a094b7d70a
Configure myks env-data with global repoURL pointing to Forgejo repo, switch destination from cluster name to in-cluster server URL, and disable placeholder cluster Secret generation. Add deploy key init Job that generates an SSH keypair, registers it with Forgejo, and creates the ArgoCD repository secret. Switch job images from bitnami/kubectl to alpine/k8s. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
305 lines
14 KiB
YAML
305 lines
14 KiB
YAML
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
|
|
controller-gen.kubebuilder.io/version: v0.17.1
|
|
name: managedsubscriptions.hub.traefik.io
|
|
namespace: traefik
|
|
spec:
|
|
group: hub.traefik.io
|
|
names:
|
|
kind: ManagedSubscription
|
|
listKind: ManagedSubscriptionList
|
|
plural: managedsubscriptions
|
|
singular: managedsubscription
|
|
scope: Namespaced
|
|
versions:
|
|
- name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: |-
|
|
ManagedSubscription defines a Subscription managed by the API manager as the result of a pre-negotiation with its
|
|
API consumers. This subscription grant consuming access to a set of APIs to a set of Applications.
|
|
properties:
|
|
apiVersion:
|
|
description: |-
|
|
APIVersion defines the versioned schema of this representation of an object.
|
|
Servers should convert recognized schemas to the latest internal value, and
|
|
may reject unrecognized values.
|
|
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
|
type: string
|
|
kind:
|
|
description: |-
|
|
Kind is a string value representing the REST resource this object represents.
|
|
Servers may infer this from the endpoint the client submits requests to.
|
|
Cannot be updated.
|
|
In CamelCase.
|
|
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: The desired behavior of this ManagedSubscription.
|
|
properties:
|
|
apiBundles:
|
|
description: |-
|
|
APIBundles defines a set of APIBundle that will be accessible.
|
|
Multiple ManagedSubscriptions can select the same APIBundles.
|
|
items:
|
|
description: APIBundleReference references an APIBundle.
|
|
properties:
|
|
name:
|
|
description: Name of the APIBundle.
|
|
maxLength: 253
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
maxItems: 100
|
|
type: array
|
|
x-kubernetes-validations:
|
|
- message: duplicated apiBundles
|
|
rule: self.all(x, self.exists_one(y, x.name == y.name))
|
|
apiPlan:
|
|
description: APIPlan defines which APIPlan will be used.
|
|
properties:
|
|
name:
|
|
description: Name of the APIPlan.
|
|
maxLength: 253
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
apiSelector:
|
|
description: |-
|
|
APISelector selects the APIs that will be accessible.
|
|
Multiple ManagedSubscriptions can select the same set of APIs.
|
|
This field is optional and follows standard label selector semantics.
|
|
An empty APISelector matches any API.
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: |-
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: |-
|
|
operator represents a key's relationship to a set of values.
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: |-
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
the values array must be empty. This array is replaced during a strategic
|
|
merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
x-kubernetes-list-type: atomic
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-type: atomic
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: |-
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
x-kubernetes-map-type: atomic
|
|
apis:
|
|
description: |-
|
|
APIs defines a set of APIs that will be accessible.
|
|
Multiple ManagedSubscriptions can select the same APIs.
|
|
When combined with APISelector, this set of APIs is appended to the matching APIs.
|
|
items:
|
|
description: APIReference references an API.
|
|
properties:
|
|
name:
|
|
description: Name of the API.
|
|
maxLength: 253
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
maxItems: 100
|
|
type: array
|
|
x-kubernetes-validations:
|
|
- message: duplicated apis
|
|
rule: self.all(x, self.exists_one(y, x.name == y.name))
|
|
applications:
|
|
description: |-
|
|
Applications references the Applications that will gain access to the specified APIs.
|
|
Multiple ManagedSubscriptions can select the same AppID.
|
|
Deprecated: Use ManagedApplications instead.
|
|
items:
|
|
description: ApplicationReference references an Application.
|
|
properties:
|
|
appId:
|
|
description: |-
|
|
AppID is the public identifier of the application.
|
|
In the case of OIDC, it corresponds to the clientId.
|
|
maxLength: 253
|
|
type: string
|
|
required:
|
|
- appId
|
|
type: object
|
|
maxItems: 100
|
|
type: array
|
|
claims:
|
|
description: Claims specifies an expression that validate claims in order to authorize the request.
|
|
type: string
|
|
managedApplications:
|
|
description: |-
|
|
ManagedApplications references the ManagedApplications that will gain access to the specified APIs.
|
|
Multiple ManagedSubscriptions can select the same ManagedApplication.
|
|
items:
|
|
description: ManagedApplicationReference references a ManagedApplication.
|
|
properties:
|
|
name:
|
|
description: Name is the name of the ManagedApplication.
|
|
maxLength: 253
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
maxItems: 100
|
|
type: array
|
|
x-kubernetes-validations:
|
|
- message: duplicated managed applications
|
|
rule: self.all(x, self.exists_one(y, x.name == y.name))
|
|
operationFilter:
|
|
description: |-
|
|
OperationFilter specifies the allowed operations on APIs and APIVersions.
|
|
If not set, all operations are available.
|
|
An empty OperationFilter prohibits all operations.
|
|
properties:
|
|
include:
|
|
description: Include defines the names of OperationSets that will be accessible.
|
|
items:
|
|
type: string
|
|
maxItems: 100
|
|
type: array
|
|
type: object
|
|
weight:
|
|
description: |-
|
|
Weight specifies the evaluation order of the APIPlan.
|
|
When multiple ManagedSubscriptions targets the same API and Application with different APIPlan,
|
|
the APIPlan with the highest weight will be enforced. If weights are equal, alphabetical order is used.
|
|
type: integer
|
|
x-kubernetes-validations:
|
|
- message: must be a positive number
|
|
rule: self >= 0
|
|
required:
|
|
- apiPlan
|
|
type: object
|
|
status:
|
|
description: The current status of this ManagedSubscription.
|
|
properties:
|
|
conditions:
|
|
description: Conditions is the list of status conditions.
|
|
items:
|
|
description: Condition contains details for one aspect of the current state of this API Resource.
|
|
properties:
|
|
lastTransitionTime:
|
|
description: |-
|
|
lastTransitionTime is the last time the condition transitioned from one status to another.
|
|
This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
|
|
format: date-time
|
|
type: string
|
|
message:
|
|
description: |-
|
|
message is a human readable message indicating details about the transition.
|
|
This may be an empty string.
|
|
maxLength: 32768
|
|
type: string
|
|
observedGeneration:
|
|
description: |-
|
|
observedGeneration represents the .metadata.generation that the condition was set based upon.
|
|
For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
|
|
with respect to the current state of the instance.
|
|
format: int64
|
|
minimum: 0
|
|
type: integer
|
|
reason:
|
|
description: |-
|
|
reason contains a programmatic identifier indicating the reason for the condition's last transition.
|
|
Producers of specific condition types may define expected values and meanings for this field,
|
|
and whether the values are considered a guaranteed API.
|
|
The value should be a CamelCase string.
|
|
This field may not be empty.
|
|
maxLength: 1024
|
|
minLength: 1
|
|
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
|
|
type: string
|
|
status:
|
|
description: status of the condition, one of True, False, Unknown.
|
|
enum:
|
|
- "True"
|
|
- "False"
|
|
- Unknown
|
|
type: string
|
|
type:
|
|
description: type of condition in CamelCase or in foo.example.com/CamelCase.
|
|
maxLength: 316
|
|
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
|
|
type: string
|
|
required:
|
|
- lastTransitionTime
|
|
- message
|
|
- reason
|
|
- status
|
|
- type
|
|
type: object
|
|
type: array
|
|
hash:
|
|
description: Hash is a hash representing the ManagedSubscription.
|
|
type: string
|
|
resolvedApis:
|
|
description: ResolvedAPIs is the list of APIs that were successfully resolved.
|
|
items:
|
|
description: ResolvedAPIReference references a resolved API.
|
|
properties:
|
|
name:
|
|
description: Name of the API.
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
syncedAt:
|
|
format: date-time
|
|
type: string
|
|
unresolvedApis:
|
|
description: UnresolvedAPIs is the list of APIs that could not be resolved.
|
|
items:
|
|
description: ResolvedAPIReference references a resolved API.
|
|
properties:
|
|
name:
|
|
description: Name of the API.
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
version:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|