||||
properties:
|
||||
mediaType:
|
||||
description: |-
|
||||
MediaType specifies the OCI media type of the layer
|
||||
which should be extracted from the OCI Artifact. The
|
||||
first layer matching this type is selected.
|
||||
type: string
|
||||
operation:
|
||||
description: |-
|
||||
Operation specifies how the selected layer should be processed.
|
||||
By default, the layer compressed content is extracted to storage.
|
||||
When the operation is set to 'copy', the layer compressed content
|
||||
is persisted to storage as it is.
|
||||
enum:
|
||||
- extract
|
||||
- copy
|
||||
type: string
|
||||
type: object
|
||||
provider:
|
||||
default: generic
|
||||
description: |-
|
||||
The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'.
|
||||
When not specified, defaults to 'generic'.
|
||||
enum:
|
||||
- generic
|
||||
- aws
|
||||
- azure
|
||||
- gcp
|
||||
type: string
|
||||
proxySecretRef:
|
||||
description: |-
|
||||
ProxySecretRef specifies the Secret containing the proxy configuration
|
||||
to use while communicating with the container registry.
|
||||
properties:
|
||||
name:
|
||||
description: Name of the referent.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
type: object
|
||||
ref:
|
||||
description: |-
|
||||
The OCI reference to pull and monitor for changes,
|
||||
defaults to the latest tag.
|
||||
properties:
|
||||
digest:
|
||||
description: |-
|
||||
Digest is the image digest to pull, takes precedence over SemVer.
|
||||
The value should be in the format 'sha256:<HASH>'.
|
||||
type: string
|
||||
semver:
|
||||
description: |-
|
||||
SemVer is the range of tags to pull selecting the latest within
|
||||
the range, takes precedence over Tag.
|
||||
type: string
|
||||
semverFilter:
|
||||
description: SemverFilter is a regex pattern to filter the tags
|
||||
within the SemVer range.
|
||||
type: string
|
||||
tag:
|
||||
description: Tag is the image tag to pull, defaults to latest.
|
||||
type: string
|
||||
type: object
|
||||
secretRef:
|
||||
description: |-
|
||||
SecretRef contains the secret name containing the registry login
|
||||
credentials to resolve image metadata.
|
||||
The secret must be of type kubernetes.io/dockerconfigjson.
|
||||
properties:
|
||||
name:
|
||||
description: Name of the referent.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
type: object
|
||||
serviceAccountName:
|
||||
description: |-
|
||||
ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate
|
||||
the image pull if the service account has attached pull secrets. For more information:
|
||||
https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account
|
||||
type: string
|
||||
suspend:
|
||||
description: This flag tells the controller to suspend the reconciliation
|
||||
of this source.
|
||||
type: boolean
|
||||
timeout:
|
||||
default: 60s
|
||||
description: The timeout for remote OCI Repository operations like
|
||||
pulling, defaults to 60s.
|
||||
pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
|
||||
type: string
|
||||
url:
|
||||
description: |-
|
||||
URL is a reference to an OCI artifact repository hosted
|
||||
on a remote container registry.
|
||||
pattern: ^oci://.*$
|
||||
type: string
|
||||
verify:
|
||||
description: |-
|
||||
Verify contains the secret name containing the trusted public keys
|
||||
used to verify the signature and specifies which provider to use to check
|
||||
whether OCI image is authentic.
|
||||
properties:
|
||||
matchOIDCIdentity:
|
||||
description: |-
|
||||
MatchOIDCIdentity specifies the identity matching criteria to use
|
||||
while verifying an OCI artifact which was signed using Cosign keyless
|
||||
signing. The artifact's identity is deemed to be verified if any of the
|
||||
specified matchers match against the identity.
|
||||
items:
|
||||
description: |-
|
||||
OIDCIdentityMatch specifies options for verifying the certificate identity,
|
||||
i.e. the issuer and the subject of the certificate.
|
||||
properties:
|
||||
issuer:
|
||||
description: |-
|
||||
Issuer specifies the regex pattern to match against to verify
|
||||
the OIDC issuer in the Fulcio certificate. The pattern must be a
|
||||
valid Go regular expression.
|
||||
type: string
|
||||
subject:
|
||||
description: |-
|
||||
Subject specifies the regex pattern to match against to verify
|
||||
the identity subject in the Fulcio certificate. The pattern must
|
||||
be a valid Go regular expression.
|
||||
type: string
|
||||
required:
|
||||
- issuer
|
||||
- subject
|
||||
type: object
|
||||
type: array
|
||||
provider:
|
||||
default: cosign
|
||||
description: Provider specifies the technology used to sign the
|
||||
OCI Artifact.
|
||||
enum:
|
||||
- cosign
|
||||
- notation
|
||||
type: string
|
||||
secretRef:
|
||||
description: |-
|
||||
SecretRef specifies the Kubernetes Secret containing the
|
||||
trusted public keys.
|
||||
properties:
|
||||
name:
|
||||
description: Name of the referent.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
type: object
|
||||
required:
|
||||
- provider
|
||||
type: object
|
||||
required:
|
||||
- interval
|
||||
- url
|
||||
type: object
|
||||
status:
|
||||
default:
|
||||
observedGeneration: -1
|
||||
description: OCIRepositoryStatus defines the observed state of OCIRepository
|
||||
properties:
|
||||
artifact:
|
||||
description: Artifact represents the output of the last successful
|
||||
OCI Repository sync.
|
||||
properties:
|
||||
digest:
|
||||
description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
|
||||
pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
|
||||
type: string
|
||||
lastUpdateTime:
|
||||
description: |-
|
||||
LastUpdateTime is the timestamp corresponding to the last update of the
|
||||
Artifact.
|
||||
format: date-time
|
||||
type: string
|
||||
metadata:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Metadata holds upstream information such as OCI annotations.
|
||||
type: object
|
||||
path:
|
||||
description: |-
|
||||
Path is the relative file path of the Artifact. It can be used to locate
|
||||
the file in the root of the Artifact storage on the local file system of
|
||||
the controller managing the Source.
|
||||
type: string
|
||||
revision:
|
||||
description: |-
|
||||
Revision is a human-readable identifier traceable in the origin source
|
||||
system. It can be a Git commit SHA, Git tag, a Helm chart version, etc.
|
||||
type: string
|
||||
size:
|
||||
description: Size is the number of bytes in the file.
|
||||
format: int64
|
||||
type: integer
|
||||
url:
|
||||
description: |-
|
||||
URL is the HTTP address of the Artifact as exposed by the controller
|
||||
managing the Source. It can be used to retrieve the Artifact for
|
||||
consumption, e.g. by another controller applying the Artifact contents.
|
||||
type: string
|
||||
required:
|
||||
- lastUpdateTime
|
||||
- path
|
||||
- revision
|
||||
- url
|
||||
type: object
|
||||
conditions:
|
||||
description: Conditions holds the conditions for the OCIRepository.
|
||||
items:
|
||||
description: Condition contains details for one aspect of the current
|
||||
state of this API Resource.
|
||||
properties:
|
||||
lastTransitionTime:
|
||||
description: |-
|
||||
lastTransitionTime is the last time the condition transitioned from one status to another.
|
||||
This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
|
||||
format: date-time
|
||||
type: string
|
||||
message:
|
||||
description: |-
|
||||
message is a human readable message indicating details about the transition.
|
||||
This may be an empty string.
|
||||
maxLength: 32768
|
||||
type: string
|
||||
observedGeneration:
|
||||
description: |-
|
||||
observedGeneration represents the .metadata.generation that the condition was set based upon.
|
||||
For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
|
||||
with respect to the current state of the instance.
|
||||
format: int64
|
||||
minimum: 0
|
||||
type: integer
|
||||
reason:
|
||||
description: |-
|
||||
reason contains a programmatic identifier indicating the reason for the condition's last transition.
|
||||
Producers of specific condition types may define expected values and meanings for this field,
|
||||
and whether the values are considered a guaranteed API.
|
||||
The value should be a CamelCase string.
|
||||
This field may not be empty.
|
||||
maxLength: 1024
|
||||
minLength: 1
|
||||
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
|
||||
type: string
|
||||
status:
|
||||
description: status of the condition, one of True, False, Unknown.
|
||||
enum:
|
||||
- "True"
|
||||
- "False"
|
||||
- Unknown
|
||||
type: string
|
||||
type:
|
||||
description: type of condition in CamelCase or in foo.example.com/CamelCase.
|
||||
maxLength: 316
|
||||
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
|
||||
type: string
|
||||
required:
|
||||
- lastTransitionTime
|
||||
- message
|
||||
- reason
|
||||
- status
|
||||
- type
|
||||
type: object
|
||||
type: array
|
||||
lastHandledReconcileAt:
|
||||
description: |-
|
||||
LastHandledReconcileAt holds the value of the most recent
|
||||
reconcile request value, so a change of the annotation value
|
||||
can be detected.
|
||||
type: string
|
||||
observedGeneration:
|
||||
description: ObservedGeneration is the last observed generation.
|
||||
format: int64
|
||||
type: integer
|
||||
observedIgnore:
|
||||
description: |-
|
||||
ObservedIgnore is the observed exclusion patterns used for constructing
|
||||
the source artifact.
|
||||
type: string
|
||||
observedLayerSelector:
|
||||
description: |-
|
||||
ObservedLayerSelector is the observed layer selector used for constructing
|
||||
the source artifact.
|
||||
properties:
|
||||
mediaType:
|
||||
description: |-
|
||||
MediaType specifies the OCI media type of the layer
|
||||
which should be extracted from the OCI Artifact. The
|
||||
first layer matching this type is selected.
|
||||
type: string
|
||||
operation:
|
||||
description: |-
|
||||
Operation specifies how the selected layer should be processed.
|
||||
By default, the layer compressed content is extracted to storage.
|
||||
When the operation is set to 'copy', the layer compressed content
|
||||
is persisted to storage as it is.
|
||||
enum:
|
||||
- extract
|
||||
- copy
|
||||
type: string
|
||||
type: object
|
||||
url:
|
||||
description: URL is the download link for the artifact output of the
|
||||
last OCI Repository sync.
|
||||
type: string
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
subresources:
|
||||
status: {}
|
||||
- additionalPrinterColumns:
|
||||
- jsonPath: .spec.url
|
||||
name: URL
|
||||
type: string
|
||||
- jsonPath: .status.conditions[?(@.type=="Ready")].status
|
||||
name: Ready
|
||||
type: string
|
||||
- jsonPath: .status.conditions[?(@.type=="Ready")].message
|
||||
name: Status
|
||||
type: string
|
||||
- jsonPath: .metadata.creationTimestamp
|
||||
name: Age
|
||||
type: date
|
||||
deprecated: true
|
||||
deprecationWarning: v1beta2 OCIRepository is deprecated, upgrade to v1
|
||||
name: v1beta2
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
@ -4799,7 +5214,7 @@ spec:
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
storage: false
|
||||
subresources:
|
||||
status: {}
|
||||
---
|
||||
@ -4810,7 +5225,7 @@ metadata:
|
||||
app.kubernetes.io/component: source-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: source-controller
|
||||
namespace: flux-system
|
||||
---
|
||||
@ -4821,7 +5236,7 @@ metadata:
|
||||
app.kubernetes.io/component: source-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
control-plane: controller
|
||||
name: source-controller
|
||||
namespace: flux-system
|
||||
@ -4842,7 +5257,7 @@ metadata:
|
||||
app.kubernetes.io/component: source-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
control-plane: controller
|
||||
name: source-controller
|
||||
namespace: flux-system
|
||||
@ -4887,7 +5302,7 @@ spec:
|
||||
resourceFieldRef:
|
||||
containerName: manager
|
||||
resource: limits.memory
|
||||
image: ghcr.io/fluxcd/source-controller:v1.5.0
|
||||
image: ghcr.io/fluxcd/source-controller:v1.6.0
|
||||
imagePullPolicy: IfNotPresent
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
@ -4951,7 +5366,7 @@ metadata:
|
||||
app.kubernetes.io/component: kustomize-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: kustomizations.kustomize.toolkit.fluxcd.io
|
||||
spec:
|
||||
group: kustomize.toolkit.fluxcd.io
|
||||
@ -5034,8 +5449,11 @@ spec:
|
||||
- sops
|
||||
type: string
|
||||
secretRef:
|
||||
description: The secret name containing the private OpenPGP keys
|
||||
used for decryption.
|
||||
description: |-
|
||||
The secret name containing the private OpenPGP keys used for decryption.
|
||||
A static credential for a cloud provider defined inside the Secret
|
||||
takes priority to secret-less authentication with the ServiceAccountName
|
||||
field.
|
||||
properties:
|
||||
name:
|
||||
description: Name of the referent.
|
||||
@ -5043,6 +5461,14 @@ spec:
|
||||
required:
|
||||
- name
|
||||
type: object
|
||||
serviceAccountName:
|
||||
description: |-
|
||||
ServiceAccountName is the name of the service account used to
|
||||
authenticate with KMS services from cloud providers. If a
|
||||
static credential for a given cloud provider is defined
|
||||
inside the Secret referenced by SecretRef, that static
|
||||
credential takes priority.
|
||||
type: string
|
||||
required:
|
||||
- provider
|
||||
type: object
|
||||
@ -5050,11 +5476,12 @@ spec:
|
||||
description: |-
|
||||
DeletionPolicy can be used to control garbage collection when this
|
||||
Kustomization is deleted. Valid values are ('MirrorPrune', 'Delete',
|
||||
'Orphan'). 'MirrorPrune' mirrors the Prune field (orphan if false,
|
||||
delete if true). Defaults to 'MirrorPrune'.
|
||||
'WaitForTermination', 'Orphan'). 'MirrorPrune' mirrors the Prune field
|
||||
(orphan if false, delete if true). Defaults to 'MirrorPrune'.
|
||||
enum:
|
||||
- MirrorPrune
|
||||
- Delete
|
||||
- WaitForTermination
|
||||
- Orphan
|
||||
type: string
|
||||
dependsOn:
|
||||
@ -6726,7 +7153,7 @@ metadata:
|
||||
app.kubernetes.io/component: kustomize-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: kustomize-controller
|
||||
namespace: flux-system
|
||||
---
|
||||
@ -6737,7 +7164,7 @@ metadata:
|
||||
app.kubernetes.io/component: kustomize-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
control-plane: controller
|
||||
name: kustomize-controller
|
||||
namespace: flux-system
|
||||
@ -6776,7 +7203,7 @@ spec:
|
||||
resourceFieldRef:
|
||||
containerName: manager
|
||||
resource: limits.memory
|
||||
image: ghcr.io/fluxcd/kustomize-controller:v1.5.1
|
||||
image: ghcr.io/fluxcd/kustomize-controller:v1.6.0
|
||||
imagePullPolicy: IfNotPresent
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
@ -6833,7 +7260,7 @@ metadata:
|
||||
app.kubernetes.io/component: helm-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: helmreleases.helm.toolkit.fluxcd.io
|
||||
spec:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
@ -10528,7 +10955,7 @@ metadata:
|
||||
app.kubernetes.io/component: helm-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: helm-controller
|
||||
namespace: flux-system
|
||||
---
|
||||
@ -10539,7 +10966,7 @@ metadata:
|
||||
app.kubernetes.io/component: helm-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
control-plane: controller
|
||||
name: helm-controller
|
||||
namespace: flux-system
|
||||
@ -10578,7 +11005,7 @@ spec:
|
||||
resourceFieldRef:
|
||||
containerName: manager
|
||||
resource: limits.memory
|
||||
image: ghcr.io/fluxcd/helm-controller:v1.2.0
|
||||
image: ghcr.io/fluxcd/helm-controller:v1.3.0
|
||||
imagePullPolicy: IfNotPresent
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
@ -10635,7 +11062,7 @@ metadata:
|
||||
app.kubernetes.io/component: notification-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: alerts.notification.toolkit.fluxcd.io
|
||||
spec:
|
||||
group: notification.toolkit.fluxcd.io
|
||||
@ -10934,12 +11361,12 @@ spec:
|
||||
description: |-
|
||||
Name of the referent
|
||||
If multiple resources are targeted `*` may be set.
|
||||
maxLength: 53
|
||||
maxLength: 253
|
||||
minLength: 1
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace of the referent
|
||||
maxLength: 53
|
||||
maxLength: 253
|
||||
minLength: 1
|
||||
type: string
|
||||
required:
|
||||
@ -11151,12 +11578,12 @@ spec:
|
||||
description: |-
|
||||
Name of the referent
|
||||
If multiple resources are targeted `*` may be set.
|
||||
maxLength: 53
|
||||
maxLength: 253
|
||||
minLength: 1
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace of the referent
|
||||
maxLength: 53
|
||||
maxLength: 253
|
||||
minLength: 1
|
||||
type: string
|
||||
required:
|
||||
@ -11217,7 +11644,7 @@ metadata:
|
||||
app.kubernetes.io/component: notification-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: providers.notification.toolkit.fluxcd.io
|
||||
spec:
|
||||
group: notification.toolkit.fluxcd.io
|
||||
@ -11674,6 +12101,14 @@ spec:
|
||||
should be posted.
|
||||
maxLength: 2048
|
||||
type: string
|
||||
commitStatusExpr:
|
||||
description: |-
|
||||
CommitStatusExpr is a CEL expression that evaluates to a string value
|
||||
that can be used to generate a custom commit status message for use
|
||||
with eligible Provider types (github, gitlab, gitea, bitbucketserver,
|
||||
bitbucket, azuredevops). Supported variables are: event, provider,
|
||||
and alert.
|
||||
type: string
|
||||
interval:
|
||||
description: |-
|
||||
Interval at which to reconcile the Provider with its Secret references.
|
||||
@ -11696,6 +12131,13 @@ spec:
|
||||
required:
|
||||
- name
|
||||
type: object
|
||||
serviceAccountName:
|
||||
description: |-
|
||||
ServiceAccountName is the name of the service account used to
|
||||
authenticate with services from cloud providers. An error is thrown if a
|
||||
static credential is also defined inside the Secret referenced by the
|
||||
SecretRef.
|
||||
type: string
|
||||
suspend:
|
||||
description: |-
|
||||
Suspend tells the controller to suspend subsequent
|
||||
@ -11743,6 +12185,12 @@ spec:
|
||||
required:
|
||||
- type
|
||||
type: object
|
||||
x-kubernetes-validations:
|
||||
- message: spec.commitStatusExpr is only supported for the 'github', 'gitlab',
|
||||
'gitea', 'bitbucketserver', 'bitbucket', 'azuredevops' provider types
|
||||
rule: self.type == 'github' || self.type == 'gitlab' || self.type ==
|
||||
'gitea' || self.type == 'bitbucketserver' || self.type == 'bitbucket'
|
||||
|| self.type == 'azuredevops' || !has(self.commitStatusExpr)
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
@ -11757,7 +12205,7 @@ metadata:
|
||||
app.kubernetes.io/component: notification-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: receivers.notification.toolkit.fluxcd.io
|
||||
spec:
|
||||
group: notification.toolkit.fluxcd.io
|
||||
@ -11863,12 +12311,12 @@ spec:
|
||||
description: |-
|
||||
Name of the referent
|
||||
If multiple resources are targeted `*` may be set.
|
||||
maxLength: 53
|
||||
maxLength: 253
|
||||
minLength: 1
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace of the referent
|
||||
maxLength: 53
|
||||
maxLength: 253
|
||||
minLength: 1
|
||||
type: string
|
||||
required:
|
||||
@ -12290,12 +12738,12 @@ spec:
|
||||
description: |-
|
||||
Name of the referent
|
||||
If multiple resources are targeted `*` may be set.
|
||||
maxLength: 53
|
||||
maxLength: 253
|
||||
minLength: 1
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace of the referent
|
||||
maxLength: 53
|
||||
maxLength: 253
|
||||
minLength: 1
|
||||
type: string
|
||||
required:
|
||||
@ -12439,7 +12887,7 @@ metadata:
|
||||
app.kubernetes.io/component: notification-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
name: notification-controller
|
||||
namespace: flux-system
|
||||
---
|
||||
@ -12450,7 +12898,7 @@ metadata:
|
||||
app.kubernetes.io/component: notification-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
control-plane: controller
|
||||
name: notification-controller
|
||||
namespace: flux-system
|
||||
@ -12471,7 +12919,7 @@ metadata:
|
||||
app.kubernetes.io/component: notification-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
control-plane: controller
|
||||
name: webhook-receiver
|
||||
namespace: flux-system
|
||||
@ -12492,7 +12940,7 @@ metadata:
|
||||
app.kubernetes.io/component: notification-controller
|
||||
app.kubernetes.io/instance: flux-system
|
||||
app.kubernetes.io/part-of: flux
|
||||
app.kubernetes.io/version: v2.5.1
|
||||
app.kubernetes.io/version: v2.6.1
|
||||
control-plane: controller
|
||||
name: notification-controller
|
||||
namespace: flux-system
|
||||
@ -12530,7 +12978,7 @@ spec:
|
||||
resourceFieldRef:
|
||||
containerName: manager
|
||||
resource: limits.memory
|
||||
image: ghcr.io/fluxcd/notification-controller:v1.5.0
|
||||
image: ghcr.io/fluxcd/notification-controller:v1.6.0
|
||||
imagePullPolicy: IfNotPresent
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
|
Loading…
x
Reference in New Issue
Block a user